Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/6142EjFhuYPM6uoTbJ2F16dv2po.roa
File: 6142EjFhuYPM6uoTbJ2F16dv2po.roa (raw, json)
Hash identifier: hLIagJcK0+gUpsIbKUP7KbExZOqdwGsT2LAodPZwJiA=
Subject key identifier: EB:5E:36:12:31:61:B9:83:CC:EA:EA:13:6C:9D:85:D7:A7:6F:DA:9A
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CC50115F7E3D52E5DEB589241E1B1E986
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/6142EjFhuYPM6uoTbJ2F16dv2po.roa
Signing time: Mon 01 Jan 2024 12:30:31 +0000
ROA not before: Mon 01 Jan 2024 12:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1015
IP address blocks: 193.57.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:15:f7:e3:d5:2e:5d:eb:58:92:41:e1:b1:e9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 12:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb5e36123161b983cceaea136c9d85d7a76fda9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:9a:dd:73:69:5a:f5:47:f8:81:d5:bb:88:
5f:0e:7b:c1:5a:ee:bc:ed:65:ad:ad:bf:75:67:d0:
b5:78:ae:51:bd:ae:6e:4b:56:de:3c:e0:27:40:3a:
b1:69:c0:39:84:e4:1b:87:03:78:fd:f3:68:cc:18:
05:1b:c5:a2:c2:c1:c2:f6:23:51:30:1a:07:34:54:
70:15:c4:5b:84:cd:f6:c8:1a:4d:f9:35:ec:9c:d0:
41:91:65:e3:27:7c:49:81:ef:39:0a:71:1e:0b:95:
9a:02:27:26:14:b4:74:3e:f2:be:ab:86:65:3e:22:
4a:89:a8:fb:0d:b7:ce:bb:57:7f:76:22:9c:d1:fe:
fc:2a:d8:80:0a:dd:7b:69:61:b3:21:3f:eb:ea:49:
ac:3e:4e:d5:dc:a9:21:5c:03:d5:63:4a:61:98:2f:
bb:e4:be:6f:1b:f9:28:d6:f6:49:cc:c7:b5:c5:eb:
20:1e:13:62:7f:c3:50:ff:eb:ba:a2:dc:ac:98:a8:
b9:c3:84:c4:85:5f:d8:0b:f8:1f:8a:8f:7a:e5:91:
56:12:94:9d:78:f8:f7:1a:09:db:75:d9:c8:ba:93:
25:49:fc:07:36:97:65:9b:0f:a1:90:59:80:5c:da:
d4:43:14:3f:f1:99:ea:28:d7:de:9e:56:5a:8b:9d:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5E:36:12:31:61:B9:83:CC:EA:EA:13:6C:9D:85:D7:A7:6F:DA:9A
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/6142EjFhuYPM6uoTbJ2F16dv2po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.8.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ce:98:36:fd:76:bd:3c:4b:c1:26:ce:66:29:44:5f:8c:69:
59:71:49:6c:82:b0:a2:3f:82:c7:92:ee:c5:ec:90:3b:65:e5:
de:76:85:be:ae:c7:be:c2:9e:ed:2b:e1:68:f8:2a:96:cb:d8:
16:75:69:1e:a0:6e:28:f8:f4:1b:93:58:90:6c:9f:f1:d4:d5:
c7:fb:47:91:64:af:7c:72:7c:eb:c5:75:5c:2e:29:2a:91:26:
07:b8:fd:fc:0f:87:a8:01:87:d9:4e:98:08:50:95:39:2b:2d:
bf:90:60:e8:c7:0e:7f:e3:aa:42:c0:6b:eb:64:40:76:4f:36:
91:75:c5:22:44:13:a9:3b:14:ef:7f:d0:04:08:5b:c0:c9:c7:
b3:23:2a:e9:3a:5a:35:df:7c:fd:aa:b3:0a:88:97:71:c8:ab:
34:57:4b:5e:85:95:a9:db:b7:9e:a9:c1:45:0a:a0:fe:b1:af:
d7:1b:42:5a:04:67:31:b0:59:99:52:dc:80:18:e4:32:6a:2d:
4b:11:fa:d4:0d:f4:99:dc:73:18:9d:26:0d:a9:50:7e:62:4a:
18:8f:32:bf:dc:73:d5:b1:42:3b:61:69:25:22:7a:c6:69:cb:
7e:52:a5:96:b4:30:52:36:6e:cb:8e:81:02:4d:e8:02:d5:65:
33:6d:3c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:39:17 2024 by rpki-client on console-fra.rpki-client.org