Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1dneIaurTT8LX9uGFuGbrVovMyI.roa
File: 1dneIaurTT8LX9uGFuGbrVovMyI.roa (raw, json)
Hash identifier: 1HiRnJz/xZR+CXWwqYhAdcxp3v2NDdc2pcH9VV192UE=
Subject key identifier: D5:D9:DE:21:AB:AB:4D:3F:0B:5F:DB:86:16:E1:9B:AD:5A:2F:33:22
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC79522DE73C03BE378EC2F97FDEF46A4
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1dneIaurTT8LX9uGFuGbrVovMyI.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20549
IP address blocks: 193.233.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 22:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:22:de:73:c0:3b:e3:78:ec:2f:97:fd:ef:46:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5d9de21abab4d3f0b5fdb8616e19bad5a2f3322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1e:9c:bf:2b:60:c2:b3:5d:82:5b:cb:85:26:
8b:45:c4:7a:ec:85:65:61:f6:ed:3a:2c:47:50:5c:
29:78:95:33:2f:27:a7:c3:e5:93:6a:58:57:b2:04:
2f:c7:4c:0e:d6:83:1a:16:cb:23:c5:60:4e:0c:ba:
33:a8:16:f8:92:63:4d:d8:a4:a8:3b:1a:d6:1e:15:
85:1e:28:b3:f9:c2:c4:31:bb:71:c3:2f:3c:9e:50:
3d:73:28:db:6e:d8:82:82:c1:a8:c9:74:9b:a6:1d:
7d:f1:b1:5d:7a:62:dd:9e:62:e4:6e:b0:6b:1f:1a:
3f:a9:77:16:d6:1d:b1:f4:6b:8f:d5:28:c6:3e:ac:
dc:36:2f:5c:d5:9f:ea:88:36:82:f3:ab:d9:05:ce:
2f:82:c2:c3:85:29:fc:eb:a7:3c:c8:f6:62:67:0e:
bc:49:cd:cb:b7:2e:24:ae:7a:8e:8a:c4:57:5e:d4:
98:ef:e8:5d:f5:32:cf:0e:30:5f:d1:d3:c5:4d:09:
1f:29:47:0f:a0:72:af:19:11:dd:2e:00:b8:80:75:
55:07:13:57:4b:40:0c:63:31:8a:46:e5:7c:b5:06:
2f:4a:8d:c5:d8:85:98:5c:7f:97:af:7e:6c:af:a1:
a8:d4:4c:9b:5c:c9:65:5a:46:51:04:d7:30:c5:f8:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D9:DE:21:AB:AB:4D:3F:0B:5F:DB:86:16:E1:9B:AD:5A:2F:33:22
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1dneIaurTT8LX9uGFuGbrVovMyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.64.0/21
Signature Algorithm: sha256WithRSAEncryption
48:06:35:7b:f3:67:5e:67:ca:73:1d:d9:e1:1d:1b:48:64:9b:
fc:5f:ec:f9:2b:8d:08:9d:05:da:c3:e3:44:1e:7c:96:da:fc:
63:ce:41:d4:2b:a1:cf:a5:46:9f:29:76:7a:9e:85:e4:95:3c:
47:c8:c0:6e:ea:f0:b2:15:d1:e2:a4:38:d9:71:c5:80:30:69:
10:69:c8:51:20:f1:d5:cd:d8:a4:e9:56:53:b1:55:5e:06:55:
e4:3e:aa:65:72:39:dc:64:24:c1:1c:55:b1:38:12:09:a8:cf:
fd:7a:3c:a0:1d:8c:58:f7:58:b7:60:a4:2a:cd:13:fe:0f:f2:
24:7c:01:3e:27:56:30:53:ee:e7:41:bd:38:36:c7:ad:17:a1:
0e:f8:2f:14:0a:c6:d0:77:57:24:34:98:e8:61:be:30:e6:a9:
cb:f8:2a:8b:ca:62:af:be:d4:a4:18:bb:ab:8e:9f:17:af:9a:
2f:f3:19:59:1f:da:d2:b2:a2:6b:cc:34:d5:35:72:a8:af:6a:
a5:79:a7:e7:04:a9:7d:50:f8:eb:18:2c:fe:d4:43:b6:c1:cf:
bf:21:57:9b:2f:58:92:36:dc:9d:a0:b0:30:de:37:24:55:00:
1f:b4:aa:db:95:14:1f:6d:2e:e7:49:55:78:37:df:00:22:82:
e1:09:77:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:05:05 2024 by rpki-client on console-fra.rpki-client.org