Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2GnyheTdo-g4vGX8yQl3k8MKT9U.roa
File: 2GnyheTdo-g4vGX8yQl3k8MKT9U.roa (raw, json)
Hash identifier: ZA99+esctz88caDIntUxlBXoXeVKzsc6xrEbkSR/1VI=
Subject key identifier: D8:69:F2:85:E4:DD:A3:E8:38:BC:65:FC:C9:09:77:93:C3:0A:4F:D5
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7952CD0B6D15936CD06B5509640025B
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2GnyheTdo-g4vGX8yQl3k8MKT9U.roa
Signing time: Tue 02 Jan 2024 00:31:31 +0000
ROA not before: Tue 02 Jan 2024 00:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59584
IP address blocks: 193.233.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2c:d0:b6:d1:59:36:cd:06:b5:50:96:40:02:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d869f285e4dda3e838bc65fcc9097793c30a4fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a0:fe:67:f7:ed:1b:21:c9:13:b5:68:b9:c8:
65:17:17:2b:eb:b4:e1:5b:16:46:34:92:b4:c2:12:
2c:c2:8c:7a:f0:7d:5d:b1:63:3e:29:a4:1b:7d:b5:
a3:ef:0f:d7:ca:09:66:10:81:92:95:24:f9:ae:fc:
a6:24:b1:b8:97:55:d4:d9:a3:b7:9b:c2:52:f5:38:
a7:e6:c3:7a:78:d8:a9:fc:d1:f6:d3:1f:94:5e:72:
b6:60:3c:9b:21:3a:50:93:fc:9f:2f:93:7d:05:a0:
58:c9:85:1e:ed:4c:b8:fa:16:cd:f0:e4:c6:c3:bf:
17:d8:86:f1:ce:ea:13:34:ea:f7:c1:6f:3a:3e:d0:
b4:34:4a:f7:c3:b7:77:e9:c5:03:08:bf:f5:62:25:
72:82:13:a7:58:e1:5e:dd:e1:16:23:87:f5:9b:56:
fe:0c:c6:0b:fc:b9:3c:59:8c:26:b2:c7:7e:ad:ef:
53:94:3d:85:bf:f9:0a:7b:c6:06:14:c8:8d:98:a0:
bd:01:2e:a3:f0:8c:1c:18:c0:14:91:f8:48:4a:1a:
97:83:3c:b2:99:a2:8e:ee:a5:98:92:14:b0:9e:a2:
8a:f8:25:7c:17:68:c2:ba:fa:c3:90:86:b3:ad:76:
c6:db:9b:03:cb:e9:00:83:c2:ca:40:af:b0:8d:59:
ae:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:69:F2:85:E4:DD:A3:E8:38:BC:65:FC:C9:09:77:93:C3:0A:4F:D5
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2GnyheTdo-g4vGX8yQl3k8MKT9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.106.0/23
Signature Algorithm: sha256WithRSAEncryption
07:aa:f3:25:91:4a:a7:18:56:a6:05:b0:f9:07:4c:a9:34:c2:
16:1f:68:3d:43:70:c7:ea:9d:48:e2:a8:3f:b3:1a:cd:cc:c1:
9a:17:59:0a:e2:be:ff:58:ef:50:56:3c:1a:ad:e7:c4:a2:ea:
e9:9b:b8:55:db:92:67:f1:d0:4e:24:51:ee:a6:1c:8c:ef:c3:
27:14:0e:74:cf:98:1a:a3:38:29:73:9f:c0:75:1a:5e:df:f4:
e2:bc:ef:e6:da:d2:11:c6:09:ec:f6:6a:f6:13:17:c9:c8:cf:
5b:b8:1d:47:18:f9:9b:85:f7:72:2e:69:f2:88:d1:05:5c:82:
ee:85:30:4a:15:9d:e8:9e:03:e4:c7:07:75:81:10:1f:3c:3a:
07:10:e0:76:bb:22:36:07:03:7b:2e:2d:11:bc:03:23:0a:82:
b4:70:dd:25:5f:ed:14:64:37:c5:41:bf:b8:2c:b7:6f:28:8b:
69:93:7f:a9:39:6e:db:b9:7b:44:d0:a1:b6:c5:c3:6c:76:3d:
b5:1d:ae:b2:24:d4:18:3c:4e:82:26:d6:5e:94:a9:1b:e5:4b:
6b:ea:50:b5:60:40:e7:66:80:f4:5e:f5:c8:7f:3d:44:01:f5:
88:52:f9:ce:ef:09:4a:a9:56:3b:d1:cf:82:53:12:de:73:bc:
03:54:ee:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:05:14 2024 by rpki-client on console-fra.rpki-client.org