Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/3iFbSqq4PYAjHprDsnQcc8tsqoc.roa
File: 3iFbSqq4PYAjHprDsnQcc8tsqoc.roa (raw, json)
Hash identifier: kzMYhm+ghkrwsahuG2r5ZK2gp90gVuQEB2SMT80wRKM=
Subject key identifier: DE:21:5B:4A:AA:B8:3D:80:23:1E:9A:C3:B2:74:1C:73:CB:6C:AA:87
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC79533EEEC826E8E74618686B6BA5CAC
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/3iFbSqq4PYAjHprDsnQcc8tsqoc.roa
Signing time: Tue 02 Jan 2024 00:31:33 +0000
ROA not before: Tue 02 Jan 2024 00:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205628
IP address blocks: 193.233.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:33:ee:ec:82:6e:8e:74:61:86:86:b6:ba:5c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de215b4aaab83d80231e9ac3b2741c73cb6caa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e5:3d:a0:e0:fe:71:82:37:3e:c9:7f:f9:70:
44:7c:be:21:30:35:eb:88:ea:00:66:0e:21:ee:a7:
86:9f:8e:ba:4a:c5:08:7d:60:e1:d6:6b:64:6b:d5:
51:7a:68:5e:be:18:45:58:73:5a:c7:50:5c:dd:73:
6b:69:fd:1e:73:e0:3d:39:2c:a6:d1:7e:25:58:28:
89:f7:e0:8c:10:58:89:32:de:dc:68:86:39:a9:60:
48:62:82:62:ee:c2:7f:5e:6b:ab:36:bf:b1:68:81:
ff:44:e1:f3:5d:51:6a:9b:73:91:82:51:f6:a9:8a:
1f:3a:61:ca:2f:bf:70:8f:9f:59:1e:3c:5e:f2:07:
64:93:d4:4a:30:eb:6b:63:54:9f:db:2a:e6:22:e6:
88:d1:8c:cd:b2:78:29:84:61:48:fa:ac:bb:89:22:
ea:ae:42:b7:ac:bd:9d:91:c3:dc:23:65:2c:c7:a1:
ac:a2:5f:dc:88:e1:f7:20:e8:3e:08:a6:87:9f:cf:
4f:d4:87:7a:1c:10:45:ac:e5:f7:f2:e1:95:f9:82:
7d:39:3d:56:d5:5f:20:14:97:7f:36:58:14:00:fd:
21:27:00:be:f0:b3:1e:9b:37:4e:89:78:9b:39:04:
e3:ae:69:ab:da:59:11:6c:1c:68:70:f5:5f:d9:84:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:21:5B:4A:AA:B8:3D:80:23:1E:9A:C3:B2:74:1C:73:CB:6C:AA:87
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/3iFbSqq4PYAjHprDsnQcc8tsqoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.148.0/24
Signature Algorithm: sha256WithRSAEncryption
38:0b:70:4d:07:81:3f:3a:14:1e:00:fa:32:86:9c:a0:76:a2:
11:aa:be:51:18:b1:0d:9f:a1:08:ab:f3:3e:61:32:dd:28:19:
34:ee:57:0b:bc:69:28:3c:0d:8c:19:a8:a4:bd:20:35:79:7c:
51:e9:a9:3b:97:20:60:5f:f1:44:14:de:18:6d:f8:53:91:37:
95:31:22:7e:ff:e4:1e:83:01:4d:8e:7b:5a:d0:27:30:94:05:
92:2c:36:40:14:35:c5:fb:ec:27:c1:ad:5d:66:cd:c0:13:da:
1b:3a:25:68:04:91:7b:6d:47:f6:73:02:1d:dc:77:d7:59:0b:
e7:ac:ca:45:b8:66:5d:d3:9d:c5:ca:f2:53:94:8e:cb:33:75:
f2:ee:ef:dc:03:b2:a7:06:f3:23:78:4b:5c:91:a5:83:e3:fe:
32:bd:b3:cf:1a:f4:5f:db:89:fa:5b:bb:0f:db:e0:6c:fc:fa:
b7:46:f2:a9:62:63:9c:8d:2f:d5:89:2d:9f:88:20:71:17:1b:
ea:bb:d3:d9:c8:3d:79:fa:69:75:05:0e:0f:8b:de:84:ec:05:
4f:d2:ec:f8:be:d9:9d:18:41:10:47:a1:b3:a4:4a:88:fd:0c:
26:8b:a6:4e:39:6a:c1:58:77:16:ef:57:70:37:ff:48:c7:a5:
f8:51:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:12:26 2024 by rpki-client on console-ams.rpki-client.org