Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5qnhXUEKFGEI5rz_nJiIa4sDpsQ.roa
File: 5qnhXUEKFGEI5rz_nJiIa4sDpsQ.roa (raw, json)
Hash identifier: TflQkITWCdcgM6d/QiQ927wiy5D6KuT4iXpC0BXyLRg=
Subject key identifier: E6:A9:E1:5D:41:0A:14:61:08:E6:BC:FF:9C:98:88:6B:8B:03:A6:C4
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7952BC8A74824F3B0CCB6683723F187
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5qnhXUEKFGEI5rz_nJiIa4sDpsQ.roa
Signing time: Tue 02 Jan 2024 00:31:31 +0000
ROA not before: Tue 02 Jan 2024 00:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56380
IP address blocks: 193.233.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2b:c8:a7:48:24:f3:b0:cc:b6:68:37:23:f1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6a9e15d410a146108e6bcff9c98886b8b03a6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:01:60:21:8a:53:dc:91:ed:b0:ac:02:86:
0c:74:13:e6:f7:6d:45:06:86:3a:13:2a:8c:c2:c6:
b1:35:37:13:93:d6:da:64:af:80:f1:b9:fa:d4:56:
cf:4b:19:65:b4:f9:b3:fc:2a:25:2e:91:b0:ff:fb:
ee:12:b9:dd:41:0d:4c:bf:1e:9a:15:ff:65:b6:bb:
dd:91:b0:0d:ac:38:0c:ed:3b:6d:2a:95:ab:6d:b6:
1f:5d:bb:2c:fb:9d:c5:b9:ec:0d:98:42:eb:b9:78:
10:bb:df:a1:af:d5:dc:f8:87:88:07:82:ff:75:7e:
c8:4a:8f:46:68:75:15:60:a3:03:6d:f8:3d:88:68:
61:b4:9b:55:79:14:98:4a:05:64:6c:2f:ac:ad:67:
38:5b:45:c6:56:6e:5b:38:e1:a5:03:27:3b:3d:49:
18:fb:08:04:29:4c:b2:41:20:06:e5:07:1f:97:15:
7c:bd:12:79:6d:1c:e5:96:1a:8f:f8:b1:fa:c7:fe:
02:b7:0f:56:bf:7f:ff:33:5b:90:45:e2:84:9f:f2:
d6:a6:0d:da:80:a2:d6:44:d7:32:ea:35:2f:46:12:
1f:cf:35:43:40:d5:95:55:6d:26:2c:dd:ed:76:15:
6b:b6:88:63:12:9e:63:f1:03:77:5d:ed:e2:61:0b:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A9:E1:5D:41:0A:14:61:08:E6:BC:FF:9C:98:88:6B:8B:03:A6:C4
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5qnhXUEKFGEI5rz_nJiIa4sDpsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.21.0/24
Signature Algorithm: sha256WithRSAEncryption
28:06:dd:2f:82:ce:8e:cc:58:7a:1f:75:c9:e7:9b:28:d5:9b:
24:de:f6:6a:c8:f2:fa:2b:60:ad:19:58:14:cb:c7:4b:4a:b0:
8b:d4:ec:5c:bf:ba:74:be:fb:e2:b0:4f:8a:10:3c:ce:2c:43:
88:1b:dd:d0:90:2e:07:08:a8:b2:1e:ca:d3:61:de:1d:1d:28:
e4:7c:a0:d5:f8:84:a0:db:30:21:85:e9:58:48:c3:2d:2b:e0:
34:e2:a7:75:31:fa:f5:b6:a2:22:86:b7:3c:99:8c:f3:16:83:
96:18:3e:3e:a8:1a:93:f6:13:d3:31:c5:a5:33:70:8a:68:02:
c2:f1:dd:58:2b:7f:5f:ea:42:89:55:1d:91:49:e3:c1:73:14:
0e:ca:25:3f:7c:c8:e2:24:b7:a8:8c:d3:32:4a:12:a9:62:e1:
01:7f:72:3d:fe:21:63:09:7a:8a:71:85:04:bc:23:b2:93:68:
cd:a0:56:ba:c1:36:9f:89:57:9e:3d:d0:17:fb:aa:ff:ab:8a:
16:1e:da:13:c9:1c:25:fc:88:e0:d4:e0:63:a0:62:04:0e:5d:
b1:ed:5f:56:58:41:cc:c7:3d:39:c0:a5:af:6a:e3:b9:8e:0a:
49:fd:72:07:b9:36:13:68:9b:2c:36:30:ea:97:ce:ec:7b:a4:
c6:bd:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:16:14 2024 by rpki-client on console-ams.rpki-client.org