Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9WI1o1YaCzIlXB19wTaUfzOfNxw.roa
File: 9WI1o1YaCzIlXB19wTaUfzOfNxw.roa (raw, json)
Hash identifier: 4V3UAKIcfgW/CjwSOKSXlaFji0ZEdHPmfrX8ciXQCK8=
Subject key identifier: F5:62:35:A3:56:1A:0B:32:25:5C:1D:7D:C1:36:94:7F:33:9F:37:1C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7953A22CE5DACBF015619F013BBDA09
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9WI1o1YaCzIlXB19wTaUfzOfNxw.roa
Signing time: Tue 02 Jan 2024 00:31:34 +0000
ROA not before: Tue 02 Jan 2024 00:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212980
IP address blocks: 193.233.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 22:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3a:22:ce:5d:ac:bf:01:56:19:f0:13:bb:da:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f56235a3561a0b32255c1d7dc136947f339f371c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:11:2b:d0:42:1f:0e:cb:18:23:f9:0c:c6:
8d:fc:6b:8f:c8:48:42:9e:5f:a2:93:01:d2:37:28:
f0:a8:dc:8c:5f:a5:71:31:c4:0f:09:74:c0:2b:9d:
fd:bd:9d:70:68:7d:02:25:37:0e:24:33:42:9d:d4:
09:d7:a5:a5:86:15:a1:d3:94:5c:8a:4d:1b:8a:68:
4d:08:94:5b:20:bd:33:c5:39:74:2f:d5:69:c7:a3:
92:cf:60:7c:08:4f:54:d9:2d:87:46:e9:25:f4:16:
07:ed:07:e6:99:b2:86:5d:46:7a:61:3f:2c:d2:39:
70:87:a9:dd:06:93:0c:39:fb:e1:f0:22:be:78:e6:
13:e6:c4:00:21:ec:de:cf:1f:bc:4e:31:e3:93:8e:
11:50:a0:68:81:04:a8:21:e2:ac:ba:e9:41:6b:f1:
e3:f0:55:a5:ec:ba:95:53:a8:a7:86:34:e4:16:e9:
d9:7b:0d:1f:d4:1f:89:7a:99:ee:3c:de:44:f2:e1:
0e:16:bf:a2:1c:25:93:03:09:1e:5b:f0:97:01:aa:
0d:5a:5d:a2:96:45:1a:96:6e:3d:72:19:5d:17:14:
7f:01:8f:46:19:24:ef:81:59:e9:88:52:cc:e7:65:
36:ac:7f:51:b8:e7:2b:67:79:cc:17:5c:8a:2a:ff:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:62:35:A3:56:1A:0B:32:25:5C:1D:7D:C1:36:94:7F:33:9F:37:1C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9WI1o1YaCzIlXB19wTaUfzOfNxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.196.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6f:7d:5b:df:ac:60:c3:08:35:18:ea:23:b6:f2:92:c2:24:
ab:ab:fe:a6:cd:e8:cd:4e:30:18:b3:7b:8f:eb:66:20:43:37:
a3:c8:b0:0a:25:f8:e7:24:12:56:36:b8:21:c3:a1:6e:f4:74:
36:65:ce:2f:87:8b:81:bf:b9:6c:40:a1:e8:44:4a:4d:59:8e:
ac:e1:fe:0f:d0:19:f5:34:55:4b:87:ac:37:68:3c:ac:ba:e2:
25:d2:ef:19:fb:17:7b:ab:6e:32:f7:86:40:f1:45:5b:a8:c3:
89:e4:0f:e4:a6:15:95:76:79:2d:5f:c8:b6:6c:f7:b3:69:f7:
1a:8f:b1:ce:70:e5:0e:4e:64:53:e1:f9:7c:41:de:3b:00:17:
e1:bd:50:4d:d0:0b:54:97:29:0d:54:b2:19:da:84:c5:39:89:
a4:06:6e:e9:76:e0:b0:a2:d1:57:18:0b:fc:34:eb:d9:fd:38:
77:d1:84:73:7a:be:ce:e7:69:53:92:7c:d0:e1:23:5b:04:6b:
bf:f3:9e:b1:14:f1:fb:57:9d:ea:77:3e:01:d9:30:99:4c:94:
b5:64:00:59:e5:1c:e6:6e:af:6f:5c:42:24:4c:d0:88:99:0f:
52:3c:82:6f:e8:0b:de:90:88:88:68:b8:b7:6f:2c:df:3f:31:
79:9c:44:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:05:05 2024 by rpki-client on console-fra.rpki-client.org