Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FiEjJxmKsI7zG8tJmRxPihEtW8w.roa
File: FiEjJxmKsI7zG8tJmRxPihEtW8w.roa (raw, json)
Hash identifier: WC9zO1/OFQKPB2XCAC5IsgdualCltMpVRMqlaQqzLEk=
Subject key identifier: 16:21:23:27:19:8A:B0:8E:F3:1B:CB:49:99:1C:4F:8A:11:2D:5B:CC
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7953464E1B55EA61C28162B89A27D11
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FiEjJxmKsI7zG8tJmRxPihEtW8w.roa
Signing time: Tue 02 Jan 2024 00:31:33 +0000
ROA not before: Tue 02 Jan 2024 00:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206167
IP address blocks: 193.233.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:34:64:e1:b5:5e:a6:1c:28:16:2b:89:a2:7d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16212327198ab08ef31bcb49991c4f8a112d5bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:27:04:2c:d1:c5:b6:44:12:e0:55:8a:8b:
c0:0f:8b:4d:21:03:8f:ad:5b:9e:2e:f1:a2:9b:84:
6d:96:b8:a2:96:80:54:0b:bc:18:82:62:33:5d:88:
85:e4:91:66:cd:eb:9f:71:4c:2f:48:14:bf:01:86:
31:9d:76:10:66:7e:ee:3d:72:ed:00:9c:b7:fa:a8:
f6:fa:02:5f:dd:a0:ad:6a:23:74:03:d8:9a:61:da:
f9:62:34:fa:9e:65:19:35:a8:43:d4:d2:f6:b5:7a:
07:22:4a:ae:05:93:48:e9:80:f8:d1:f0:0b:a5:4d:
da:f2:56:b6:fb:2d:35:b3:1c:6c:ce:d2:df:50:b4:
b6:2c:66:5e:32:29:f8:5f:2a:56:d1:5a:51:38:9d:
21:89:e1:48:70:e4:5d:00:42:80:a9:16:77:7c:bd:
b7:be:5d:28:27:53:e5:de:a4:82:81:17:ec:86:c0:
02:c5:bb:d5:6a:a7:56:2a:6e:b8:1e:14:c1:d0:9e:
c8:ab:39:cd:af:63:c5:53:7c:b1:ad:b9:3a:58:77:
c1:a6:0f:d7:ac:e7:42:00:47:7f:e1:4e:0e:97:b8:
f1:66:c3:be:32:73:54:ba:27:20:38:93:c6:32:81:
52:7e:ad:6d:0e:51:06:0b:fa:9b:69:08:f9:d4:a9:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:21:23:27:19:8A:B0:8E:F3:1B:CB:49:99:1C:4F:8A:11:2D:5B:CC
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FiEjJxmKsI7zG8tJmRxPihEtW8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.165.0/24
Signature Algorithm: sha256WithRSAEncryption
54:16:ab:9a:bc:ba:e7:8c:65:76:d2:a3:25:fb:54:a1:64:9f:
99:ac:0d:10:84:f0:3d:dc:45:26:e9:63:8b:68:10:58:2c:d7:
6e:09:03:4d:63:cf:fc:19:2f:df:0d:86:5c:12:2b:89:c7:a5:
ba:4b:e9:f2:bb:4b:36:72:c9:0e:90:4a:5c:e8:5e:ce:ee:a1:
ce:f3:7f:79:14:26:cf:5b:f0:c0:78:b0:98:8b:68:41:e9:2b:
4d:3f:b3:d3:60:1a:fc:1e:20:c0:1a:41:11:92:06:5c:c5:d3:
05:c5:8f:d5:65:64:dd:9d:2a:6e:ad:a1:47:47:39:1b:92:aa:
f1:86:73:8a:9d:6d:ca:ad:c9:35:16:c0:cd:df:a5:a9:b3:06:
86:e1:b6:3e:69:47:b4:c6:6b:62:8a:ba:6e:dd:9f:bd:71:9c:
11:bb:b1:d8:64:dc:f9:12:09:82:d1:9c:18:73:3a:6b:d2:58:
eb:d2:84:93:2f:e3:4b:65:73:3b:60:7c:74:ed:58:ab:70:4e:
a0:9c:0a:4c:01:27:e8:a3:3f:e7:bc:e5:c1:ea:8d:d9:9f:e3:
0d:0c:4c:12:1d:77:16:ab:da:40:d9:ca:1f:fe:e8:a5:83:59:
2c:a6:43:c6:e6:2b:42:33:5f:97:68:ad:5a:fd:0e:ce:6c:c6:
d3:4b:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:16:14 2024 by rpki-client on console-ams.rpki-client.org