Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/IhXslbopcpOxkL5-L3mje9U_h_Q.roa
File: IhXslbopcpOxkL5-L3mje9U_h_Q.roa (raw, json)
Hash identifier: qKraNcVJ4mndFzCfHc7hpwWW5hZl/aUw6XqL/w9I6tg=
Subject key identifier: 22:15:EC:95:BA:29:72:93:B1:90:BE:7E:2F:79:A3:7B:D5:3F:87:F4
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC79520A82B88A89B11CFD15769754F30
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/IhXslbopcpOxkL5-L3mje9U_h_Q.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6869
IP address blocks: 193.233.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:20:a8:2b:88:a8:9b:11:cf:d1:57:69:75:4f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2215ec95ba297293b190be7e2f79a37bd53f87f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2f:67:ea:55:84:5a:e7:38:74:d4:c0:0d:97:
f3:d2:a6:9f:19:04:07:6f:bc:32:80:8f:30:ed:b5:
32:6f:dd:d9:6f:c4:a4:5e:d9:af:ee:45:a5:bd:20:
bf:67:35:37:51:ff:c1:e8:04:d6:5a:75:4c:56:0e:
72:8f:a1:2b:d4:00:91:8c:92:34:4c:99:92:f4:58:
b8:cc:35:74:a8:5d:3b:43:38:6c:7d:dc:40:32:ce:
94:73:3c:c8:be:a2:05:3f:a9:77:1f:eb:07:0c:bc:
bb:04:17:71:e6:c8:e0:c7:d4:98:dc:d7:62:7a:5a:
c1:08:a6:9d:59:9a:38:fa:ed:38:98:f8:06:87:cd:
ca:b0:cb:45:a4:b0:72:18:06:cc:13:46:91:b4:bd:
ef:4b:dd:fd:8c:0a:fb:d5:b0:40:05:f2:25:9c:1a:
05:53:0f:6d:5f:dd:4e:1b:24:ca:f7:af:b3:25:18:
f4:ac:cb:45:a2:35:f5:8b:89:f6:a3:aa:cb:ff:27:
23:b6:7b:ee:60:d5:67:8d:8c:9f:dd:35:6e:68:9c:
40:0a:aa:ff:4f:15:41:5e:b2:af:dd:7d:e7:37:42:
35:07:4e:fb:ce:93:fb:be:26:00:b1:40:38:1b:84:
91:4c:20:1e:41:2c:92:21:34:0b:02:15:cf:fb:3c:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:15:EC:95:BA:29:72:93:B1:90:BE:7E:2F:79:A3:7B:D5:3F:87:F4
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/IhXslbopcpOxkL5-L3mje9U_h_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.152.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:8f:bf:24:83:0a:37:5f:84:ad:49:b2:48:1d:ee:73:5a:7f:
fd:ce:8c:f0:f5:bc:94:55:3b:57:d0:09:71:05:8f:90:49:e3:
4d:94:14:99:e9:5a:b8:ce:bf:40:32:4c:bf:98:c5:dc:85:bf:
86:89:e6:b0:a9:9e:68:6f:b8:48:50:a7:78:d7:c5:a6:e4:4c:
3b:cf:c6:a6:cd:09:72:12:19:ed:af:73:c0:5e:9c:2c:22:ad:
d2:97:24:16:f6:bc:0d:fd:6b:8d:1d:ac:6c:eb:d0:29:54:ef:
ca:0d:28:84:00:54:f7:61:8a:47:da:9a:16:86:17:bd:aa:90:
03:fe:33:f8:58:e7:71:54:2f:47:f1:00:51:ae:ef:d6:5b:f6:
3f:fa:b5:88:5b:1a:31:6a:83:0f:32:31:ce:ae:01:76:b1:2b:
45:87:64:b5:ff:d6:8e:f2:55:68:0d:c8:21:d0:d1:5a:8b:41:
06:9c:fa:69:56:fc:f9:c4:ec:ef:5b:ed:79:80:10:26:eb:d3:
fa:e1:9b:de:29:5a:81:1a:85:50:05:bf:8c:49:29:19:e1:3b:
d6:86:d3:09:63:27:a9:c9:97:b9:fa:f3:60:7e:8e:37:1c:ee:
a9:2f:9d:42:c4:14:ff:9f:6f:53:4e:90:81:54:d7:51:0a:5f:
e0:bb:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:26:01 2024 by rpki-client on console-ams.rpki-client.org