Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/J0f1gpSqs4QGExwbJ2BAc7FISAg.roa
File: J0f1gpSqs4QGExwbJ2BAc7FISAg.roa (raw, json)
Hash identifier: ooxvNbZls8GdXYNc8N2e6fhYtSHBT4pZIDgv7O40enM=
Subject key identifier: 27:47:F5:82:94:AA:B3:84:06:13:1C:1B:27:60:40:73:B1:48:48:08
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7951F981130424522B09FC9F53ECA39
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/J0f1gpSqs4QGExwbJ2BAc7FISAg.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3229
IP address blocks: 193.233.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 22:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1f:98:11:30:42:45:22:b0:9f:c9:f5:3e:ca:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2747f58294aab38406131c1b27604073b1484808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:af:60:1b:1e:22:6a:ca:e0:18:03:0f:ea:
81:cf:cd:99:ca:c6:49:4b:f4:63:34:d0:d1:f6:cc:
f2:ff:c6:eb:1c:9b:32:48:50:84:f0:20:a2:8d:83:
3d:8c:7f:8a:76:48:68:46:4c:4e:ce:f5:f3:16:c8:
3f:53:bb:58:40:7d:af:dd:b8:c4:35:cd:17:52:43:
26:c4:14:38:50:7a:0f:bf:68:e7:9b:67:18:93:5f:
c3:24:6a:03:2a:34:a0:3f:b8:f3:bc:b3:ec:ab:29:
3c:fe:ad:83:79:5b:97:07:71:03:ec:e4:1a:78:04:
2c:87:cd:ed:05:8d:cb:6c:e9:02:8f:35:76:ea:03:
da:a7:dd:59:4d:16:7a:8c:05:e4:5b:94:11:2f:18:
60:7e:92:45:14:06:fa:17:bf:ee:fc:2c:a3:62:f2:
84:f3:9a:d8:12:ee:07:33:73:cb:a5:9a:15:76:25:
d4:30:20:14:f2:83:8d:20:93:aa:81:8c:54:9c:1e:
ba:6d:fd:54:89:2b:f2:ba:d8:f0:4d:f3:19:36:93:
c9:b7:ff:ce:50:87:04:e5:65:e3:17:d7:67:6a:e6:
7f:0c:ce:a6:cc:24:bf:b3:dc:ba:ed:c4:90:67:8a:
80:92:af:ac:cb:3f:92:74:cd:b7:06:c0:e2:b6:06:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:47:F5:82:94:AA:B3:84:06:13:1C:1B:27:60:40:73:B1:48:48:08
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/J0f1gpSqs4QGExwbJ2BAc7FISAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.172.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:75:89:f9:55:bd:78:7e:af:46:fe:38:25:6c:fc:43:5c:25:
7b:b7:d5:2f:f6:1f:29:17:50:47:30:08:5f:94:19:9e:7d:4a:
b7:1e:f5:c0:32:c1:71:64:0d:ee:0b:58:f6:55:ff:12:da:3d:
cc:a0:36:42:e3:f3:a4:a1:8d:4e:d0:05:41:be:fb:e6:4c:30:
d8:b5:aa:5e:db:8d:4d:4e:d8:f1:46:d7:9a:21:8d:6e:c7:a9:
b9:22:9a:d2:a5:50:97:e9:07:e8:29:19:0b:92:b7:c5:be:07:
77:f7:53:ef:1b:86:75:6d:dc:6a:25:47:7f:19:a3:8e:76:fc:
af:7a:46:0f:34:fc:49:86:94:22:de:b6:af:13:37:cb:69:3e:
02:b9:ee:8e:b7:39:af:c6:f6:84:a9:2a:b3:0d:1f:df:f7:34:
19:2b:c9:38:1b:04:33:b2:48:a0:e5:4c:fb:f7:a8:6c:b0:32:
42:dd:37:58:93:5f:a9:e5:e2:eb:c1:a0:35:e7:54:02:a8:e9:
12:63:7b:be:4a:3a:55:42:0c:25:5f:ec:b1:12:21:81:77:7d:
82:3d:c5:11:c9:92:97:bd:25:a3:fe:e4:2a:d2:20:af:50:20:
16:12:4c:00:77:60:6b:53:5d:28:50:8a:f7:c3:3e:b6:a4:d7:
80:09:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:16:02 2024 by rpki-client on console-ams.rpki-client.org