Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/_kkUr4f6hCYHi5imoxirlM4S27E.roa
File: _kkUr4f6hCYHi5imoxirlM4S27E.roa (raw, json)
Hash identifier: /CPXBzk775NAhwNBtF/AjC+FI4CuT4evejyQCnOTr/Y=
Subject key identifier: FE:49:14:AF:87:FA:84:26:07:8B:98:A6:A3:18:AB:94:CE:12:DB:B1
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018EA078E19F273677C4824EB1E81D5A88DE
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/_kkUr4f6hCYHi5imoxirlM4S27E.roa
Signing time: Tue 02 Apr 2024 20:21:00 +0000
ROA not before: Tue 02 Apr 2024 20:21:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 193.233.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:78:e1:9f:27:36:77:c4:82:4e:b1:e8:1d:5a:88:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 2 20:21:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe4914af87fa8426078b98a6a318ab94ce12dbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:98:37:a5:01:0e:42:2e:5a:94:29:40:ce:
b7:e6:8a:95:46:d6:a4:ce:c1:36:fe:ec:e6:34:bb:
47:db:df:a5:1d:e9:40:ca:d8:bc:58:d9:a6:7f:e4:
91:ee:1b:56:48:dd:2a:4f:1e:02:9b:1e:5f:28:92:
43:66:9e:55:81:c5:82:b3:d5:6a:25:56:50:77:8a:
56:04:00:c9:27:28:13:5b:c3:6d:eb:5e:a6:43:1b:
21:76:ef:29:0c:b1:ef:a6:f1:55:7c:c4:b7:fa:9c:
b5:bd:df:c7:4c:e5:0e:f9:e4:a5:80:81:db:df:b1:
22:d2:a6:9d:71:ed:d7:7f:f5:40:19:e3:fc:8b:90:
23:93:b7:7e:0a:a2:e0:e7:b6:ef:50:ef:a2:c0:2e:
24:25:2b:e9:7f:1d:c9:f9:96:7d:dd:db:43:38:3e:
17:83:e6:02:6f:48:63:a3:16:ee:57:86:d1:37:d6:
f4:56:ea:07:84:ef:c7:0c:be:ca:72:9d:f5:57:d1:
b8:50:2d:05:fb:5e:28:be:66:50:73:e8:a7:e7:d2:
da:d7:b4:b2:e3:28:17:9d:af:f9:1d:5e:80:8b:2a:
6a:33:48:e5:93:3f:c1:50:77:75:39:ab:6c:22:8a:
4d:6d:fa:41:67:08:08:fb:6a:4e:d6:a6:4f:6e:52:
8a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:49:14:AF:87:FA:84:26:07:8B:98:A6:A3:18:AB:94:CE:12:DB:B1
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/_kkUr4f6hCYHi5imoxirlM4S27E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.100.0/22
Signature Algorithm: sha256WithRSAEncryption
23:ae:25:3c:47:93:de:01:1d:b0:84:43:f0:b1:00:bc:da:f3:
0e:f0:f9:7e:45:7c:84:40:0a:4b:9d:99:82:b3:e5:5d:ee:50:
83:7d:3e:e5:c9:32:41:fd:99:94:f3:c0:a5:8c:71:a9:c5:4d:
52:85:66:a8:5c:2f:55:aa:3a:b4:ab:47:0d:b9:68:ea:05:6d:
69:24:0a:20:33:bb:3a:b6:af:f7:e9:83:1b:ba:26:24:69:82:
b8:ff:4f:80:a0:bf:9d:93:d6:72:d8:e5:5e:a7:73:60:26:82:
9c:cc:ca:07:7c:5f:04:2c:cf:65:d4:80:92:da:ac:d7:5f:07:
1f:f8:63:f6:03:2b:cf:99:23:9d:36:d3:69:c8:ee:86:79:ac:
d6:0d:8a:13:b7:85:e5:4b:4a:92:0e:b7:1c:95:46:39:08:4a:
28:ca:9a:56:3c:8e:af:e7:57:84:2f:69:df:6d:ab:38:34:ab:
2c:41:fb:bd:a6:11:7b:9e:c0:8e:73:0b:35:30:63:8f:87:30:
3f:77:cb:ea:0a:23:aa:96:67:16:57:47:19:ec:18:e2:be:58:
a9:21:fc:d3:bc:f8:38:04:83:5d:28:fd:ba:33:b4:ce:12:48:
4f:92:00:2f:13:60:20:09:46:36:78:69:1a:8e:56:e6:6d:b9:
7c:c1:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:04:59 2024 by rpki-client on console-ams.rpki-client.org