Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cACIZXUYrreTUIUBl5KMsKFYGlY.roa
File: cACIZXUYrreTUIUBl5KMsKFYGlY.roa (raw, json)
Hash identifier: eCzJp0ov/kpVpv0k3tDkwVdLhy9oLm0sq4nOqF2ARqw=
Subject key identifier: 70:00:88:65:75:18:AE:B7:93:50:85:01:97:92:8C:B0:A1:58:1A:56
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC79536C501A2D6F8A119F95A2EAC176D
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cACIZXUYrreTUIUBl5KMsKFYGlY.roa
Signing time: Tue 02 Jan 2024 00:31:34 +0000
ROA not before: Tue 02 Jan 2024 00:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210281
IP address blocks: 193.233.134.0/24 maxlen: 24
193.233.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:36:c5:01:a2:d6:f8:a1:19:f9:5a:2e:ac:17:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=700088657518aeb79350850197928cb0a1581a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2b:60:3c:3f:ca:02:d1:98:9e:78:71:f0:40:
72:66:77:0e:0f:85:bc:11:20:9d:98:ea:1d:9d:23:
87:7e:35:70:93:cb:86:11:a9:b9:01:79:c8:a7:b5:
cf:73:84:2f:c1:c2:a0:46:60:6e:0f:8e:9c:4a:1f:
51:b6:1f:60:b6:26:97:60:35:e9:c6:12:90:ed:88:
e5:2c:80:93:5d:18:bc:89:2f:33:ad:aa:3d:d3:56:
26:4d:d6:18:14:1d:0e:87:af:de:b6:f7:48:4f:5c:
de:66:b1:d7:e5:36:17:ca:fc:a2:a0:c8:06:da:24:
de:c6:71:07:b1:b6:d0:be:6f:c5:c0:1e:40:5f:27:
e6:19:42:3e:e1:42:89:ec:d0:d8:fe:16:67:4f:c4:
05:b7:5f:cf:eb:ff:50:c0:05:ab:99:18:ba:2f:e1:
de:a8:34:07:e0:db:34:a8:e4:cb:ab:17:cd:15:c6:
b4:54:f0:05:d0:f7:87:cb:d5:75:5a:3b:90:e8:de:
32:6c:c9:f4:74:63:47:73:29:d5:01:57:60:05:df:
03:ff:e9:14:00:7b:c3:54:f6:af:e1:69:cb:17:ac:
ef:0b:5c:d4:4f:c1:47:84:1c:6c:29:e9:31:fe:3c:
b6:68:e9:f9:1f:14:57:08:f3:f8:82:e5:3e:40:bf:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:00:88:65:75:18:AE:B7:93:50:85:01:97:92:8C:B0:A1:58:1A:56
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cACIZXUYrreTUIUBl5KMsKFYGlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.134.0/24
193.233.254.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0e:43:bf:30:e6:7f:4c:2e:8e:d7:bc:15:d3:fa:4c:f1:e3:
7d:88:ae:31:11:15:8d:e2:d7:3d:a1:07:2d:54:c5:03:61:e0:
b6:5e:f4:58:0d:46:1a:83:63:95:30:ce:be:63:3d:39:22:20:
5f:e8:30:b1:e6:66:76:6f:3c:96:ef:47:b4:4a:69:d4:bb:a9:
0b:60:62:1b:6f:e0:4d:e0:24:64:16:bc:40:2f:d5:dd:93:15:
f5:17:d8:2d:2b:3a:0c:e9:60:27:62:83:1a:b7:cd:54:2e:1f:
ee:32:fa:bc:bf:05:48:e4:44:b6:75:42:10:fd:ce:c0:b5:34:
3c:c8:90:65:bf:a2:bc:c2:5d:26:7f:cc:7e:de:79:c7:ce:67:
92:9c:6a:6e:08:c8:31:57:38:00:ab:84:0b:6b:06:66:5b:1c:
e3:62:50:af:fd:78:bb:b8:2a:b4:f4:96:c2:08:1c:ae:21:b0:
76:bb:23:36:79:e9:47:96:bd:5c:21:97:93:49:b1:47:11:31:
c8:35:7d:54:cb:6c:af:e1:54:ee:c1:1a:ea:a6:31:0d:32:c3:
4d:75:9c:33:3b:93:1a:65:e2:8f:b6:c6:42:fa:c3:e1:db:19:
4c:ca:51:66:b6:b8:20:df:08:63:ec:f1:57:c9:23:58:8d:d3:
1d:32:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 21:39:11 2024 by rpki-client on console-fra.rpki-client.org