Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rtxnkoEifcBe0MJ0cxOuDJMGRb4.roa
File: rtxnkoEifcBe0MJ0cxOuDJMGRb4.roa (raw, json)
Hash identifier: 6eKwLsbG3L+oksUY5QI1a54rbSor2Pl2hy5qs3L+XP0=
Subject key identifier: AE:DC:67:92:81:22:7D:C0:5E:D0:C2:74:73:13:AE:0C:93:06:45:BE
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7953292E4B6310114CE25F826FD42BA
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rtxnkoEifcBe0MJ0cxOuDJMGRb4.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204833
IP address blocks: 193.233.17.0/24 maxlen: 24
193.233.160.0/24 maxlen: 24
193.233.78.0/24 maxlen: 24
193.233.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:32:92:e4:b6:31:01:14:ce:25:f8:26:fd:42:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aedc679281227dc05ed0c2747313ae0c930645be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4e:4f:27:45:9e:5b:af:de:33:5d:79:fe:ad:
fb:0e:ae:66:95:02:e5:62:cc:18:8e:df:79:9d:64:
b3:98:d3:35:ed:34:4f:e1:aa:98:3a:c4:d1:76:1f:
b5:37:31:d4:07:c9:00:f2:ec:05:2f:06:c8:5c:c3:
2a:36:25:e9:f5:6c:be:06:4e:d1:1b:67:95:75:20:
fd:c1:9e:ef:0a:98:e0:57:f5:a3:ae:6d:79:6c:40:
13:6c:7a:19:6d:92:1e:aa:58:ad:e9:75:72:c3:d9:
ae:c5:86:fd:3c:ea:b1:b8:46:30:ea:b0:33:56:65:
a9:22:5e:42:ac:35:cf:e1:17:2e:6b:6d:f2:81:c1:
90:f7:c5:a1:f4:32:71:0e:82:7a:43:0f:9e:c4:85:
48:9b:54:d6:8f:6a:d9:6d:e7:4a:66:c9:bb:9a:1e:
e3:f7:87:7a:52:14:d3:e3:3e:97:31:2d:cb:35:9f:
86:1d:9f:5f:3d:df:25:aa:7d:32:b4:a0:b3:6d:91:
9e:38:7b:49:90:c3:ad:88:9d:82:9c:a9:86:38:cb:
e1:d7:f9:73:0e:f3:5d:82:40:71:c9:c0:e9:65:55:
c1:04:23:11:ec:0a:f1:10:cf:e0:bb:a1:7b:e1:cf:
ca:1b:2e:21:c3:36:97:af:26:c6:0e:8a:0c:8c:64:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DC:67:92:81:22:7D:C0:5E:D0:C2:74:73:13:AE:0C:93:06:45:BE
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rtxnkoEifcBe0MJ0cxOuDJMGRb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.6.0/24
193.233.17.0/24
193.233.78.0/24
193.233.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0d:a0:14:f5:5e:9f:31:f2:80:61:3f:4a:65:2c:a6:5d:57:
a8:06:67:33:c7:fe:6b:1a:79:09:20:e9:22:19:45:89:d1:c6:
c6:ff:a4:da:11:90:95:6e:ea:49:e4:81:fa:9d:5c:d7:e2:80:
6e:01:be:ad:b5:80:f6:cd:91:43:b3:e8:07:30:06:1e:ad:d1:
21:1c:fa:59:d8:56:2e:03:6c:63:3d:f3:16:b7:9d:64:78:1a:
7a:d6:cd:76:66:ef:4b:4e:d7:ec:e4:7d:e0:b1:29:45:cb:45:
96:43:eb:28:5d:27:95:95:0e:97:8d:a0:86:92:fa:04:d6:92:
2e:a2:e3:84:9c:8c:23:78:04:81:79:d4:3b:ba:05:0c:68:c9:
e3:90:57:42:e4:b8:79:3e:38:6c:c6:39:55:83:03:ca:bf:fd:
68:12:21:5a:79:15:ff:85:7f:a4:b9:cf:85:bb:76:c4:64:89:
ee:bf:c6:31:fd:64:55:d3:ca:df:0f:62:b6:30:03:17:47:e6:
f7:18:d6:7a:04:9d:06:a5:57:e7:55:81:73:11:ad:48:64:3b:
5e:71:1f:6a:3c:33:ad:dd:a3:a2:6a:72:a4:3d:c5:91:1e:36:
10:ab:76:e1:57:b6:bb:df:0f:63:09:d4:89:72:1f:f8:1b:9c:
56:76:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:16:14 2024 by rpki-client on console-ams.rpki-client.org