Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sMYYHLIyn1iegRNtsrX5itRgvAI.roa
File: sMYYHLIyn1iegRNtsrX5itRgvAI.roa (raw, json)
Hash identifier: K7SA3fJ767o8m/QA2CEjmbyY1vvinuIlsx35x20Sn50=
Subject key identifier: B0:C6:18:1C:B2:32:9F:58:9E:81:13:6D:B2:B5:F9:8A:D4:60:BC:02
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018F06E95FEF133059C2772DFB2ED026262A
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sMYYHLIyn1iegRNtsrX5itRgvAI.roa
Signing time: Mon 22 Apr 2024 17:45:08 +0000
ROA not before: Mon 22 Apr 2024 17:45:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 193.233.20.0/24 maxlen: 24
193.233.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:06:e9:5f:ef:13:30:59:c2:77:2d:fb:2e:d0:26:26:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 22 17:45:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0c6181cb2329f589e81136db2b5f98ad460bc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:42:5f:ea:19:e0:90:8d:23:37:72:44:46:
1f:ac:56:08:9e:25:53:74:75:b6:a7:45:17:18:5b:
08:fb:60:03:a4:89:d4:16:5b:94:fa:25:5e:de:94:
2c:10:48:e7:25:1e:61:d8:97:61:89:75:69:d4:6e:
1c:e6:a8:f9:bf:53:18:3e:a8:2e:24:34:d3:8e:ae:
89:7d:3a:fc:4a:be:63:d2:d3:85:d0:ce:5c:15:94:
3f:db:7a:c5:32:95:6f:ef:b2:47:97:34:76:3c:c0:
32:70:d3:a0:36:13:a6:4f:bc:d7:08:82:be:f6:69:
15:b8:05:12:8a:40:42:38:ec:bd:55:83:4e:14:72:
16:22:bb:a2:a6:4a:80:fb:1d:de:7e:cd:f7:2e:de:
0a:04:51:68:46:8c:09:11:ea:73:08:93:93:f8:2d:
34:28:eb:a2:81:3b:5f:a0:a1:dd:ba:5d:c8:87:0e:
f1:4c:4d:b3:e4:82:3f:38:01:e7:2a:8a:10:33:db:
1c:c4:d5:27:64:62:8b:f4:bf:92:8a:cc:7e:63:e8:
f3:e4:85:b2:40:e4:ac:45:93:ce:87:23:49:c4:96:
68:a9:65:e1:46:bf:96:cf:1e:67:0c:69:73:c9:cf:
5b:9f:64:66:a4:ec:2b:b6:62:fc:29:63:45:37:f2:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C6:18:1C:B2:32:9F:58:9E:81:13:6D:B2:B5:F9:8A:D4:60:BC:02
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sMYYHLIyn1iegRNtsrX5itRgvAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.20.0/24
193.233.132.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:7a:6d:46:b6:41:98:ee:a6:56:b3:aa:f2:1e:27:cc:af:0d:
a9:8b:b4:62:82:74:6e:dc:95:31:f2:65:3d:d0:a4:5e:56:c5:
12:14:ef:47:05:ac:9f:a6:e6:b8:de:a5:2a:c3:8c:3a:e7:1f:
a1:76:5f:60:56:c5:f5:66:36:0a:e1:c9:e9:3d:81:4c:b0:8f:
65:7f:17:5b:23:53:0a:d7:6a:43:c8:dc:4b:f1:06:16:e5:d2:
f0:6a:a4:3b:eb:3d:48:95:27:71:fc:80:30:d0:e9:10:7e:77:
66:07:18:52:77:b5:8b:3e:13:ba:7b:b9:83:62:7f:ec:53:e0:
5c:ea:3c:93:ee:77:a4:aa:88:5c:c9:bd:ef:5d:02:f2:5c:54:
a2:e8:93:42:e3:1b:2f:fd:29:42:bd:44:6e:bd:92:38:a0:d0:
28:10:e4:21:91:f9:3e:34:31:5a:c1:6f:53:42:8b:33:bf:19:
33:c3:3d:88:96:05:df:d2:68:69:a4:33:02:24:c2:20:c7:3e:
96:01:b0:88:c4:ba:75:05:fd:1f:f9:12:4f:84:94:ce:3d:1d:
2c:99:e2:a7:e0:78:c9:de:bc:b1:8b:66:3a:16:54:66:ad:2d:
cb:c4:32:03:5b:c4:26:3a:1d:a4:f8:d6:4f:6f:fd:b6:b3:73:
34:26:85:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:15:45 2024 by rpki-client on console-fra.rpki-client.org