Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/shXzEmAvYtJuHLRkNnxQ-82MIZM.roa
File: shXzEmAvYtJuHLRkNnxQ-82MIZM.roa (raw, json)
Hash identifier: M4f1T/fp5hI7uRdpwGWAqk/rC/PoYKRz4+Oj8hB6bE0=
Subject key identifier: B2:15:F3:12:60:2F:62:D2:6E:1C:B4:64:36:7C:50:FB:CD:8C:21:93
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7952149A1E5EB25228A1345EAB070A9
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/shXzEmAvYtJuHLRkNnxQ-82MIZM.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 193.233.108.0/22 maxlen: 24
193.233.116.0/23 maxlen: 23
193.233.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:21:49:a1:e5:eb:25:22:8a:13:45:ea:b0:70:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b215f312602f62d26e1cb464367c50fbcd8c2193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d7:87:b7:b3:06:98:ac:6b:3e:0e:da:4f:42:
ae:30:e0:a0:e2:89:6f:89:bf:b0:ca:6c:8f:3f:5a:
dd:6a:6d:04:2e:9a:af:e4:91:a4:24:10:a7:5c:f6:
24:19:5a:3f:5d:57:5d:8e:e5:4e:a3:18:8d:6f:94:
bd:a8:cd:49:a5:71:3d:f6:60:87:39:75:7f:05:f4:
04:bd:e1:4e:0b:75:39:a9:92:26:94:98:07:7b:40:
12:ae:6a:97:f2:83:3b:aa:45:6d:8c:ae:68:2f:88:
d9:7c:9a:90:9f:a2:0b:c4:b5:b7:0a:e1:b0:b1:d1:
c1:5c:dc:db:a6:44:ef:d5:42:ce:ab:34:08:0b:78:
54:15:c3:85:e5:e2:a7:92:da:0c:65:b7:d7:11:e5:
75:bf:cf:4b:cb:84:21:26:8e:b1:f9:10:3a:72:3e:
e8:05:fb:ba:b2:2c:15:1c:f0:0b:b8:03:62:89:64:
00:1b:0b:70:88:9e:fa:b3:f3:93:3c:51:d3:40:70:
07:b7:6e:52:c3:a1:bf:0e:5c:e8:3c:f5:83:1c:33:
0c:24:f5:96:6b:95:e9:e7:f4:10:8c:bf:b2:45:1b:
3f:9e:1f:4a:02:6a:9c:dd:81:9f:8a:bd:db:ab:fb:
14:9c:1c:63:58:ff:58:89:aa:80:dc:c1:62:ec:c0:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:15:F3:12:60:2F:62:D2:6E:1C:B4:64:36:7C:50:FB:CD:8C:21:93
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/shXzEmAvYtJuHLRkNnxQ-82MIZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.108.0/22
193.233.116.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:3c:10:17:27:52:e0:f3:95:f4:eb:13:48:f5:64:8c:5c:98:
d8:e8:10:64:8d:46:6a:50:3f:0c:5d:e6:1f:9b:55:18:8f:a2:
f4:0b:e3:5b:07:48:d0:98:24:6e:e3:d0:24:10:b5:01:f4:cf:
2a:62:1f:96:5a:d4:b3:17:64:55:0b:5f:f7:7a:3f:7f:b5:37:
42:08:cc:83:e9:ba:54:b1:20:03:32:1a:c5:ad:38:df:a1:39:
39:19:f7:be:8d:be:a4:ae:c7:46:b0:04:82:7b:f2:75:4e:8a:
e2:69:92:f9:3e:ac:9b:5e:9c:58:b1:04:70:8b:d1:93:6b:a8:
43:2a:8a:de:e2:d4:c5:b9:4f:0c:14:d4:40:36:31:d6:4e:5d:
3f:78:c1:cd:e6:64:59:d1:76:75:67:67:fe:d3:59:05:1f:1b:
04:67:e0:0f:32:11:4a:e1:f2:41:cb:af:4e:6f:0e:40:83:4e:
ff:33:7d:74:54:6e:1a:97:e4:f0:67:12:17:fc:fc:65:8e:b9:
e3:de:61:68:f2:7e:38:b8:6b:4d:1b:52:80:00:2d:fe:1f:9c:
5b:c8:69:eb:1b:be:b5:3f:15:e4:f9:17:bb:bc:e9:79:84:0f:
e3:80:d5:f8:0e:9c:1b:85:52:8a:df:50:4d:fb:33:96:28:10:
17:4f:d2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:16:14 2024 by rpki-client on console-ams.rpki-client.org