Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/xpUkK7qPSTcAPbJsqS0d9XaU6zk.roa
File: xpUkK7qPSTcAPbJsqS0d9XaU6zk.roa (raw, json)
Hash identifier: EaSE2NesA0yVYDIJfDdpJPt5K/TfqPCFt9quob49IcY=
Subject key identifier: C6:95:24:2B:BA:8F:49:37:00:3D:B2:6C:A9:2D:1D:F5:76:94:EB:39
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019027C9A0EC1784C7684E5872D98E8594B0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/xpUkK7qPSTcAPbJsqS0d9XaU6zk.roa
Signing time: Mon 17 Jun 2024 20:00:43 +0000
ROA not before: Mon 17 Jun 2024 20:00:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398343
IP address blocks: 193.233.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:27:c9:a0:ec:17:84:c7:68:4e:58:72:d9:8e:85:94:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 17 20:00:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c695242bba8f4937003db26ca92d1df57694eb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:f8:7d:7e:f3:49:29:1b:c7:eb:65:79:79:
50:0b:8f:77:2a:26:60:d6:fd:60:32:8d:dd:b0:85:
3d:0b:24:62:61:8e:7f:b5:41:19:53:38:d5:60:05:
c3:56:8e:b0:81:53:da:55:7c:1b:41:02:ec:b0:d5:
b3:08:ca:30:53:be:be:8d:93:3a:14:91:39:39:46:
8c:fa:d1:2b:2c:e7:1b:82:8d:e1:f4:62:b1:4d:cb:
1a:cb:6e:59:fe:00:cf:9d:65:8e:c9:b2:20:02:f4:
6c:ea:38:09:c4:32:d5:3d:b0:e8:f0:f5:43:33:79:
bd:a2:4a:ee:2f:8d:0e:a5:78:b4:c0:7d:4f:c9:10:
f7:e9:f8:ad:37:27:2b:5d:62:30:a3:49:43:cb:e4:
15:40:f3:1d:c5:6d:55:b5:41:51:e4:01:74:d9:d4:
08:f9:3b:73:bc:2b:db:58:8f:fe:03:7d:36:b2:bb:
b7:cb:6c:7b:3b:80:02:85:02:39:c0:84:4e:60:ca:
0d:f2:52:32:e3:0d:af:eb:79:80:33:fb:13:4f:ba:
28:f3:31:02:a6:b8:bc:cd:c5:9d:b8:55:9d:6e:3a:
09:db:4a:f3:d1:25:e7:89:53:1d:ad:d9:43:de:bc:
d0:1e:a6:1f:e2:a2:30:22:54:92:48:a9:7b:f5:80:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:95:24:2B:BA:8F:49:37:00:3D:B2:6C:A9:2D:1D:F5:76:94:EB:39
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/xpUkK7qPSTcAPbJsqS0d9XaU6zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:83:f3:1d:01:19:7f:a1:55:8d:df:0f:32:9b:af:cf:6c:6f:
f5:16:68:09:74:40:de:f6:b5:9f:7c:4f:4d:b8:fa:66:6d:cd:
43:fe:59:e6:b0:59:58:0e:0d:f7:07:69:be:04:b3:81:28:0b:
64:90:71:dd:c9:e8:a9:e2:72:48:6f:16:5a:16:79:cb:4c:16:
8c:21:44:74:ab:23:5b:97:26:a0:81:4d:43:99:90:a7:94:9a:
d8:a4:08:35:af:37:53:26:b7:b2:a1:a3:7d:1d:2e:dd:25:64:
de:d0:f0:bd:b8:69:2d:8a:00:63:2b:cf:d0:35:bd:98:e4:9a:
83:58:41:bb:69:25:97:85:b3:74:10:9d:11:42:79:20:90:5c:
82:bb:2f:dd:17:a8:22:e4:f1:32:37:57:ec:33:62:7d:39:50:
ae:c3:a0:dc:20:a5:55:7d:b6:cb:75:7d:ce:6e:12:85:af:0e:
f1:23:28:29:00:e7:48:a6:12:fb:e4:2d:c2:a2:c1:c2:49:60:
9e:71:fa:51:38:f8:07:86:2e:08:d5:f4:47:6c:63:9c:b8:d5:
0e:c7:13:bf:95:34:1f:a4:06:84:a0:aa:93:10:30:5d:b1:06:
8c:b7:93:b9:e6:b5:15:70:84:54:14:7d:8d:4a:74:11:e6:c2:
59:01:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:16:46 2024 by rpki-client on console-ams.rpki-client.org