Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/52qgMkRDkWj_X_FpVo4-AocZde4.roa
File: 52qgMkRDkWj_X_FpVo4-AocZde4.roa (raw, json)
Hash identifier: iwosSNMasMRGWOBJu+XMfaSeSEYGydlmdYE7l3EP3Hs=
Subject key identifier: E7:6A:A0:32:44:43:91:68:FF:5F:F1:69:56:8E:3E:02:87:19:75:EE
Certificate issuer: /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial: 018CC6B8054A73F345F27FE0901E26FAAD87
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/52qgMkRDkWj_X_FpVo4-AocZde4.roa
Signing time: Mon 01 Jan 2024 20:29:57 +0000
ROA not before: Mon 01 Jan 2024 20:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31420
IP address blocks: 193.151.80.0/24 maxlen: 24
193.151.83.0/24 maxlen: 24
193.151.81.0/24 maxlen: 24
193.151.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:05:4a:73:f3:45:f2:7f:e0:90:1e:26:fa:ad:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Validity
Not Before: Jan 1 20:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e76aa03244439168ff5ff169568e3e02871975ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:e1:72:88:a2:a7:d4:ff:d7:7b:96:3c:9f:
fc:b6:5c:15:2a:46:a8:0a:21:85:c6:68:dc:ec:c3:
b6:76:e3:ac:09:01:9f:9d:27:bc:be:45:21:47:38:
f6:c5:dd:88:72:cd:fd:a2:50:45:e2:e4:a4:1a:29:
63:bd:3c:7e:c6:08:66:ea:d7:19:29:dd:86:dd:34:
b4:6b:0c:37:4f:b3:80:05:01:ec:11:cd:0a:db:73:
6a:82:03:14:87:d9:66:41:43:20:98:7e:2e:20:54:
51:2f:f2:1b:ff:cd:c6:15:18:64:dc:94:eb:17:46:
ce:df:a2:75:c9:37:64:d5:01:ab:0f:b0:fd:52:c7:
e4:a4:57:36:00:c3:23:0d:6b:64:3e:49:11:aa:71:
4f:3b:65:9e:a3:75:bc:1c:2c:3c:39:44:ff:33:84:
b9:ae:bd:77:3a:7f:88:83:40:41:ef:44:19:3c:4f:
f1:b2:cb:5c:5f:17:b6:04:8a:b6:a4:c3:0d:4f:25:
e8:d5:4b:e8:45:09:cb:db:ee:70:1b:bf:0e:c0:d4:
e2:d9:23:89:35:bb:62:76:6f:c1:99:c1:6e:a8:91:
53:8d:48:47:ac:8c:a1:25:57:27:a2:d1:ac:e5:d8:
b1:bc:4b:3f:bb:9e:47:3c:dc:54:b8:af:2c:f8:fa:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6A:A0:32:44:43:91:68:FF:5F:F1:69:56:8E:3E:02:87:19:75:EE
X509v3 Authority Key Identifier:
keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/52qgMkRDkWj_X_FpVo4-AocZde4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.80.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:01:33:f2:4e:4d:9a:8e:a4:0d:7e:1f:dc:91:1a:96:1b:dd:
7b:a8:0d:d9:35:63:31:89:46:67:fd:45:cb:b3:b6:c5:64:36:
c7:73:fb:4e:0e:d4:5a:54:6a:c4:a0:95:e5:b6:55:d3:15:28:
71:bc:d2:75:27:86:d4:37:b5:2a:c8:fe:91:5c:1a:50:5e:19:
30:db:e5:f9:63:ed:76:41:5d:10:15:93:95:8b:96:8f:6d:03:
39:1e:4c:1b:b2:43:71:4b:d8:8b:f9:34:59:e6:80:47:93:29:
7c:7d:dc:10:e5:a7:d5:ae:b0:d0:83:03:7d:0c:b8:34:6d:1a:
a0:82:8f:43:60:20:d4:45:dd:c0:e4:b4:0c:dc:93:d3:b4:36:
d7:4f:46:88:ab:8d:5b:ab:ae:82:c6:9b:96:11:99:51:1f:c6:
8a:2d:70:5b:03:cd:20:3e:bc:72:41:53:54:03:6a:f7:95:9d:
87:1e:03:88:1a:1d:c9:9e:b5:cf:b7:d5:35:31:c8:8a:37:39:
f2:3f:35:65:15:fb:4f:0f:7b:18:d4:c2:e3:d9:f0:2f:77:9b:
63:1e:d4:cc:91:16:71:e4:45:d2:fc:a8:c2:76:2f:6d:7a:f9:
31:a3:5a:59:a6:38:92:09:2c:82:6f:df:53:05:76:8b:19:5d:
9d:d1:d6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:30:54 2024 by rpki-client on console-ams.rpki-client.org