Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/oZ1INSwPASNUcybiVBN-cNVE-y8.roa
File: oZ1INSwPASNUcybiVBN-cNVE-y8.roa (raw, json)
Hash identifier: gtbg8HThshLolj+WAHhhWlqO5Wd9BlvutVf2ht+4lAs=
Subject key identifier: A1:9D:48:35:2C:0F:01:23:54:73:26:E2:54:13:7E:70:D5:44:FB:2F
Certificate issuer: /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial: 018CCA2A54BDA64B0BC45679E287F5510B06
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/oZ1INSwPASNUcybiVBN-cNVE-y8.roa
Signing time: Tue 02 Jan 2024 12:33:40 +0000
ROA not before: Tue 02 Jan 2024 12:33:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196972
IP address blocks: 193.105.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:54:bd:a6:4b:0b:c4:56:79:e2:87:f5:51:0b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Validity
Not Before: Jan 2 12:33:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a19d48352c0f0123547326e254137e70d544fb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:a1:f6:17:0f:f3:66:dc:64:0e:d7:32:8c:
a1:d7:3e:55:11:d4:28:74:1b:a0:68:7e:55:18:7c:
09:fe:fc:97:65:b9:ec:99:2b:dd:39:d6:19:9f:5d:
ac:89:92:af:b3:7b:dd:6d:51:47:be:9c:9f:cf:23:
d6:4a:41:b9:9f:2a:ec:c3:fa:89:e5:e2:5c:1b:d2:
67:1a:fd:f4:59:31:19:2b:76:f3:8e:5d:e9:b2:4d:
53:1c:52:6b:3a:fc:50:5e:f0:7d:c2:c4:f2:c1:39:
a1:36:ad:6f:57:29:cb:54:e5:cb:57:59:22:01:ff:
a7:29:9b:a3:d6:57:f2:fe:ac:88:33:ed:d4:51:20:
88:b9:e8:ad:99:5a:c2:f4:96:b8:21:4b:5d:fc:d9:
aa:21:4a:69:93:e4:a2:fa:1c:3d:be:a6:4f:0c:b6:
7a:45:6d:f7:69:2c:3b:72:c8:10:62:71:8e:f1:61:
6d:53:3e:48:d9:50:b1:bc:1a:e4:89:88:6a:06:20:
e0:a0:dc:dc:b5:17:17:7d:16:64:08:2c:e1:7c:c4:
42:d4:c1:38:ae:9b:8a:09:9a:14:48:2f:52:c5:90:
fc:31:35:a8:d5:fb:e2:02:af:d6:ac:91:94:42:65:
0f:9b:f9:49:75:bc:7a:bc:47:ab:9f:b6:e7:e2:08:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9D:48:35:2C:0F:01:23:54:73:26:E2:54:13:7E:70:D5:44:FB:2F
X509v3 Authority Key Identifier:
keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/oZ1INSwPASNUcybiVBN-cNVE-y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a3:8f:6e:79:6b:a6:4d:1d:78:0b:ad:a8:01:00:ee:28:c2:
5f:34:57:e1:c8:09:ba:50:38:8c:38:04:44:0e:d0:d7:b9:d5:
49:37:ee:0c:1e:88:72:e7:8d:56:f8:a7:be:9e:7a:94:47:77:
17:d2:6a:49:4f:77:47:56:c1:5c:68:45:5c:c7:cb:bc:60:13:
62:66:02:04:16:c8:b5:0d:1d:bc:17:f9:12:68:23:d2:97:08:
4c:01:af:50:81:b4:f8:75:0d:cb:a4:30:3f:8c:22:97:00:6a:
4b:98:14:b8:80:cc:4d:30:aa:e5:a1:19:e8:57:56:e4:b5:0e:
3f:7f:64:bf:15:6a:c2:9d:b5:73:48:c4:b7:b6:f8:5c:1f:e8:
18:da:35:31:8e:e5:4d:52:43:44:5e:59:4e:f0:46:7a:8a:ef:
5b:ad:62:1f:ef:36:81:10:93:fd:e8:52:87:30:77:9e:c5:c9:
d0:8b:bf:0b:1f:37:48:ad:7e:f0:ef:87:ee:af:70:a3:b4:52:
de:eb:9b:b7:cd:e7:4b:85:e0:2a:37:b5:c6:20:4e:be:60:f2:
86:56:79:2a:a4:c2:21:e6:ce:c6:20:fe:44:d8:6e:57:94:3d:
e1:65:0e:11:01:92:52:39:ea:8b:a7:89:3a:45:67:03:ba:ae:
27:a1:06:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:22:55 2024 by rpki-client on console-ams.rpki-client.org