Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/PdPZbDRa0F9EcuZfGBtpucdpUzY.roa
File: PdPZbDRa0F9EcuZfGBtpucdpUzY.roa (raw, json)
Hash identifier: IWNyYbHOvNsYA1LfjHVcSaLwEYCPtTziMsNl+tPk/Jc=
Subject key identifier: 3D:D3:D9:6C:34:5A:D0:5F:44:72:E6:5F:18:1B:69:B9:C7:69:53:36
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 018CC56DF062F1AA207433BF920FEF2AE0A5
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/PdPZbDRa0F9EcuZfGBtpucdpUzY.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201228
IP address blocks: 193.5.184.0/24 maxlen: 24
193.5.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f0:62:f1:aa:20:74:33:bf:92:0f:ef:2a:e0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dd3d96c345ad05f4472e65f181b69b9c7695336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3b:5e:7b:1e:62:51:aa:f5:ba:d7:78:c4:49:
86:ad:8f:51:ba:fb:61:37:0b:5d:69:ff:88:99:71:
33:64:ed:d5:12:6a:67:7d:3d:00:b7:12:7d:41:02:
83:73:5c:26:62:ed:34:78:2c:dc:3f:cc:fa:42:d9:
45:32:7c:fc:ee:66:9c:77:72:0f:95:e0:f1:45:fd:
20:7a:7f:ef:7e:38:9f:3f:40:86:dd:30:5e:0e:9e:
5b:ac:56:4f:a4:c0:fc:a4:a6:f5:dd:23:2a:54:05:
df:b2:88:63:4f:79:13:60:42:45:d9:46:e8:8c:0a:
fe:d1:ab:4a:47:3a:f0:e0:b2:04:fd:d3:51:bf:3c:
f4:3e:07:74:6c:3c:28:ad:08:ee:4c:41:d9:25:1a:
65:be:f6:27:91:57:9b:4d:91:73:b6:14:ea:19:2b:
6c:74:5d:14:7d:57:65:bd:57:cc:64:09:3d:bf:87:
ad:df:0f:20:66:5c:b8:ac:79:de:1f:84:10:b8:ff:
d5:99:9c:1d:61:65:72:7e:51:cf:b6:ee:14:27:d7:
bf:da:a9:b5:f8:33:8d:39:17:39:33:ed:6e:00:6b:
30:fb:69:f8:05:26:bc:0d:53:54:4e:20:b9:09:a0:
4f:30:30:6e:ff:fd:f8:85:5d:be:0f:08:3f:1d:cf:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D3:D9:6C:34:5A:D0:5F:44:72:E6:5F:18:1B:69:B9:C7:69:53:36
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/PdPZbDRa0F9EcuZfGBtpucdpUzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.184.0/24
193.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7f:a2:89:e1:36:b8:9c:a9:a8:97:7b:b0:7f:36:a6:f5:ff:
4e:ad:23:22:80:56:f3:6e:ee:2f:fb:15:71:8b:65:99:75:c5:
c3:7d:e1:b4:95:81:b6:60:52:36:8c:6e:ce:ec:c0:cd:bc:61:
33:4c:67:5d:91:17:97:5b:d0:e8:90:ad:ce:87:ce:64:ed:8f:
41:ac:12:dc:04:a6:17:05:28:14:ee:c1:d8:87:f0:b3:ad:43:
ab:34:d1:1f:fe:b5:a9:df:87:68:fd:97:eb:8f:0c:88:ea:07:
e3:79:57:1a:2c:26:9d:89:47:7c:41:6a:b5:0d:a9:89:e0:d4:
73:05:2c:c8:23:b1:6f:9a:55:7e:0a:7c:73:56:34:2e:9c:0a:
ba:db:bd:76:b8:42:1d:1c:bb:c7:5c:55:02:68:c2:71:93:13:
2d:e3:f1:17:bf:ab:de:d7:f4:2c:25:4c:43:0c:c4:d5:ad:c8:
54:5a:e0:7c:e0:5f:b1:87:9f:83:0c:df:ab:09:c3:f5:5e:0e:
10:7e:78:52:32:86:66:26:cb:0b:71:ef:7b:18:ee:80:6c:b4:
ef:80:a9:44:9a:87:23:28:4c:a6:42:4c:18:d9:eb:ea:b0:05:
6d:1f:1e:35:a3:34:2c:a2:c8:6e:1a:40:28:e4:4e:bc:6a:6b:
da:35:65:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:18:57 2024 by rpki-client on console-ams.rpki-client.org