Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1gcOqKbpxl4owL29DAIw2PFqVw4.roa
File: 1gcOqKbpxl4owL29DAIw2PFqVw4.roa (raw, json)
Hash identifier: BQqndyLnJvBXBT2wVMRrHiSklfZR2wiE5DpGPRhsypo=
Subject key identifier: D6:07:0E:A8:A6:E9:C6:5E:28:C0:BD:BD:0C:02:30:D8:F1:6A:57:0E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AEBF2687367467852F0D91BB2A9AC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1gcOqKbpxl4owL29DAIw2PFqVw4.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49384
IP address blocks: 193.230.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:eb:f2:68:73:67:46:78:52:f0:d9:1b:b2:a9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6070ea8a6e9c65e28c0bdbd0c0230d8f16a570e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7b:11:84:40:10:aa:65:d4:21:bb:85:31:11:
50:6b:b3:32:cd:95:c7:07:10:8d:11:51:2a:80:93:
32:25:5f:c7:7a:57:6f:4a:ea:c1:5e:da:88:66:0e:
4f:04:99:ca:5f:6d:a1:48:20:94:2d:fc:6a:21:70:
d6:7c:cf:82:8b:eb:c0:74:5a:1b:00:b3:dd:b9:1a:
11:0a:20:a4:49:12:d6:ac:63:3a:7d:1e:a7:70:c5:
da:e1:c1:ef:23:d8:4f:82:d7:9b:ef:78:1a:fc:88:
62:6e:97:1a:85:24:63:31:61:0c:ff:42:c4:9e:19:
36:0c:24:21:d2:c8:33:bb:3f:90:24:99:20:72:4d:
39:bf:4e:d8:1b:fe:fd:f1:20:82:cb:09:9d:3d:a8:
d8:d9:1f:e0:70:9d:33:1c:74:ef:e7:34:0d:60:ed:
0f:aa:ea:ae:a6:f1:f1:6e:63:2f:d5:5b:1e:3f:60:
8c:e3:b5:11:47:31:dc:8d:d4:fd:42:fb:8a:03:aa:
80:95:3c:58:43:ba:14:26:38:05:34:47:d4:d8:6a:
cc:a3:54:11:ae:5b:69:73:a8:50:63:03:cf:78:25:
d7:3c:62:17:b5:46:ae:fd:4b:0d:ff:c7:48:5a:93:
a3:ff:c5:4e:4f:ca:01:56:a7:ad:9e:b6:a1:f7:7b:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:07:0E:A8:A6:E9:C6:5E:28:C0:BD:BD:0C:02:30:D8:F1:6A:57:0E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1gcOqKbpxl4owL29DAIw2PFqVw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:2d:c0:eb:fe:c0:8e:e0:47:f7:6a:62:2c:f6:aa:22:03:e0:
59:76:5c:1a:3a:5c:db:66:3f:ca:9f:f3:b3:c9:95:b7:47:07:
57:38:67:8a:53:60:7f:4f:a8:e6:1c:d6:eb:b0:99:20:8e:81:
2b:7e:ae:fe:aa:91:1f:64:ef:eb:90:00:fd:0e:27:f4:f6:b6:
96:b4:bc:d5:81:67:ef:06:31:04:33:4f:bc:c1:af:8c:36:f1:
49:b3:18:12:70:fb:6d:db:4c:de:70:64:ab:0a:81:72:b7:04:
94:73:cc:55:d8:c1:7e:de:33:44:56:6b:b8:d0:20:1f:90:2f:
3b:37:e3:85:ba:35:63:fd:07:70:4d:64:ca:d4:6a:cd:d7:c9:
14:2e:a7:92:e9:93:59:e6:18:1a:57:4a:70:3a:81:24:d5:ca:
58:a5:64:f9:28:ca:3c:14:68:99:6d:bf:cc:05:fb:2f:10:2d:
22:fa:1d:9b:2c:46:7a:b4:7c:1a:87:95:d7:23:95:78:ff:89:
ec:6e:22:3f:43:d4:26:a8:00:fb:e4:3b:eb:ac:7d:5e:c8:fe:
fd:a7:03:2c:cd:b8:79:c0:9b:00:4c:e1:d1:89:0e:62:72:ab:
9f:6e:8d:20:0b:d1:3d:54:84:31:60:c3:f6:d1:1f:75:47:6a:
b5:fc:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:39:59 2024 by rpki-client on console-ams.rpki-client.org