Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1lbePDo6wz2woHZLZ4E-TJ2uWmw.roa
File: 1lbePDo6wz2woHZLZ4E-TJ2uWmw.roa (raw, json)
Hash identifier: 3K5nxnaesH4Zx6ZjMeIP7C3d3YtGL2G2rX9CVNKGqeQ=
Subject key identifier: D6:56:DE:3C:3A:3A:C3:3D:B0:A0:76:4B:67:81:3E:4C:9D:AE:5A:6C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018EF5EB0DF8D07138FD6EA026C5DDB45DEE
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1lbePDo6wz2woHZLZ4E-TJ2uWmw.roa
Signing time: Fri 19 Apr 2024 10:33:26 +0000
ROA not before: Fri 19 Apr 2024 10:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8930
IP address blocks: 193.230.230.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:eb:0d:f8:d0:71:38:fd:6e:a0:26:c5:dd:b4:5d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 19 10:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d656de3c3a3ac33db0a0764b67813e4c9dae5a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:16:28:45:9b:b5:09:5a:13:ed:bb:6e:96:
ef:ce:2d:3b:36:01:70:4b:f6:47:59:81:69:db:0c:
33:cb:8d:25:6e:c7:df:6a:7c:fd:fe:f7:90:bb:3c:
4a:a8:ef:87:10:7a:55:8d:65:74:b9:21:60:10:8a:
bd:5b:b9:e3:a8:a9:95:ca:02:4d:9b:fe:13:35:1d:
81:89:2d:a2:8d:41:43:b0:c3:0e:cc:da:f8:a5:4e:
e1:be:af:40:f9:5e:22:2b:54:8b:c7:eb:d4:ab:47:
90:5b:58:1f:db:ef:f0:7f:8a:af:2c:d1:f9:7a:f4:
5c:77:77:8e:a1:1a:c6:f8:ba:8d:da:5b:a3:3b:b7:
ee:b0:f4:c5:a2:89:44:30:34:cb:b9:3e:bf:ef:97:
bc:98:b4:76:f0:a3:a5:04:fe:cc:50:15:b3:4c:fd:
5b:74:29:d7:4f:dd:02:33:c5:ec:a3:86:3b:98:cb:
1f:c3:68:4a:33:d7:72:af:b6:e2:a4:81:ec:d1:68:
d4:95:bc:b1:4d:75:fb:a6:76:7d:b1:9d:17:19:2f:
fd:98:fb:9c:aa:49:21:c8:68:61:6f:cf:1f:22:1d:
de:a5:55:b0:17:c7:fb:27:3a:e3:99:01:ce:b0:47:
30:87:15:92:20:7f:63:7b:e7:10:0a:f8:24:42:b9:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:56:DE:3C:3A:3A:C3:3D:B0:A0:76:4B:67:81:3E:4C:9D:AE:5A:6C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1lbePDo6wz2woHZLZ4E-TJ2uWmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.230.0/24
194.102.176.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a3:48:76:41:78:d8:85:72:43:db:ba:d5:86:de:48:40:56:
dc:16:90:b3:40:e1:c0:cf:64:bd:be:14:df:63:97:e7:4f:c1:
a5:5d:01:d2:69:7e:53:62:74:20:db:c1:6b:16:f3:7e:ef:0b:
76:3d:63:f5:a0:ec:93:38:16:5b:f2:12:91:e3:f3:b4:bc:2f:
0c:9e:28:a3:e0:b3:36:09:6f:b0:36:dc:58:b4:cd:0c:87:a8:
26:e5:15:02:62:15:83:86:bf:dd:7e:bf:3e:57:65:3e:3a:89:
f5:cc:b3:cd:1a:6c:e2:ad:fc:bc:2a:94:66:01:04:a2:92:7f:
fb:c8:16:49:25:f4:2a:2a:04:c4:72:93:26:bd:62:f8:a5:80:
80:01:51:66:b4:60:ff:f9:fe:02:1c:4a:c1:7f:63:23:be:3b:
33:4b:a1:d0:99:22:76:34:53:bc:8d:61:18:a1:9d:d6:18:2d:
cf:c5:0e:78:45:7d:24:57:98:ff:47:81:7b:dc:7f:e1:a4:94:
a8:31:d8:1f:4f:24:7b:1c:01:9a:47:98:34:7b:52:8e:bd:b8:
cd:6c:92:5d:7e:b8:b5:8a:9c:79:b6:d2:e6:cb:bd:b9:21:b5:
ae:1f:41:ee:6b:31:8e:94:ee:b4:1c:88:50:d7:c2:03:ad:5d:
2c:6e:f7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:32:13 2024 by rpki-client on console-ams.rpki-client.org