Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/69onZAEwiiF_OhPu7q014cJh1DY.roa
File: 69onZAEwiiF_OhPu7q014cJh1DY.roa (raw, json)
Hash identifier: /MH3LcrQblGYm058p1YviX3ZzzvrFVMpFqQOdRekD8Y=
Subject key identifier: EB:DA:27:64:01:30:8A:21:7F:3A:13:EE:EE:AD:35:E1:C2:61:D4:36
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 018CC6B8317243FFAC5551223FE88CAA4CEC
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/69onZAEwiiF_OhPu7q014cJh1DY.roa
Signing time: Mon 01 Jan 2024 20:30:09 +0000
ROA not before: Mon 01 Jan 2024 20:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 193.160.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:31:72:43:ff:ac:55:51:22:3f:e8:8c:aa:4c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 20:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebda276401308a217f3a13eeeead35e1c261d436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:66:c1:b9:f6:c3:19:31:f6:9c:42:cc:ec:
cd:1e:de:67:2f:bf:6c:07:2f:ea:17:c2:08:2c:e1:
93:bd:43:7f:8a:a6:20:c3:53:9d:b3:4d:bc:d6:d2:
f5:db:14:bd:1c:5e:c8:34:31:1c:1d:1d:f8:6f:4e:
47:9f:de:ab:9a:a8:4a:55:c9:9b:a4:ca:4b:4a:03:
83:68:05:14:fc:cf:4f:ca:32:d1:e8:1c:6b:fa:61:
5e:98:3e:ca:f6:2b:b5:75:0e:85:cb:28:78:59:cd:
fb:d2:3e:07:cc:9f:26:b9:d7:8b:06:84:26:50:e5:
a8:1a:c0:09:e7:2d:81:22:da:59:b7:da:a7:c5:ce:
06:c6:95:df:ed:64:25:72:2c:2f:98:37:f4:3c:57:
7c:e0:19:18:62:d5:3f:3c:b2:3e:f9:f4:c7:b5:60:
8d:8a:15:68:17:b1:9e:46:52:68:38:84:bc:20:61:
e0:d9:0d:2b:46:d9:d9:34:c0:37:85:6d:64:1f:bd:
cd:a0:1d:c4:72:70:fe:a3:7a:14:72:0c:5c:ab:dd:
59:f2:30:84:00:da:5a:90:44:0d:a3:8b:a3:97:f6:
ae:3e:88:00:7a:61:66:b8:fb:14:b9:56:d7:6f:f9:
5f:e4:d1:6f:91:56:85:ea:21:04:88:02:b0:0e:09:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DA:27:64:01:30:8A:21:7F:3A:13:EE:EE:AD:35:E1:C2:61:D4:36
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/69onZAEwiiF_OhPu7q014cJh1DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.21.0/24
Signature Algorithm: sha256WithRSAEncryption
19:21:f8:08:34:02:fb:a4:2c:c4:20:54:41:b8:b2:4c:01:06:
31:02:2e:fb:4d:3d:50:4e:43:dd:28:4c:56:4b:90:4e:c9:5b:
f0:ed:19:60:20:7e:64:ee:e4:4a:5f:e2:9a:92:c7:25:35:73:
22:ef:2e:4c:9b:3f:39:61:f8:a4:f1:cc:db:41:87:f5:e8:a6:
7e:62:90:68:27:ca:20:71:0b:d7:19:33:8f:0d:00:a0:78:41:
4e:4e:b3:4a:51:fe:ca:4b:5f:fd:58:4d:7f:00:bb:66:ba:6b:
cf:82:23:9d:18:6b:97:8e:d2:ad:c8:2e:d5:07:b9:6d:74:85:
38:18:cf:25:1f:26:12:95:e3:99:4b:ae:8a:b5:13:f1:aa:8f:
87:a1:06:18:7d:5a:d4:a9:cf:e0:f3:d7:d4:f4:7c:bd:fe:7d:
bb:46:6d:30:29:b9:cc:d2:a1:78:5c:57:df:92:4c:f5:d7:fc:
61:ca:38:6e:7e:f2:a8:ed:89:80:a3:67:67:13:13:9b:f1:f6:
3e:4f:80:bf:70:fc:e5:1d:83:ac:f8:9f:86:1b:41:46:52:6e:
31:6e:97:73:8e:1e:d7:dc:5c:3a:24:98:40:78:73:d7:be:e6:
ed:97:c4:a7:a8:33:05:b6:e0:54:9e:ef:6f:eb:37:04:9f:64:
32:f7:00:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:41:46 2024 by rpki-client on console-ams.rpki-client.org