Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/D5elMffch2bSW4O92zIz6giDrPU.roa
File: D5elMffch2bSW4O92zIz6giDrPU.roa (raw, json)
Hash identifier: 6/klPAXATxoPnxZhum5XzpUa2oGegYMtqz4mnHZ7lMg=
Subject key identifier: 0F:97:A5:31:F7:DC:87:66:D2:5B:83:BD:DB:32:33:EA:08:83:AC:F5
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F4C28AB8C538B2157F7935EF15424
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/D5elMffch2bSW4O92zIz6giDrPU.roa
Signing time: Tue 02 Jan 2024 04:29:46 +0000
ROA not before: Tue 02 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 267784
IP address blocks: 193.57.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4c:28:ab:8c:53:8b:21:57:f7:93:5e:f1:54:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f97a531f7dc8766d25b83bddb3233ea0883acf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:5c:e6:a6:97:54:91:66:b4:24:2e:8f:6a:
48:93:fe:d5:5e:cc:d9:e2:83:f1:68:af:a9:4b:36:
98:47:c1:36:d3:cf:26:aa:eb:4c:59:00:56:66:67:
df:d7:d3:32:d5:5d:48:04:58:37:d5:48:8c:72:a2:
87:33:51:42:c9:2e:ab:7b:f9:07:0a:7a:37:7c:55:
de:eb:c3:be:40:ce:3a:82:fe:e2:eb:c5:44:7f:38:
12:c2:78:9b:a0:5e:59:e1:7e:f7:37:bc:b2:a7:11:
36:90:ac:7a:c3:24:e2:3c:69:d6:14:8b:9d:54:40:
41:51:19:8b:fe:58:57:88:72:22:5b:c0:bf:1b:9a:
fc:57:16:d8:5f:e8:18:ac:3b:2f:4b:d1:3d:da:04:
69:0e:4b:36:39:57:d5:4b:42:3a:cf:9e:52:1e:22:
0d:07:4b:1c:d1:5d:ca:bc:ea:81:b7:98:01:ce:82:
cb:68:78:0f:12:01:a5:3c:d9:0e:05:92:12:63:9a:
a0:57:d7:c1:f5:01:8c:5b:b0:18:4d:a3:b8:08:9c:
51:f5:f7:2b:1d:ff:e1:d4:f8:ef:bc:81:aa:09:aa:
96:f5:c1:d5:50:91:f9:28:3f:06:1e:e7:00:63:c9:
76:8f:5e:d1:75:0b:30:cf:fc:1e:a3:4c:f3:ff:3c:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:97:A5:31:F7:DC:87:66:D2:5B:83:BD:DB:32:33:EA:08:83:AC:F5
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/D5elMffch2bSW4O92zIz6giDrPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8d:da:93:73:94:7e:dd:e8:4e:d5:df:13:3a:bb:81:0c:7b:
db:ec:fc:15:6b:97:5d:10:9c:af:22:b5:55:dd:29:36:6c:03:
65:c0:65:46:38:df:a9:57:75:c9:d8:5a:77:68:71:2d:a3:74:
76:cb:62:a9:28:21:06:4f:5e:86:f0:55:2a:d4:ae:47:34:ab:
ae:09:3f:01:64:a6:08:c6:c3:ed:ad:21:b6:84:5f:99:28:05:
0f:96:e1:e2:77:33:4c:bd:71:73:8a:6f:fa:ff:6b:f3:f5:bd:
1d:1f:ae:3a:da:b5:c1:3d:30:4a:5e:63:34:cb:a0:9d:f1:ae:
b0:db:df:b9:8c:1a:43:28:ee:f3:1f:c0:59:36:2e:1b:56:46:
69:fe:ed:54:57:b1:6c:35:e1:d0:dd:2d:6e:9f:22:2f:16:81:
2e:36:e8:25:5c:0f:03:8c:74:a4:02:97:f1:2a:ad:0a:55:fc:
8f:8f:30:56:c6:06:b9:89:e8:54:7d:c0:c9:8f:ce:4e:42:6e:
6b:56:cc:2d:7e:b2:4a:b4:3d:8e:3e:3d:42:0f:9f:24:ad:3f:
25:c1:a4:1d:29:e6:5f:1e:cf:20:2f:3f:e0:0b:f9:20:b3:46:
59:06:d1:a8:57:0e:44:33:c6:7b:fb:50:68:95:40:ce:26:86:
73:5d:c8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:04:16 2024 by rpki-client on console-ams.rpki-client.org