Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/XhVKFCKv9C_rUndvu0S4dwkas9c.roa
File: XhVKFCKv9C_rUndvu0S4dwkas9c.roa (raw, json)
Hash identifier: 7nKX7i9nEUTyXl+Ar3uoZdA62V6tcklcT6zXZtdQR0w=
Subject key identifier: 5E:15:4A:14:22:AF:F4:2F:EB:52:77:6F:BB:44:B8:77:09:1A:B3:D7
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC42578554DD7FBEC858EAE132C2A500A
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/XhVKFCKv9C_rUndvu0S4dwkas9c.roa
Signing time: Mon 01 Jan 2024 08:30:39 +0000
ROA not before: Mon 01 Jan 2024 08:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400175
IP address blocks: 193.221.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:78:55:4d:d7:fb:ec:85:8e:ae:13:2c:2a:50:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e154a1422aff42feb52776fbb44b877091ab3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:db:3c:6e:95:34:2f:51:4d:97:7d:0f:cd:
2a:41:e1:74:4a:69:3a:06:22:13:59:d3:d5:4c:82:
01:a8:01:31:14:bf:fd:71:8a:3d:4f:f4:14:8f:bd:
75:05:5b:ec:fa:34:b8:91:29:97:03:a3:7d:a0:53:
9e:7a:57:2c:71:b5:d2:6d:f0:b1:e6:f7:b2:bf:e7:
99:4a:53:13:9f:b4:93:94:41:94:dc:51:f7:5b:c3:
91:35:36:d3:ba:be:2b:30:59:3d:8f:76:5f:f9:1d:
f8:80:8b:fa:cf:04:84:35:31:2e:14:84:91:df:a7:
24:2a:97:d6:f1:a3:d9:6c:ed:7e:87:2d:ea:4e:8e:
23:dc:97:eb:17:12:b6:e0:58:e8:f6:b2:3d:c0:8e:
0f:3f:96:3d:22:27:27:14:1a:b9:d7:e9:9e:4d:f7:
98:5a:22:ef:41:8a:50:bc:6f:0b:41:ca:08:43:72:
f9:4a:a0:88:bd:27:61:20:a7:fb:1a:26:61:21:1a:
5a:46:be:1a:06:fa:4b:a0:ca:f2:ee:54:8e:3e:43:
9e:44:fd:a5:3e:b0:78:b5:80:f1:b5:bf:80:1c:22:
bf:0f:1c:c6:76:9a:d1:24:6e:e2:70:47:6b:6c:00:
1b:de:0b:c7:f5:cf:3c:dc:9e:cf:f2:63:a9:bf:f4:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:15:4A:14:22:AF:F4:2F:EB:52:77:6F:BB:44:B8:77:09:1A:B3:D7
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/XhVKFCKv9C_rUndvu0S4dwkas9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.195.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:d2:8d:0a:07:eb:f8:91:4e:80:6f:90:de:48:6f:7f:dc:98:
58:e1:ed:21:f5:ba:d9:5a:25:fa:df:e7:3c:b3:e2:fe:d5:16:
39:60:79:53:87:4e:39:e5:4c:f4:52:7e:a4:19:6e:18:42:91:
74:ed:e5:f9:68:7a:e4:b2:c4:ab:57:ac:ef:e7:d4:2a:c8:f8:
b5:6e:9a:36:e3:7b:b5:ed:aa:c4:eb:c7:1f:20:46:a5:25:8c:
90:81:dc:e1:57:fd:4f:66:0d:50:a0:7b:4c:71:31:96:a4:d9:
47:ee:59:9e:06:2f:e1:3d:66:2f:f5:f5:c4:16:72:da:6f:0c:
97:05:62:9b:f3:8b:ed:72:35:6a:bb:a8:df:20:19:4a:da:b3:
2c:bd:03:16:f2:f7:cf:44:b7:56:30:64:09:7a:5e:58:34:6f:
51:0e:33:48:4d:e0:9a:11:9e:ae:18:1b:85:bf:44:ae:f6:29:
5d:2c:c0:7a:96:14:7b:50:a6:84:4d:46:0a:3b:f3:3f:02:7f:
33:1b:30:12:0c:a4:af:45:98:05:40:59:07:e6:b7:ca:82:41:
8e:7d:e3:e1:90:e5:6d:b7:d2:7e:dd:78:30:fa:d9:04:e3:97:
ff:69:af:b1:e1:c8:10:4c:e3:97:41:67:19:90:d8:c7:3e:66:
ef:ab:19:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:13:52 2024 by rpki-client on console-ams.rpki-client.org