Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/p0SBEqXE5fZ6NHD4R80Wb_kTRRI.roa
File: p0SBEqXE5fZ6NHD4R80Wb_kTRRI.roa (raw, json)
Hash identifier: TxkFclR4YRE/kC8EHyNReYSGDC2bLxoGHMmb4R7wbTc=
Subject key identifier: A7:44:81:12:A5:C4:E5:F6:7A:34:70:F8:47:CD:16:6F:F9:13:45:12
Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial: 018CC4246D81B8B70ABD9811D043DA61DE1D
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/p0SBEqXE5fZ6NHD4R80Wb_kTRRI.roa
Signing time: Mon 01 Jan 2024 08:29:30 +0000
ROA not before: Mon 01 Jan 2024 08:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62313
IP address blocks: 193.22.141.0/24 maxlen: 24
91.209.240.0/24 maxlen: 24
212.46.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6d:81:b8:b7:0a:bd:98:11:d0:43:da:61:de:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
Validity
Not Before: Jan 1 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7448112a5c4e5f67a3470f847cd166ff9134512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:07:7f:2d:6f:f1:ad:fb:cb:f7:f8:7f:b7:43:
2d:a4:ad:39:f0:0c:29:2b:2b:98:6d:88:76:6b:e4:
a6:9e:73:d4:49:63:4c:26:9c:54:4f:b6:18:b8:a3:
69:ad:b1:15:10:5d:5e:0c:31:6b:c0:3b:83:9f:c0:
2d:71:ef:cd:79:e6:01:c3:c0:a9:52:20:62:6c:05:
1b:d4:d9:06:53:18:e7:45:33:fa:69:c3:1f:ad:22:
0a:f5:91:9b:39:6c:f0:33:e7:67:a8:70:03:48:25:
98:b6:f5:89:55:1e:bf:b6:57:9f:21:99:9d:ab:cc:
40:4e:c2:df:72:55:09:12:9b:ae:2b:82:ab:a5:3c:
4d:c4:c9:dc:83:8b:e2:97:55:50:6a:23:3b:4c:c4:
84:8e:0d:ec:04:37:74:6c:d3:0d:5e:57:67:6f:75:
98:eb:11:00:9c:b6:ee:40:6c:5a:ea:55:b8:2f:f4:
3a:3e:50:dd:db:bd:b9:7c:0d:3a:4e:99:ca:92:cc:
96:c7:bc:22:d9:98:80:b5:7b:00:26:c3:f7:cf:95:
2f:07:53:3e:1f:d7:10:77:0b:4a:3c:a3:0b:53:ee:
08:e7:51:8c:7a:20:5c:3d:1f:0a:8c:f1:09:b5:3c:
d5:54:1e:ef:bc:7d:3f:18:13:75:7e:77:b1:8f:4a:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:44:81:12:A5:C4:E5:F6:7A:34:70:F8:47:CD:16:6F:F9:13:45:12
X509v3 Authority Key Identifier:
keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/p0SBEqXE5fZ6NHD4R80Wb_kTRRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.240.0/24
193.22.141.0/24
212.46.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:3e:27:cf:cc:7f:d7:00:9e:0d:4b:42:76:98:41:e5:d3:3d:
86:ba:e0:bd:43:94:62:36:63:94:67:5f:f5:0e:cc:84:9a:1d:
e2:47:89:87:3f:cf:56:18:0f:49:8a:14:0a:f6:09:c8:8f:bd:
62:4e:d6:1d:29:09:32:c8:06:84:06:81:7e:2c:99:d4:fd:41:
f7:58:1e:25:dd:90:d3:e9:5b:b5:ea:d7:ce:b3:26:02:a8:78:
6d:9f:43:f8:a6:5f:ec:cb:4a:c9:8b:85:32:bf:02:0e:92:ee:
6a:12:2c:00:84:8d:d9:b9:25:a8:92:36:53:82:08:83:c5:1f:
a2:a6:0c:26:b7:ab:bf:79:ee:5c:75:fd:1a:ba:06:40:d7:a9:
29:93:4b:6e:bb:6e:24:47:a7:e6:f5:5b:5f:08:e9:01:f4:aa:
e3:6a:bc:10:6a:b3:63:6c:2f:46:7d:e9:55:b2:71:61:00:ab:
ee:2f:3f:53:43:51:9f:23:cf:3e:f0:35:45:f7:50:da:8d:77:
3b:87:08:83:e8:1a:29:c5:6d:d0:94:57:f7:96:ca:be:f6:67:
8e:04:6a:4d:32:97:5f:f5:43:38:d3:f5:12:4d:1c:03:aa:4b:
6c:a0:b2:35:1e:61:03:cd:cf:a4:a9:c5:11:61:12:22:24:54:
91:af:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:52:57 2024 by rpki-client on console-ams.rpki-client.org