Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/uA_COy_nhiulcYwwLXRE7amZR30.roa
File: uA_COy_nhiulcYwwLXRE7amZR30.roa (raw, json)
Hash identifier: TUefD6i7JrtaacXIkcf0GhfQWLEB7AcsOfmpwkn9Qpk=
Subject key identifier: B8:0F:C2:3B:2F:E7:86:2B:A5:71:8C:30:2D:74:44:ED:A9:99:47:7D
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 018CC2DAE7245A700B3732F63437D060EBD0
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/uA_COy_nhiulcYwwLXRE7amZR30.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198380
IP address blocks: 193.24.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e7:24:5a:70:0b:37:32:f6:34:37:d0:60:eb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b80fc23b2fe7862ba5718c302d7444eda999477d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:5c:4c:54:10:05:b4:d5:2e:7f:80:3f:13:
ff:46:39:8f:c1:67:60:e5:ca:48:29:a7:fb:78:7a:
83:8b:86:e3:9d:21:62:bd:a8:50:7a:54:7e:74:42:
d6:58:22:68:18:a9:49:5a:51:93:32:98:0a:c3:12:
de:d1:54:36:0d:4a:98:86:1b:b3:44:ee:43:6e:3e:
d1:53:14:ed:10:a7:64:51:46:22:70:a9:e4:42:4f:
77:02:71:a0:34:6e:d6:cb:91:68:f3:10:4a:1e:5c:
65:e6:52:6d:86:1c:15:ef:0e:cf:48:ec:64:4d:a0:
7c:cf:5c:5f:86:23:da:b8:e8:66:3a:92:ff:54:2b:
de:61:ab:41:5e:a6:00:0e:88:78:bf:f5:ff:82:85:
2d:1d:69:f2:99:58:dd:3d:b9:4e:0f:c7:cb:a6:80:
ac:4d:98:e7:43:dd:40:3f:ed:1a:fe:70:e1:65:1d:
6b:8f:35:c6:7e:63:c9:67:d7:24:9c:08:7f:4e:c5:
c3:68:e9:07:4d:38:ed:49:93:05:83:c9:62:e6:26:
52:fb:89:78:76:56:38:1c:91:67:35:73:8e:46:53:
8e:ba:51:9c:cf:61:39:b1:d9:3b:2e:94:88:5b:4e:
66:00:8b:7e:58:33:15:15:bd:30:c4:e7:1c:41:98:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:C2:3B:2F:E7:86:2B:A5:71:8C:30:2D:74:44:ED:A9:99:47:7D
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/uA_COy_nhiulcYwwLXRE7amZR30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.40.0/23
Signature Algorithm: sha256WithRSAEncryption
44:75:83:14:f8:45:f5:aa:b7:8b:49:c8:18:37:80:17:11:a5:
ab:fc:75:2c:05:df:7d:af:ff:85:9f:3f:da:ac:2e:9a:5f:ad:
32:9a:dd:58:ec:fd:4b:b1:0a:f2:14:ff:d4:db:cf:a1:dd:8b:
df:34:e4:83:a4:0f:9d:94:ba:f7:64:5d:a9:4e:56:ae:5e:e0:
fa:48:8c:07:65:f8:74:3e:f0:55:48:10:96:31:0a:0b:ac:0c:
7b:ca:0f:1a:cb:81:73:11:a1:7f:7e:d5:34:b7:57:4d:96:cd:
b6:02:86:b7:da:77:45:d2:9f:a5:c0:f7:98:04:12:f0:53:95:
5e:80:07:45:2f:3e:6f:26:82:2f:82:8c:b9:29:4c:b3:ee:82:
77:ab:34:86:53:83:cd:99:d3:c6:33:17:c6:d8:69:9a:70:13:
63:7b:b4:f6:90:9a:b5:ee:20:cb:7b:3e:3d:e6:c7:45:4b:f4:
7c:14:87:05:e9:76:4d:16:86:20:a2:ae:63:44:a8:07:78:7a:
ac:f2:cc:ec:c3:85:ed:32:98:88:d0:06:ac:d5:2f:69:7e:2e:
79:07:60:eb:1e:b5:7d:ac:2a:f3:bb:c6:1b:14:66:74:86:e5:
a6:1e:c0:c5:76:f3:fc:de:45:ee:b2:56:52:05:88:f9:09:45:
0b:98:f2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:22 2024 by rpki-client on console-fra.rpki-client.org