Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/dfJIRo3nb8UqPWVKyh36bC_WSJs.roa
File: dfJIRo3nb8UqPWVKyh36bC_WSJs.roa (raw, json)
Hash identifier: EtjyP+smK9okSSHnHhwxvGa60ystt+visIt/A4Z1OpU=
Subject key identifier: 75:F2:48:46:8D:E7:6F:C5:2A:3D:65:4A:CA:1D:FA:6C:2F:D6:48:9B
Certificate issuer: /CN=b2e58cc2c45e5a73f48494315558259f2fc506d7
Certificate serial: 018CC56ECEDD0E349B42D9F3805FE04CED21
Authority key identifier: B2:E5:8C:C2:C4:5E:5A:73:F4:84:94:31:55:58:25:9F:2F:C5:06:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suWMwsReWnP0hJQxVVglny_FBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/dfJIRo3nb8UqPWVKyh36bC_WSJs.roa
Signing time: Mon 01 Jan 2024 14:30:22 +0000
ROA not before: Mon 01 Jan 2024 14:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34650
IP address blocks: 193.33.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/suWMwsReWnP0hJQxVVglny_FBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/suWMwsReWnP0hJQxVVglny_FBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/suWMwsReWnP0hJQxVVglny_FBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ce:dd:0e:34:9b:42:d9:f3:80:5f:e0:4c:ed:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e58cc2c45e5a73f48494315558259f2fc506d7
Validity
Not Before: Jan 1 14:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75f248468de76fc52a3d654aca1dfa6c2fd6489b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:b9:a7:ed:68:f0:8d:a1:3a:06:ea:cb:f9:
bb:bd:2f:db:b9:25:65:09:f3:1b:7f:50:4b:da:af:
eb:76:21:07:17:54:d8:4a:48:f3:90:dd:f3:e7:b9:
8d:3a:5f:80:c7:ed:9d:a6:de:f1:8b:cd:0d:25:5d:
43:57:03:ad:e9:2e:c0:cd:79:40:a1:fc:02:48:e5:
9a:73:50:5e:1d:97:a5:b2:64:b8:2e:61:53:9e:50:
39:37:e4:18:fd:ba:44:f8:aa:49:70:52:ba:e6:1f:
dc:15:48:52:d6:06:ab:5a:65:0e:8b:8c:76:8e:64:
4a:2c:e1:5f:55:5e:dd:e1:ad:96:24:ec:5c:7a:45:
14:27:8c:56:0b:6d:4d:31:c8:05:a3:da:e3:92:00:
7c:54:cb:c7:a6:07:10:e5:69:b9:d4:eb:b4:ff:a9:
27:81:2d:d0:38:9b:d3:a2:cc:eb:28:ec:ff:76:36:
ad:45:62:8a:36:94:8a:40:45:d9:80:76:ee:1b:bb:
f2:3b:a1:f7:e7:e5:b6:6f:37:ee:27:f2:0a:52:c8:
ac:1a:ad:28:26:01:e9:82:ea:4d:f9:c6:51:52:3a:
e0:29:0a:a5:a4:d6:51:45:90:6c:c8:6d:e3:79:1a:
52:03:6b:70:a7:57:1d:a4:2f:c7:d9:b2:f6:23:fb:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F2:48:46:8D:E7:6F:C5:2A:3D:65:4A:CA:1D:FA:6C:2F:D6:48:9B
X509v3 Authority Key Identifier:
keyid:B2:E5:8C:C2:C4:5E:5A:73:F4:84:94:31:55:58:25:9F:2F:C5:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suWMwsReWnP0hJQxVVglny_FBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/dfJIRo3nb8UqPWVKyh36bC_WSJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/suWMwsReWnP0hJQxVVglny_FBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.98.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:e4:02:8e:51:31:45:83:99:41:6f:1c:58:f5:6a:74:3f:56:
a8:33:ca:ee:6a:9e:8a:1a:3c:68:1e:0c:ad:39:47:ba:86:59:
02:c1:cc:cf:5f:38:52:79:0b:3d:41:f7:bc:99:52:95:8f:96:
5a:6e:39:23:f6:cd:f9:b9:8c:8a:ae:1d:78:6f:c5:06:22:f3:
f4:69:51:ce:34:64:27:a7:3d:7c:a0:70:07:f7:67:a2:22:ce:
bc:9f:48:a1:6b:15:30:60:7b:d8:99:cb:55:cf:8d:42:98:90:
1e:db:01:73:c1:3b:67:4f:dd:fb:3c:94:2b:1d:52:8c:4f:4c:
ff:58:d5:09:2e:b7:71:55:c2:41:e8:98:6f:fa:dd:e1:eb:f9:
6c:02:a4:69:4b:43:16:e7:f5:1a:2d:46:2e:0d:ef:c3:f6:d8:
7c:22:0a:43:15:87:84:12:e5:84:2a:21:f6:3a:b1:ad:c7:a9:
9d:22:00:e8:ff:7e:22:5a:51:71:f5:f2:bf:6f:b5:a1:b0:97:
cc:0b:64:53:e9:39:18:e3:a0:7c:24:cf:6b:ea:24:23:94:f7:
8a:07:16:b8:33:94:1d:5e:d3:4a:26:91:1f:fd:b7:54:7c:ff:
72:aa:f8:5a:34:75:61:9c:aa:89:17:1f:5b:0b:96:28:c6:f8:
1d:c8:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:29 2024 by rpki-client on console-ams.rpki-client.org