Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/nIKUGXccpatUQJ5D8VEqBYLBeag.roa
File: nIKUGXccpatUQJ5D8VEqBYLBeag.roa (raw, json)
Hash identifier: UyWxYhorZ8RZV/mfP7eXBakre7lIDdQ3kEosdfkuaSY=
Subject key identifier: 9C:82:94:19:77:1C:A5:AB:54:40:9E:43:F1:51:2A:05:82:C1:79:A8
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 019353686345D4328C9AF4BDB799E5FC99A0
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/nIKUGXccpatUQJ5D8VEqBYLBeag.roa
Signing time: Fri 22 Nov 2024 10:26:10 +0000
ROA not before: Fri 22 Nov 2024 10:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57370
IP address blocks: 193.247.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:68:63:45:d4:32:8c:9a:f4:bd:b7:99:e5:fc:99:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Nov 22 10:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c829419771ca5ab54409e43f1512a0582c179a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:80:9b:99:94:bb:3a:2b:f8:e8:31:df:c8:
cc:a2:3a:00:6e:8e:8c:d3:d4:44:d9:d4:1f:eb:3a:
5d:8b:73:18:bf:ac:16:1f:35:ae:c4:f5:63:c2:01:
40:91:73:e3:8f:e1:9a:c7:55:66:72:e9:87:2e:de:
77:23:cd:75:db:41:99:e9:7f:86:85:51:04:5e:e4:
c0:74:5b:aa:5a:35:0c:03:52:af:43:c1:ce:0c:96:
14:d7:62:9d:1a:88:f1:2d:bc:7f:03:a8:e4:0d:bb:
e8:d4:a5:c1:95:38:58:f8:c1:0a:3d:3b:14:8c:fd:
72:dc:fe:c2:07:ff:a3:e5:11:41:29:31:cf:7c:09:
51:86:34:be:c0:59:35:f5:09:b6:93:f3:0e:9c:9e:
58:80:bc:40:c0:6d:8f:54:09:35:ca:4d:9b:7b:ed:
1f:a1:e3:86:b5:5b:98:e7:32:a7:b0:73:3f:78:4b:
64:95:9d:7a:60:c7:7b:dc:e1:11:ac:6d:93:78:a2:
1f:ef:30:4b:1e:33:ed:11:f2:8e:fe:3a:8a:f9:a9:
56:86:40:d8:c5:da:82:8d:e7:51:03:61:cb:71:07:
49:6a:e8:20:af:5d:de:0c:df:82:0f:83:0b:92:f3:
17:48:17:d9:68:25:19:98:4b:23:a3:25:49:3f:d8:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:82:94:19:77:1C:A5:AB:54:40:9E:43:F1:51:2A:05:82:C1:79:A8
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/nIKUGXccpatUQJ5D8VEqBYLBeag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.166.0/23
Signature Algorithm: sha256WithRSAEncryption
10:42:00:1d:58:0d:fe:f5:1c:97:f4:5b:84:bd:3e:77:8d:4b:
ed:df:93:fc:b5:e0:6d:3a:8f:b4:00:24:91:ea:cc:34:5e:9c:
70:ab:aa:d7:6f:23:b4:d3:4b:e4:89:9f:d3:24:98:e5:23:d5:
c0:1f:79:64:01:8f:55:ee:08:b4:34:a8:6f:7c:8e:00:8c:a3:
2d:d0:e1:47:91:09:83:45:0e:be:b7:91:8a:db:aa:38:0d:fb:
e7:4d:9e:88:20:f5:76:ef:1e:8c:11:f2:52:b7:cd:0c:4a:7e:
c4:54:ee:08:3b:80:54:0a:a7:a5:e2:32:48:27:60:62:32:16:
30:08:1a:56:2b:b4:e5:06:ff:0e:f6:d8:79:6c:f5:df:a6:42:
8d:2b:4f:63:1f:60:00:0c:b0:c3:ed:45:c3:55:3b:a0:df:4a:
58:d8:db:58:dd:bb:d4:e1:8e:5f:0b:38:52:3f:45:1f:5f:f6:
1f:fc:2d:97:60:08:04:91:8a:9c:f3:da:f8:72:6f:6d:79:d5:
5e:7e:3d:11:7a:28:a5:12:45:82:35:f3:ec:ae:48:6c:86:43:
fa:a6:3c:a8:56:1e:09:a0:f2:ee:b0:09:a8:b3:a8:52:40:ff:
b3:66:cf:0a:fd:9d:92:d3:5d:fa:81:73:b6:92:52:0c:26:cf:
1b:39:e7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:54 2024 by rpki-client on console-fra.rpki-client.org