Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/310P7i0rtc6Zv7m3rNWiIMjGgjs.roa
File: 310P7i0rtc6Zv7m3rNWiIMjGgjs.roa (raw, json)
Hash identifier: l/18CUaWt1ISkjdtcyDMbxliGzRq7xfR4xBM6PAJj7k=
Subject key identifier: DF:5D:0F:EE:2D:2B:B5:CE:99:BF:B9:B7:AC:D5:A2:20:C8:C6:82:3B
Certificate issuer: /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Certificate serial: 018CC2DAFA701FB1A004B77BFB5C0B50BC55
Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/310P7i0rtc6Zv7m3rNWiIMjGgjs.roa
Signing time: Mon 01 Jan 2024 02:29:40 +0000
ROA not before: Mon 01 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49336
IP address blocks: 193.26.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fa:70:1f:b1:a0:04:b7:7b:fb:5c:0b:50:bc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df5d0fee2d2bb5ce99bfb9b7acd5a220c8c6823b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bf:b3:9a:b2:f0:7b:9e:3b:9a:5e:0f:a7:8d:
0e:6a:ce:75:6b:9a:0a:5b:1d:2f:fa:02:e8:2a:0c:
f4:c2:70:45:36:0e:cf:09:20:fc:95:3e:65:6e:4b:
1d:41:3d:d8:fb:b0:a2:40:81:12:44:ac:4b:22:88:
fd:53:58:ca:5d:50:11:06:8b:ff:36:f5:5a:03:30:
85:08:10:5a:97:56:34:38:65:24:7b:6a:d7:f1:22:
c6:2f:38:ba:20:cf:ea:ae:62:4a:33:b3:a3:66:4f:
90:f3:35:ef:35:66:52:e4:7a:8a:2b:ca:cd:5b:2b:
38:70:eb:d5:14:82:c4:34:10:f5:33:6f:37:f2:a4:
3a:d6:e9:35:ec:1c:2b:53:8c:06:ca:68:dc:18:e8:
d3:61:63:ce:7e:de:3e:1e:9c:5c:57:76:e4:88:6a:
7c:d7:3a:eb:46:0b:46:f5:d2:09:e1:cb:62:ab:6b:
be:5c:5c:7f:dd:bc:13:05:ff:dc:08:7a:63:6d:80:
ca:d0:09:7f:0c:0c:f5:50:5e:98:11:9b:da:ff:fa:
fa:70:80:68:95:3b:10:d2:f3:81:04:4d:98:59:2d:
4a:75:00:79:72:6d:19:df:dc:ee:20:2c:31:8f:5b:
93:35:4d:c7:cb:e6:88:b6:60:f1:2d:8d:38:4a:09:
31:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5D:0F:EE:2D:2B:B5:CE:99:BF:B9:B7:AC:D5:A2:20:C8:C6:82:3B
X509v3 Authority Key Identifier:
keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/310P7i0rtc6Zv7m3rNWiIMjGgjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.16.0/24
Signature Algorithm: sha256WithRSAEncryption
69:38:d7:81:ca:13:1e:d9:55:fa:e3:f8:a4:36:e0:ff:2c:46:
77:51:d8:45:b3:6d:f1:1c:bf:aa:e2:04:c0:5c:0d:44:86:39:
c5:39:a5:64:69:4b:b8:83:64:a1:ec:9e:40:dd:c3:c1:e2:8f:
09:f2:28:4b:12:b7:ea:b0:46:c4:19:be:62:c7:36:6b:41:ec:
90:02:7e:cb:97:72:65:81:47:ec:bc:d3:c2:ed:0d:c8:c0:e3:
56:53:72:f1:56:57:af:0a:da:d3:71:95:ad:0f:c0:5d:b8:80:
57:c5:76:31:79:38:31:b9:60:53:01:0f:23:98:bb:df:82:4e:
35:c6:99:25:3d:9c:2c:cc:a5:a3:ea:01:5e:2f:83:e3:3d:8c:
76:fd:24:a3:45:49:a3:e8:ca:78:c2:06:25:7e:63:ac:67:7c:
44:d6:eb:64:aa:ea:7a:66:06:5a:d7:af:d6:6d:64:3f:e3:ef:
ca:c2:44:51:6e:77:87:1f:39:f3:32:29:4d:14:bb:cd:8b:46:
cb:71:ae:ee:e0:32:8c:64:59:63:ae:50:83:d6:77:e4:6b:15:
ba:ae:a4:72:1b:4a:ed:23:7d:6c:c0:81:f3:60:15:7d:bf:71:
ff:24:8a:ed:2a:b5:13:53:b4:5d:4a:83:0c:9a:6a:46:d2:42:
a0:b2:c2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:32:34 2024 by rpki-client on console-fra.rpki-client.org