Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/iPUC1F4xCgak1_U6cpKIPScmt3o.roa
File: iPUC1F4xCgak1_U6cpKIPScmt3o.roa (raw, json)
Hash identifier: AGCH7hH91srgej0fID9lH3EuLuMC8MUzNxpreVaGidM=
Subject key identifier: 88:F5:02:D4:5E:31:0A:06:A4:D7:F5:3A:72:92:88:3D:27:26:B7:7A
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 018CC56F036CB2314C06E71F97D231E99216
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/iPUC1F4xCgak1_U6cpKIPScmt3o.roa
Signing time: Mon 01 Jan 2024 14:30:36 +0000
ROA not before: Mon 01 Jan 2024 14:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6893
IP address blocks: 193.247.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:03:6c:b2:31:4c:06:e7:1f:97:d2:31:e9:92:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88f502d45e310a06a4d7f53a7292883d2726b77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:71:08:80:3d:8c:75:71:ec:0b:68:86:cd:
40:a5:fc:86:51:9b:d7:04:89:ca:cf:3a:19:79:af:
c9:bf:48:1a:0c:4b:53:c1:c2:53:ba:b9:82:ac:c9:
06:aa:c2:fb:cc:d8:af:90:6b:0d:8c:e6:25:14:85:
63:f7:3e:8e:42:8b:21:f5:1a:fd:df:1e:c5:29:dc:
09:6b:86:96:77:04:ee:4f:c6:88:90:c3:2a:22:96:
c9:1c:e8:91:04:eb:0d:e3:31:c7:ba:b0:de:d0:f2:
0f:76:31:b3:bc:99:ea:88:64:5d:26:85:c7:37:cd:
6d:62:08:5f:cd:10:f3:cb:ce:5b:00:45:c6:cb:e8:
cc:0f:d8:03:b0:b1:90:26:54:e6:9f:8a:28:98:88:
d3:7d:9a:ac:c3:d3:9c:a4:df:ae:6c:34:84:98:2b:
47:df:d3:95:73:f7:ac:ca:9d:d6:63:71:4f:db:67:
2d:75:a2:11:be:5c:29:ee:74:c5:9c:91:a5:4b:4b:
be:01:00:50:65:1a:3f:be:71:cf:52:82:25:8d:95:
67:85:7a:d4:d8:09:e4:d5:1d:dc:cf:a8:db:5a:8b:
a4:63:84:a6:d8:5a:40:ba:7b:86:6e:9a:91:8b:ef:
43:4d:40:b1:da:1b:28:c8:58:4a:d8:a4:a3:81:0a:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F5:02:D4:5E:31:0A:06:A4:D7:F5:3A:72:92:88:3D:27:26:B7:7A
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/iPUC1F4xCgak1_U6cpKIPScmt3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.238.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:10:ea:37:64:04:3c:a9:53:71:7a:a4:79:35:31:24:23:d7:
d0:d8:dc:c7:f4:ee:32:7e:8b:b2:68:23:62:18:ff:23:47:c0:
bd:11:f9:79:19:9a:c6:60:fd:5f:42:9c:ba:e5:5a:b8:21:38:
05:6d:0e:09:7c:f5:f4:c5:a6:48:83:0c:be:06:78:99:86:5a:
a3:27:0c:76:e3:78:ad:72:5a:3a:70:3c:8c:b2:3f:39:ba:30:
da:8f:35:d4:d3:01:d4:0f:85:2f:63:fa:05:e3:6c:45:ee:0c:
61:0d:a8:23:c6:7b:53:d5:ce:0a:3e:5c:b7:39:0e:2d:fe:8b:
64:12:b7:23:95:3b:37:e4:04:93:06:64:8f:9e:21:f2:71:b0:
c8:37:a7:69:c0:91:11:88:ca:5f:30:b6:6d:2a:cd:99:93:51:
ce:82:f4:f3:ce:c6:a6:31:ff:e7:30:b5:a1:72:0d:8d:23:fb:
75:c5:cc:f7:1c:85:5a:42:20:bc:81:5d:bf:e2:28:33:3f:30:
3b:19:40:f2:21:98:a0:dd:bf:81:87:1a:68:57:0c:5c:41:3a:
d8:7d:5f:de:08:fd:21:c2:d5:fc:6d:c0:4c:20:5b:dd:38:74:
0e:9c:17:f8:dc:c7:bf:5b:fc:62:d9:3e:0d:96:34:88:81:81:
79:1d:cb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:32:40 2024 by rpki-client on console-fra.rpki-client.org