Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/5AHbqpQ7Hfe-wQe-cWHIhjOuEF8.roa
File: 5AHbqpQ7Hfe-wQe-cWHIhjOuEF8.roa (raw, json)
Hash identifier: rlf9awkq8xpJOltz/UBoL8L3RSgLfdDA+BqMTQOI46o=
Subject key identifier: E4:01:DB:AA:94:3B:1D:F7:BE:C1:07:BE:71:61:C8:86:33:AE:10:5F
Certificate issuer: /CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Certificate serial: 018CC50011E73B48E75A784E79E9CD3F41D0
Authority key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/5AHbqpQ7Hfe-wQe-cWHIhjOuEF8.roa
Signing time: Mon 01 Jan 2024 12:29:25 +0000
ROA not before: Mon 01 Jan 2024 12:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49121
IP address blocks: 193.200.243.0/24 maxlen: 24
2a06:18c0:1::/48 maxlen: 48
2a06:18c0:2::/48 maxlen: 48
2a06:18c0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:11:e7:3b:48:e7:5a:78:4e:79:e9:cd:3f:41:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Validity
Not Before: Jan 1 12:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e401dbaa943b1df7bec107be7161c88633ae105f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:44:d6:b7:6d:7e:77:50:30:de:ce:1c:80:
27:bc:fc:6a:05:78:8d:7d:14:91:bf:d7:dc:37:a4:
fd:ad:9a:8d:30:a0:69:34:ed:00:8d:b1:a8:5f:6d:
43:b1:5e:97:45:6a:1a:b0:15:26:a9:c4:ef:44:4b:
ab:a4:b4:12:57:ba:3a:09:23:8d:0f:8c:92:24:19:
19:37:ca:00:1c:aa:de:e9:79:1c:ec:5d:16:5c:e1:
52:8f:c3:bc:eb:55:d7:b5:b1:31:56:30:48:f9:06:
25:f6:21:33:3e:2a:23:bb:04:03:3b:40:11:93:db:
79:a3:ea:19:10:c9:38:33:69:05:61:a9:c5:b2:d3:
8c:05:5a:c4:5d:1c:2c:9b:4f:a4:ad:97:36:c1:7a:
e9:bc:4c:00:36:ef:26:bc:db:2f:7b:1c:59:b2:ea:
d0:e5:8d:08:38:96:da:4a:2f:55:3b:69:58:00:67:
30:8e:87:93:d1:ba:00:8e:cc:ea:48:9e:0d:5d:4d:
54:d5:13:fa:16:8f:7c:3c:13:f7:94:9f:6a:77:ee:
06:b5:9a:d5:44:6b:a3:ec:81:f5:67:08:e7:bf:3c:
30:10:54:d5:81:b0:2a:db:f7:97:50:b1:6d:57:24:
9f:de:7a:45:29:f9:25:5f:f0:83:04:78:ac:6c:94:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:01:DB:AA:94:3B:1D:F7:BE:C1:07:BE:71:61:C8:86:33:AE:10:5F
X509v3 Authority Key Identifier:
keyid:12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/5AHbqpQ7Hfe-wQe-cWHIhjOuEF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.243.0/24
IPv6:
2a06:18c0:1::-2a06:18c0:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ac:ae:ee:ee:9f:85:bf:eb:ad:76:0b:f2:e4:46:d3:06:46:2e:
b6:a0:ee:3e:69:71:be:ca:4e:bb:65:d8:2c:2e:96:27:61:dc:
6e:20:b3:34:8e:2a:b3:5e:86:bb:39:0d:6c:cd:a1:31:2a:27:
56:00:19:6d:31:ea:89:60:59:e3:7a:7f:cf:fc:15:85:60:fa:
9a:8d:a0:a3:29:ce:a9:84:8e:ca:93:d0:b7:40:aa:35:28:87:
a9:77:38:63:4d:f0:97:ee:05:3f:29:ab:ce:ee:91:a6:8a:e7:
ac:19:cf:b8:5e:f1:2c:38:3c:a9:84:ad:1e:c7:2f:88:5b:89:
46:62:b6:a2:26:74:9a:0c:90:3f:0d:c3:2a:d5:3e:9f:f6:18:
bb:86:90:14:41:02:5c:d3:31:e7:c6:f5:6b:db:9a:18:44:c9:
70:d5:4e:ab:b8:d7:ea:5d:f8:13:71:42:96:22:6f:a4:54:31:
02:9b:4c:c2:38:bf:fd:9e:31:16:6f:43:05:d2:e3:59:82:10:
4e:6c:45:a0:eb:01:56:cd:08:c9:19:6d:fc:d6:56:6d:13:1e:
ef:60:2c:96:aa:49:a9:d9:47:3e:10:2d:55:7e:dd:0f:67:d1:
b2:ad:ee:dd:f4:ae:45:b3:cf:9d:23:df:42:8a:4b:91:eb:bc:
6b:0e:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:10 2024 by rpki-client on console-fra.rpki-client.org