Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/k5DY5RUjAUWi7NYlWDIE5TaT-Q0.roa
File: k5DY5RUjAUWi7NYlWDIE5TaT-Q0.roa (raw, json)
Hash identifier: dCJ3NUhf7ZfioMcZ4kTUXzfQlVlChd4EM9Wuk4gyYlk=
Subject key identifier: 93:90:D8:E5:15:23:01:45:A2:EC:D6:25:58:32:04:E5:36:93:F9:0D
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 018CC3B6D792F85F488E5BD0A7769C55F4A3
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/k5DY5RUjAUWi7NYlWDIE5TaT-Q0.roa
Signing time: Mon 01 Jan 2024 06:29:49 +0000
ROA not before: Mon 01 Jan 2024 06:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210221
IP address blocks: 193.118.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d7:92:f8:5f:48:8e:5b:d0:a7:76:9c:55:f4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 1 06:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9390d8e515230145a2ecd625583204e53693f90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:28:f1:a9:ea:d3:dc:c0:ea:b8:f9:4d:a1:
ef:9e:0b:bb:aa:19:0e:d4:6d:d6:64:a7:06:ef:48:
85:76:65:1d:c3:57:1a:08:ea:d3:8c:f5:ad:59:13:
b6:59:2f:e2:ff:a4:d7:e7:48:ed:29:b1:63:a4:20:
e7:61:86:65:84:aa:0e:03:7d:28:7f:57:14:7c:87:
47:2e:dc:c0:4a:70:36:e3:51:19:df:01:a2:d2:b5:
92:70:7e:77:fc:11:5c:3e:91:2f:c2:26:96:72:d6:
ea:65:39:2e:15:37:0c:76:f4:2c:c5:28:80:b4:a2:
fd:69:2f:9b:1c:74:24:0b:78:c0:68:ae:da:00:01:
7c:1e:d4:ad:06:10:fa:5d:79:d5:5b:51:3a:e5:93:
89:a0:0b:02:75:a1:68:67:35:59:27:18:92:11:e5:
f6:cf:50:14:d7:8e:ee:2e:ab:bb:21:d7:45:0b:c1:
bc:38:2b:d7:57:40:f3:e0:d7:76:28:60:5a:a7:21:
74:f0:fd:70:ef:36:0d:cc:26:ef:4b:dc:3b:2f:7a:
e2:c7:4c:d7:16:a5:f3:66:41:d9:c6:bb:97:ab:78:
fb:2d:8d:05:c4:76:8b:be:66:db:62:b1:fa:15:55:
38:d7:e2:1e:0c:c6:10:77:8b:ed:39:bb:f2:ce:dc:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:90:D8:E5:15:23:01:45:A2:EC:D6:25:58:32:04:E5:36:93:F9:0D
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/k5DY5RUjAUWi7NYlWDIE5TaT-Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.118.165.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:64:ad:08:33:ba:c3:ba:1a:ba:60:ed:ba:2a:95:2a:90:e4:
43:db:6a:1a:b0:58:34:97:2f:02:c9:e9:de:bf:8d:c0:78:7a:
63:1b:2c:1a:96:98:13:68:b7:6b:fc:30:ed:2d:a4:ce:51:df:
1f:10:d3:e3:66:c2:c9:d1:93:ad:3e:0f:66:ea:2e:56:e3:6d:
c2:63:d2:49:12:a4:84:31:51:68:e2:92:95:59:44:52:28:a2:
c2:ff:27:28:5b:cd:31:d8:9c:6b:db:a9:af:57:2c:14:2a:37:
d2:14:fb:e1:b5:0f:f4:48:c3:0f:d8:08:b4:40:c4:37:4d:80:
6d:a8:77:1d:d0:e4:e4:d3:a1:ab:cd:d4:dd:de:47:88:c8:39:
ef:23:ab:79:67:8d:b5:3f:19:83:97:46:71:3b:25:79:05:34:
90:b2:b9:1d:c8:b0:a7:a3:c3:dc:06:2d:69:89:31:ce:4b:89:
91:ab:c5:13:d4:3d:af:f7:39:63:04:50:3c:72:fb:8f:21:d6:
f2:b0:22:09:5b:62:41:e0:f2:d2:67:e6:74:3c:96:bf:e5:80:
cd:54:b5:ee:6f:78:76:8e:d8:a6:73:63:2d:27:f2:eb:9c:02:
f8:08:62:dc:33:a0:03:95:97:41:36:66:9e:a1:6a:85:e5:8f:
36:16:78:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:01:31 2024 by rpki-client on console-ams.rpki-client.org