Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/Bl75VAjXE1iZ4vb5si1QZGMYDq0.roa
File: Bl75VAjXE1iZ4vb5si1QZGMYDq0.roa (raw, json)
Hash identifier: jD7WRZRLwPF7N6iiLqk1vqZ8lGL4tDiT3EA0RC3CwOI=
Subject key identifier: 06:5E:F9:54:08:D7:13:58:99:E2:F6:F9:B2:2D:50:64:63:18:0E:AD
Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial: 018CC64B73D0008191887EBE7BBCD2742224
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/Bl75VAjXE1iZ4vb5si1QZGMYDq0.roa
Signing time: Mon 01 Jan 2024 18:31:22 +0000
ROA not before: Mon 01 Jan 2024 18:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41233
IP address blocks: 193.16.186.0/23 maxlen: 24
193.16.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:73:d0:00:81:91:88:7e:be:7b:bc:d2:74:22:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Validity
Not Before: Jan 1 18:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=065ef95408d7135899e2f6f9b22d506463180ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:2a:a7:f6:2c:b6:6c:9a:ea:b2:01:64:98:
04:6f:59:0e:54:18:f1:cd:d7:44:66:03:4e:34:98:
49:9f:bf:97:21:79:b6:20:16:f8:70:48:37:86:50:
6b:e7:c7:b9:3d:6c:5a:37:1c:7c:e6:d7:8a:2a:6d:
3a:8d:ea:8a:fd:19:53:b0:99:5f:e3:4d:42:6a:69:
b1:f0:20:76:4a:dd:8d:29:95:74:c5:08:c7:07:12:
8b:cf:65:eb:1a:76:68:5f:42:70:bb:47:20:61:22:
79:f7:72:09:4b:83:85:8a:38:f9:0f:66:f4:d9:fb:
c8:34:fe:ce:0b:58:2a:c5:66:31:f4:29:81:22:04:
5d:21:0a:17:fa:79:ae:a9:6d:39:c1:4e:0d:0c:5c:
a4:ac:17:ff:28:1a:53:6f:4c:82:77:2a:94:e7:ea:
e8:c1:1b:80:93:f5:12:0b:d7:68:fb:2c:cd:88:18:
d2:6a:6b:52:4a:50:92:49:89:01:de:05:87:5e:f9:
6f:09:13:ec:28:bd:de:22:69:92:cd:09:b1:1d:13:
01:8a:03:2a:84:42:c4:95:b9:4b:04:24:0f:86:bf:
28:58:a3:be:59:c8:0c:ae:d3:18:63:6c:18:4c:02:
a6:31:e5:b7:01:be:8b:4e:d3:89:42:1c:29:05:4b:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5E:F9:54:08:D7:13:58:99:E2:F6:F9:B2:2D:50:64:63:18:0E:AD
X509v3 Authority Key Identifier:
keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/Bl75VAjXE1iZ4vb5si1QZGMYDq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.186.0-193.16.191.255
Signature Algorithm: sha256WithRSAEncryption
1b:bf:b3:d6:ff:35:b7:11:07:f9:d3:d8:03:97:b3:6e:f3:b0:
74:fc:8c:8e:0f:b9:06:30:f7:78:31:4a:c2:69:d9:e4:ed:f4:
d4:49:b4:cc:c8:a2:a7:78:2b:47:35:ac:f2:31:74:d9:77:26:
18:cf:38:7d:ef:18:6d:cd:4d:56:d0:8d:b4:bc:1c:48:34:31:
19:eb:40:42:1b:68:39:65:b6:19:ca:b8:a0:fe:79:45:a2:78:
98:77:b3:00:cf:a1:d6:62:c0:23:0d:4b:f3:ed:7a:08:68:aa:
80:65:50:2d:7e:7d:c4:0b:db:0d:00:47:1a:05:ad:f9:67:31:
ed:da:38:16:36:96:d8:a7:0d:54:25:57:07:19:87:29:c3:02:
f5:59:b5:89:ad:c2:08:a5:86:94:0b:0a:5a:d6:9c:3e:03:c7:
f2:97:f6:ba:d8:2a:64:51:86:be:c3:66:09:4c:71:a7:fd:2e:
7f:19:60:0c:05:da:91:5d:52:01:8b:ba:c6:a0:91:a7:f5:a0:
8e:2a:df:6f:ce:50:a3:ea:e2:84:27:14:f3:24:b6:16:d3:96:
6a:8d:e8:df:85:25:77:37:be:d4:b8:20:3a:6e:c1:d1:d5:e7:
1f:a1:60:93:a2:b7:7a:d1:5d:bf:ea:73:a8:6a:eb:2f:e2:1c:
f7:a7:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:25:05 2024 by rpki-client on console-ams.rpki-client.org