Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/74ePiV_NQ-FRgV0PuMeUIJXqWa4.roa
File: 74ePiV_NQ-FRgV0PuMeUIJXqWa4.roa (raw, json)
Hash identifier: aRkA97vUOjz9zSwh8EBIjTDvNF1qwecxdmzBZ0sBVGg=
Subject key identifier: EF:87:8F:89:5F:CD:43:E1:51:81:5D:0F:B8:C7:94:20:95:EA:59:AE
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018F9B9689F8A8D0430F55A9F571726C477C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/74ePiV_NQ-FRgV0PuMeUIJXqWa4.roa
Signing time: Tue 21 May 2024 14:38:05 +0000
ROA not before: Tue 21 May 2024 14:38:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212913
IP address blocks: 193.3.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:96:89:f8:a8:d0:43:0f:55:a9:f5:71:72:6c:47:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 21 14:38:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef878f895fcd43e151815d0fb8c7942095ea59ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:a0:c6:f3:2a:cd:1d:f5:12:84:d0:15:c4:
7f:5a:89:f7:33:b2:79:31:8e:51:11:9b:71:f0:b3:
7c:e8:ee:41:39:85:9c:01:dc:bb:8d:bc:e4:1a:33:
39:65:e9:6a:c9:0f:53:2f:79:82:e2:da:e1:67:2c:
ab:bb:01:0d:0b:9c:55:a3:d0:49:d3:3f:fc:1e:85:
47:4e:8f:86:eb:16:e0:0d:26:35:43:6b:89:02:5d:
3f:80:97:f0:c7:f2:f7:a5:68:64:ed:c7:0f:32:bc:
0b:c4:0a:e9:00:be:03:84:02:21:31:35:00:48:78:
cc:b7:97:00:8d:7d:a2:f3:c9:1b:fd:76:76:5f:72:
bb:31:cd:f8:5e:5e:16:cf:21:2c:e8:cf:cc:af:9e:
92:1a:5c:41:d6:2c:20:2b:c1:16:42:61:41:9f:76:
7a:c9:92:ac:16:0c:94:13:a4:43:79:e2:24:99:45:
b2:98:ce:01:21:1e:89:e2:f5:8c:64:c1:16:2d:21:
29:66:a2:bc:99:e3:ea:78:b6:93:8d:a1:4a:6d:42:
06:64:b0:79:64:ce:56:df:c3:41:88:a4:2d:fb:df:
a6:97:69:bb:56:61:e0:56:96:8f:92:46:f1:40:69:
b0:c9:00:ca:a7:27:7b:7b:90:ca:d0:a3:74:38:27:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:87:8F:89:5F:CD:43:E1:51:81:5D:0F:B8:C7:94:20:95:EA:59:AE
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/74ePiV_NQ-FRgV0PuMeUIJXqWa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.23.0/24
Signature Algorithm: sha256WithRSAEncryption
18:66:80:8d:88:9d:00:d3:75:1c:bd:64:6b:ec:33:e1:2d:3d:
30:db:3c:b0:1f:75:1a:5b:35:95:ee:90:ea:1e:99:ca:6c:bd:
ac:16:fa:cc:6c:bb:ed:44:97:87:2d:68:fa:6b:7b:d6:a6:0a:
b9:40:1a:84:1b:69:69:71:b3:22:ec:fe:16:2b:e0:46:d2:d8:
69:07:bc:d1:8a:9b:22:ea:03:cb:ab:cc:80:6b:9a:00:c7:e9:
86:ca:c2:27:d6:9f:0b:75:24:1a:07:7b:dd:89:21:b0:8b:67:
b7:85:2b:f5:b5:5d:09:97:42:f3:79:8a:4c:2e:a7:9b:40:39:
e7:e9:89:8d:70:6f:16:cb:94:75:7a:91:47:eb:53:f3:d0:1e:
82:4c:df:4f:7e:e1:fe:11:7d:5b:3a:a6:f4:8d:06:13:d5:cc:
6f:da:a1:fc:76:c1:41:90:c5:11:5d:b8:e7:39:39:95:a2:fa:
22:a5:95:ca:ba:94:aa:f5:c2:8e:73:de:43:ac:13:f4:a9:50:
44:05:ab:f6:63:ca:da:10:9e:eb:57:ab:5d:dd:8f:3a:eb:c1:
e1:01:a1:33:32:34:87:c9:cb:f0:62:4f:18:58:65:4a:16:f5:
ae:07:19:b8:40:43:67:3f:e9:e4:76:d7:48:48:7d:39:0a:c4:
34:ea:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:55:00 2024 by rpki-client on console-ams.rpki-client.org