Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/CXWwHv9FR2JqczDio3QAMoQA-sA.roa
File: CXWwHv9FR2JqczDio3QAMoQA-sA.roa (raw, json)
Hash identifier: mXAKpWl/nErEHAibEgw29eO3QP5WLhhESFc5FbocDzw=
Subject key identifier: 09:75:B0:1E:FF:45:47:62:6A:73:30:E2:A3:74:00:32:84:00:FA:C0
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 018CC50131AA32A0CDAD3B3C4C9A502E8F65
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/CXWwHv9FR2JqczDio3QAMoQA-sA.roa
Signing time: Mon 01 Jan 2024 12:30:38 +0000
ROA not before: Mon 01 Jan 2024 12:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49763
IP address blocks: 193.164.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:31:aa:32:a0:cd:ad:3b:3c:4c:9a:50:2e:8f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Jan 1 12:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0975b01eff4547626a7330e2a37400328400fac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:cb:07:ab:0c:73:cd:75:1d:54:bc:57:38:
0a:8a:a4:5a:96:a0:f2:50:e9:fb:b3:77:e6:93:2e:
9a:6b:3d:09:ca:ea:6b:5b:0d:76:96:77:26:f8:2c:
f3:0b:1d:7a:88:93:ef:67:b4:b5:e2:b0:c2:72:a0:
71:5c:c8:b6:84:b8:9f:b9:d9:84:6a:65:b8:51:67:
f1:4c:c5:39:22:f9:bb:88:fa:81:21:26:17:d9:49:
c9:b5:65:1c:d2:b2:9b:bc:b3:36:fd:ad:2f:51:93:
1c:6b:76:7d:84:0d:b7:4a:8e:43:44:c8:bf:0d:0e:
f7:74:71:b4:72:b9:5e:b7:03:92:20:7b:e3:28:db:
02:03:ff:08:2c:67:32:b9:0f:15:00:ac:f6:cd:01:
ab:1e:9a:32:96:07:be:11:98:1e:a4:46:1c:7f:66:
00:05:e0:a5:1e:45:17:94:66:16:94:b4:11:82:ee:
4f:b8:1b:c4:9a:b5:3a:38:2e:25:83:ab:4b:47:b1:
21:a7:db:80:b7:ef:77:11:f5:34:89:87:fc:c4:70:
93:e2:78:b0:c7:b4:f8:97:c1:96:31:19:d8:b1:e5:
00:da:a1:91:2e:c5:19:ac:e0:f7:f2:e8:85:54:e2:
2a:31:1c:9d:b3:2d:b3:84:54:f4:15:c5:98:6b:aa:
14:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:75:B0:1E:FF:45:47:62:6A:73:30:E2:A3:74:00:32:84:00:FA:C0
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/CXWwHv9FR2JqczDio3QAMoQA-sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.196.0/23
Signature Algorithm: sha256WithRSAEncryption
72:92:3a:93:e1:b8:93:45:30:5f:ef:43:88:2a:84:88:7e:5c:
14:6f:b5:fc:3d:6c:6c:d0:ed:2d:6d:bd:69:e7:e9:b1:21:a5:
f6:3c:dd:32:c0:29:d5:4c:a3:da:5b:26:58:8a:07:b9:75:41:
27:65:08:97:bf:2e:69:3b:c5:50:cd:e2:dd:db:0f:7d:13:d6:
a6:a4:db:d3:ae:2a:bc:cc:30:7f:00:df:98:5e:2a:43:7e:2d:
a6:64:3d:af:42:b9:dc:07:2c:51:f8:3f:f8:bf:5e:88:22:85:
a6:9e:b7:1a:cc:04:75:a3:41:3a:22:e7:87:77:2b:8c:9f:f3:
7e:a1:59:8f:c2:ea:31:81:22:af:4c:57:1a:7e:25:9b:cd:56:
d9:78:19:c2:8a:3b:55:b9:62:d6:4b:61:44:ce:e4:eb:f6:ba:
ec:3e:72:8e:bc:9e:ca:d7:8a:df:93:6d:af:f3:dd:93:89:35:
f9:9b:ff:2d:b0:02:91:5d:12:da:e2:4d:56:c5:de:b4:84:cf:
09:fe:e1:3b:c2:24:a3:90:04:09:4a:85:ff:8e:aa:af:83:27:
be:82:e8:1d:d2:0f:05:0b:93:23:c2:de:7a:3d:74:93:1a:07:
69:b8:0f:f4:5b:80:a2:ce:d3:6c:67:4e:e1:8a:02:5a:af:44:
28:86:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:43 2024 by rpki-client on console-ams.rpki-client.org