Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/zM53Mpj6iZQbR_S6fR5GiiDXk7E.roa
File: zM53Mpj6iZQbR_S6fR5GiiDXk7E.roa (raw, json)
Hash identifier: AZSXfS+ysI50XN8P0S+VbHkMg+hvzptDLcJ1cYj6Zx8=
Subject key identifier: CC:CE:77:32:98:FA:89:94:1B:47:F4:BA:7D:1E:46:8A:20:D7:93:B1
Certificate issuer: /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial: 018CC3489FE72291E7E15E3477A46F65902E
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/zM53Mpj6iZQbR_S6fR5GiiDXk7E.roa
Signing time: Mon 01 Jan 2024 04:29:25 +0000
ROA not before: Mon 01 Jan 2024 04:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.3.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9f:e7:22:91:e7:e1:5e:34:77:a4:6f:65:90:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
Validity
Not Before: Jan 1 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccce773298fa89941b47f4ba7d1e468a20d793b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:5a:75:47:ee:c3:ee:cf:21:1c:f4:8b:d5:
b4:c0:dc:b9:9e:15:32:9d:6b:38:ab:e4:a6:e0:7c:
e8:97:7b:e7:12:c2:13:64:21:a2:cd:f7:46:da:14:
00:ae:41:e9:b0:56:85:07:7a:c3:eb:ae:c9:c5:72:
66:ee:fd:60:7f:c9:4d:a5:3c:41:cd:c8:d1:8f:7a:
0e:67:8a:7d:30:bf:96:b6:03:fb:81:d2:49:27:26:
17:af:ff:7b:02:4d:f8:e3:a6:54:42:68:d4:54:ea:
80:ac:b9:b6:2d:a0:6e:24:06:cb:11:50:7a:0c:8a:
c6:48:1a:b9:ee:69:ec:a0:52:fd:05:c5:ec:27:2f:
ca:6e:4d:9a:4f:f5:2e:7d:24:2f:3e:99:b7:2d:f3:
d3:47:3c:39:54:c3:59:a4:b2:62:06:bf:5f:33:7f:
ab:c8:cf:18:5e:47:04:0f:7c:5f:a1:5a:3d:f5:04:
a2:51:56:bd:3c:80:dc:5c:d1:c0:8a:4a:fc:ae:2c:
60:50:1a:ba:9b:49:8e:ae:c5:cd:58:f5:ef:5a:c8:
4f:3c:30:52:cb:bb:28:d1:48:4a:93:47:19:99:bb:
77:71:4f:b4:29:eb:21:c4:1e:b3:db:7f:cb:c4:6f:
65:7a:71:a0:da:36:04:54:02:ef:b5:dc:70:b7:12:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CE:77:32:98:FA:89:94:1B:47:F4:BA:7D:1E:46:8A:20:D7:93:B1
X509v3 Authority Key Identifier:
keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/zM53Mpj6iZQbR_S6fR5GiiDXk7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1f:2d:a1:79:ec:d9:51:04:eb:fd:8f:ad:8e:29:86:18:46:
81:47:ef:2c:07:3d:31:60:10:d8:55:6b:5c:7f:67:de:7e:c3:
e1:5b:c4:20:d7:d9:c1:02:2b:5f:7e:3b:14:26:52:36:41:cb:
fa:db:a5:85:47:27:a8:4a:67:aa:a5:63:95:3b:62:90:7c:d6:
ed:e5:e5:35:c8:7c:97:d6:8e:eb:b9:b1:d5:54:07:64:86:45:
ed:1f:ea:b7:22:f1:ee:00:1f:cd:8e:ee:a5:42:3c:82:45:2e:
26:9d:da:7c:72:b1:c5:c9:cb:2c:03:b7:68:e5:91:57:bd:0b:
ac:13:c7:b0:2f:52:ee:05:15:dd:cc:df:99:f8:60:2c:30:b6:
ab:3a:d2:01:57:1a:bf:4d:09:5e:57:02:c0:c8:3a:98:76:7e:
9c:7b:0e:8e:c4:0c:92:8b:69:58:c9:b5:8e:62:81:1f:58:26:
0d:ab:d1:ef:d9:61:20:88:2e:30:c4:3e:67:00:53:95:9b:ad:
25:f2:f2:26:4f:6a:a8:e8:ce:87:4b:94:b1:ec:2f:50:b5:f0:
60:df:bb:64:a3:55:e5:e7:5b:d2:ae:b4:df:c2:ec:18:f3:07:
7f:db:cd:ec:d2:bf:a7:e3:19:a7:13:5c:fe:26:b7:70:29:03:
f7:14:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:31:13 2024 by rpki-client on console-ams.rpki-client.org