Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/gDu99rOgpdbUY9GbWAfY0Z3JV2w.roa
File: gDu99rOgpdbUY9GbWAfY0Z3JV2w.roa (raw, json)
Hash identifier: PKfvOLHAf0DjjVXm3W2i5w/2NWMmSimVjY4/U58y494=
Subject key identifier: 80:3B:BD:F6:B3:A0:A5:D6:D4:63:D1:9B:58:07:D8:D1:9D:C9:57:6C
Certificate issuer: /CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Certificate serial: 018CC9BBE759EE1BD76290C3FE5814A4EFBD
Authority key identifier: 63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/gDu99rOgpdbUY9GbWAfY0Z3JV2w.roa
Signing time: Tue 02 Jan 2024 10:33:04 +0000
ROA not before: Tue 02 Jan 2024 10:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51284
IP address blocks: 193.201.146.128/25 maxlen: 25
193.161.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:e7:59:ee:1b:d7:62:90:c3:fe:58:14:a4:ef:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Validity
Not Before: Jan 2 10:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=803bbdf6b3a0a5d6d463d19b5807d8d19dc9576c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:c7:31:79:f5:01:bd:5f:8e:73:7e:8c:1e:
e8:a2:ab:21:cb:e0:66:c5:08:f8:7c:22:5b:38:4f:
27:e3:aa:8e:0a:8f:9b:a4:3b:fd:ba:2a:40:3f:10:
cc:ab:92:fd:77:8a:54:bd:8d:e9:80:85:5c:c3:dd:
b1:0b:f3:68:f1:67:89:b6:55:a1:fe:fc:57:22:e6:
66:48:60:b6:03:6d:12:ae:28:34:f7:01:a7:ea:7b:
d9:e9:75:17:87:d2:5d:bb:94:56:19:22:18:4e:c3:
7f:59:ef:d9:ac:99:7d:0a:5b:d3:22:6e:66:7b:f4:
1b:63:4f:5b:e3:14:b6:6d:a5:41:5d:e7:07:31:c0:
aa:85:87:89:f8:3e:8f:09:16:08:e7:05:f8:82:53:
4d:61:a5:2e:79:6f:77:9e:60:d2:52:8c:61:22:8b:
09:d9:5d:00:3b:f3:1d:63:60:84:cf:6d:9a:d2:72:
f2:55:fd:d4:54:88:f0:d7:f1:42:0d:87:3d:b5:d6:
f6:41:cb:9d:f9:34:93:73:fe:51:2c:bd:92:16:25:
e7:7c:ca:da:5d:70:d4:d7:ff:a9:d2:4b:f7:31:b5:
c6:f6:f1:23:56:a4:e1:34:28:af:62:8b:c5:4c:64:
aa:06:a5:53:db:f7:08:52:f7:3b:fa:ba:a3:13:52:
7f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3B:BD:F6:B3:A0:A5:D6:D4:63:D1:9B:58:07:D8:D1:9D:C9:57:6C
X509v3 Authority Key Identifier:
keyid:63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/gDu99rOgpdbUY9GbWAfY0Z3JV2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.0.0/24
193.201.146.128/25
Signature Algorithm: sha256WithRSAEncryption
d4:5b:83:a3:d7:0c:39:71:ec:46:b9:4d:6e:78:70:10:e4:ea:
ef:f7:24:98:c9:53:57:6b:c8:0c:20:01:e0:b1:d2:7c:e1:84:
58:14:78:95:a6:be:17:b8:04:bf:7e:3c:20:0b:2a:73:f6:d5:
58:83:90:30:d8:b2:32:5a:9c:c7:91:42:f5:cd:f2:06:15:08:
b0:e2:14:11:fa:a4:3b:63:65:3e:c9:68:69:48:0c:4e:11:63:
65:f3:88:4c:41:9c:37:f6:07:0d:1c:77:44:38:a3:33:a8:2d:
15:98:24:90:3f:e3:06:6f:10:55:75:2d:89:07:f7:54:46:ce:
ba:2b:13:a2:b2:48:c8:3d:d1:b4:cc:2c:03:5f:99:de:32:bd:
23:ed:b6:1c:f6:36:2d:2f:85:fa:89:6a:a0:41:fc:9e:87:6b:
de:31:e9:7a:6d:af:28:d8:b4:43:b8:81:2a:21:db:03:b0:7d:
d0:cc:bc:8e:37:74:0d:0f:c4:c2:3f:5f:95:e9:c6:a0:e0:75:
94:70:5d:c9:3e:5b:96:5e:12:4e:dc:13:9e:b5:1f:72:12:d8:
ba:b6:a3:36:62:c8:3a:14:cf:d0:55:fb:39:63:f2:05:2a:bc:
ad:44:47:0a:84:53:fb:dd:61:93:08:a2:55:a5:f7:d5:a0:b3:
8e:be:a2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:41 2024 by rpki-client on console-fra.rpki-client.org