Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/PRfN7PDrrH4X7tdcxRUq0r5YqbA.roa
File: PRfN7PDrrH4X7tdcxRUq0r5YqbA.roa (raw, json)
Hash identifier: /AVIZWRU6RraldsloTtemq2q5463gCbigLe5LcYVtNI=
Subject key identifier: 3D:17:CD:EC:F0:EB:AC:7E:17:EE:D7:5C:C5:15:2A:D2:BE:58:A9:B0
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 018CC727747D7F71EB220E527CFBCD76ED1D
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/PRfN7PDrrH4X7tdcxRUq0r5YqbA.roa
Signing time: Mon 01 Jan 2024 22:31:40 +0000
ROA not before: Mon 01 Jan 2024 22:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31027
IP address blocks: 193.163.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:74:7d:7f:71:eb:22:0e:52:7c:fb:cd:76:ed:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d17cdecf0ebac7e17eed75cc5152ad2be58a9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:f3:ff:17:a2:41:08:63:20:e1:1c:eb:50:
f6:17:be:cc:bd:97:9e:c9:54:4e:b7:4e:f6:92:1a:
c4:e8:8d:b2:25:63:20:ea:77:65:64:a8:a7:70:25:
7a:cf:fc:a2:de:36:08:12:47:8b:0c:de:e4:98:63:
8d:bd:8a:4a:97:76:c9:8b:33:2e:49:f1:a7:66:26:
85:36:ad:b7:43:81:88:73:a3:b6:81:c5:c7:cb:f1:
a3:4e:17:5d:5c:1e:70:46:fc:e5:e6:58:30:41:21:
ce:3f:b2:0f:06:59:bf:9a:50:c2:85:01:fc:12:c8:
64:ad:2a:22:9c:d1:e7:89:6c:c1:a2:08:39:93:41:
3a:86:75:3c:c8:7c:2d:08:59:47:34:f9:44:b3:55:
16:9e:c0:bf:44:30:8f:bf:0d:94:38:2c:36:db:19:
f7:f2:dc:0d:84:cc:d3:01:77:8c:74:22:d1:e5:fb:
50:5a:47:59:d6:bb:6f:24:1d:f8:66:ff:6e:5e:5e:
0f:da:de:94:45:1d:53:c2:02:dc:01:c5:48:85:47:
c7:4c:4f:dd:cb:ac:1c:0b:73:84:31:9e:ba:99:c0:
aa:ff:9d:a8:f4:2d:a5:5f:d5:c0:7d:b0:81:ca:fa:
08:7a:42:70:dd:0a:d3:ff:5f:1d:d9:e1:d6:07:eb:
0b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:17:CD:EC:F0:EB:AC:7E:17:EE:D7:5C:C5:15:2A:D2:BE:58:A9:B0
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/PRfN7PDrrH4X7tdcxRUq0r5YqbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:14:ee:5d:5b:40:ba:d6:c3:50:96:a8:10:78:89:2a:c2:4f:
1e:39:5f:cc:ae:fa:d1:fa:50:ed:13:a7:38:b3:a3:0a:da:e1:
62:9d:40:a6:31:c8:bf:a3:8b:27:b0:25:8e:28:50:df:aa:74:
24:a5:57:e7:25:73:b8:7e:4d:de:58:ec:85:fa:a3:e2:9c:e4:
a7:31:dd:84:2c:62:67:9d:e6:ce:43:75:a7:3d:cb:a2:e3:a7:
1f:3f:24:12:35:b4:24:b7:a1:ea:ca:41:49:eb:f6:2c:8e:99:
d2:ea:c0:60:e7:38:f6:ef:6e:e7:be:67:06:ee:96:31:bc:13:
39:16:08:41:8e:9d:b3:f4:03:a3:35:a4:e3:eb:d7:00:5c:b8:
6a:b0:13:c8:e3:23:2a:1c:66:24:32:e9:68:32:be:42:a9:1f:
f7:8a:22:09:45:e0:16:14:31:99:cf:a2:a6:96:66:86:dd:e4:
ad:74:7a:d8:31:d7:0e:b5:76:6a:bf:22:cf:53:66:50:ff:b1:
3f:bf:20:d3:23:a8:ff:d9:69:b3:4e:e3:03:ce:55:0f:c8:da:
52:a9:7f:57:27:ff:97:5f:c8:a5:64:d6:1f:ed:5b:1c:ed:99:
a8:c8:e7:df:91:5e:f5:ce:8f:6b:7f:2d:43:8c:0d:aa:75:08:
cc:e9:79:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:15:06 2024 by rpki-client on console-ams.rpki-client.org