Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/0RbSWoPeWSsGyectPN8WxuLj1XM.roa
File: 0RbSWoPeWSsGyectPN8WxuLj1XM.roa (raw, json)
Hash identifier: fFlRDZy4Tka5arVjFQBvC2UoFrVqKMt4cMKrcI6ZuXE=
Subject key identifier: D1:16:D2:5A:83:DE:59:2B:06:C9:E7:2D:3C:DF:16:C6:E2:E3:D5:73
Certificate issuer: /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial: 018CC3B70B0D183F0E1E97DFDCEAF978FFCD
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/0RbSWoPeWSsGyectPN8WxuLj1XM.roa
Signing time: Mon 01 Jan 2024 06:30:02 +0000
ROA not before: Mon 01 Jan 2024 06:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12301
IP address blocks: 193.178.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0b:0d:18:3f:0e:1e:97:df:dc:ea:f9:78:ff:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d116d25a83de592b06c9e72d3cdf16c6e2e3d573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e0:2b:af:c1:c4:96:c6:f6:07:ce:5b:b5:fd:
55:d4:45:bc:7f:fc:7b:e4:5a:c8:1e:0f:66:d8:8a:
b4:cc:fa:86:5b:1a:8b:a1:a9:3c:90:cd:15:36:38:
d8:14:4e:27:49:b5:50:59:34:73:42:44:4c:81:55:
f6:f4:ac:05:d6:6c:a7:f8:1c:7c:10:94:83:8b:9f:
62:2d:19:26:eb:73:33:c2:d9:b0:3f:7f:68:d2:85:
c4:16:12:d5:83:79:c8:51:f5:a1:cc:92:c8:83:57:
b4:8e:6b:da:d9:b6:6e:95:53:d3:7c:72:d7:0b:ff:
cb:ba:43:f1:68:34:b0:ed:cd:52:26:0e:ea:48:74:
5d:df:93:09:4a:d2:64:62:28:88:3b:93:6f:49:86:
b3:76:7f:76:09:aa:d8:15:5f:1f:a4:95:af:c5:5c:
0f:c8:ec:87:56:ff:32:5a:ad:c7:6a:89:b9:32:c2:
e6:4b:56:10:f9:9d:c6:ec:38:f2:da:ac:ed:91:05:
d3:1e:09:ad:22:57:01:68:f6:ea:f1:19:f7:25:07:
76:8e:87:52:c8:a9:4f:f9:3c:75:72:c3:d3:4a:4e:
ce:77:82:48:9e:bd:2d:d2:5c:86:e4:bc:ba:f2:88:
65:52:90:33:aa:47:6f:9c:b9:9c:32:c7:20:72:24:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:16:D2:5A:83:DE:59:2B:06:C9:E7:2D:3C:DF:16:C6:E2:E3:D5:73
X509v3 Authority Key Identifier:
keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/0RbSWoPeWSsGyectPN8WxuLj1XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.168.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:75:82:9b:d4:d5:27:7c:59:99:21:c5:6a:8b:11:fb:bd:20:
6e:88:07:bf:aa:ef:06:42:9d:be:b1:e8:8e:2c:a9:2e:2a:82:
87:ea:9e:5f:c4:c0:41:2c:63:78:69:6a:1c:cf:b3:5b:c8:8c:
ee:e8:8c:12:90:c3:0b:11:eb:3d:f3:fe:91:7e:cc:66:4a:a9:
cb:58:1d:30:2c:64:24:2e:50:41:b0:b9:f8:e9:8f:9f:2a:63:
b8:0f:df:38:30:ac:01:38:e5:76:b9:6c:22:58:0d:66:df:29:
40:43:28:f7:9b:38:c7:02:d6:85:26:d3:ea:6a:42:83:a7:98:
13:05:51:d3:08:56:45:0b:8b:ba:86:a1:e7:f1:83:e0:a6:4b:
65:91:81:7e:3a:1a:de:7b:19:84:d7:a1:f9:cf:15:f9:43:ee:
f7:01:6e:57:e5:a8:b8:9d:16:f7:9a:b2:b2:61:18:d9:c9:ca:
f0:b3:8f:be:63:ba:fa:47:52:75:a9:26:24:85:91:0c:48:44:
ff:95:bf:1e:e5:72:60:7b:bb:45:fd:0c:6c:7e:fa:17:1e:7d:
48:66:58:84:cf:cd:ef:cc:93:4f:29:54:00:06:73:3d:bc:3d:
b5:de:12:6a:46:53:9b:ce:f1:1b:aa:5c:2f:47:5a:da:ad:b1:
cb:17:55:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:21:39 2024 by rpki-client on console-fra.rpki-client.org