Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/48M-IQyozlp5rp8n6So7Otsr6Xk.roa
File: 48M-IQyozlp5rp8n6So7Otsr6Xk.roa (raw, json)
Hash identifier: FtVZlswdiTZ3eLH264Dz5paOs52Ymuhc+zLfEuF8B5Y=
Subject key identifier: E3:C3:3E:21:0C:A8:CE:5A:79:AE:9F:27:E9:2A:3B:3A:DB:2B:E9:79
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 018CC6B92989FEFF7AA2BC225BB5F0AE59FC
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/48M-IQyozlp5rp8n6So7Otsr6Xk.roa
Signing time: Mon 01 Jan 2024 20:31:12 +0000
ROA not before: Mon 01 Jan 2024 20:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34950
IP address blocks: 193.164.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:29:89:fe:ff:7a:a2:bc:22:5b:b5:f0:ae:59:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: Jan 1 20:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3c33e210ca8ce5a79ae9f27e92a3b3adb2be979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8f:71:65:a6:4f:25:c3:23:03:bd:a4:14:c5:
03:0c:05:e9:cb:47:82:a8:1f:20:d8:0c:e2:d5:18:
f1:aa:f7:bd:af:07:df:fc:41:6e:83:90:47:6e:83:
76:54:28:be:8c:6a:05:42:c5:43:5c:60:1b:7c:3b:
10:fc:ab:b9:3a:0b:37:b3:68:c2:2a:ad:20:bf:61:
a4:80:0b:a4:ca:94:69:86:2e:d5:08:ae:d9:55:76:
2a:a6:c0:0c:97:da:f8:f4:4d:a6:79:43:a0:6b:80:
d7:6b:76:0a:af:01:8e:91:25:3d:04:ab:c4:d8:76:
97:00:8d:db:e0:b3:31:f5:9f:bf:4f:de:cd:c5:be:
33:12:d4:fc:4e:b8:63:67:3b:64:ac:fe:1c:b7:12:
22:f2:55:5c:b9:7f:5e:0a:13:a5:cf:56:ce:0b:61:
1f:e4:31:b3:08:27:48:eb:41:12:1e:4b:e1:d6:68:
b6:fa:26:a1:23:31:45:f3:19:8d:4e:cd:2d:cb:04:
34:d4:cb:c5:99:51:02:e9:68:ef:7a:4d:c1:d7:fd:
e2:cb:ff:19:03:f2:45:89:44:1a:15:de:39:42:61:
6b:f5:d6:65:af:71:29:44:f1:89:76:68:33:9a:4f:
77:8a:4d:91:92:dd:08:33:13:e2:ab:03:ac:24:a4:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C3:3E:21:0C:A8:CE:5A:79:AE:9F:27:E9:2A:3B:3A:DB:2B:E9:79
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/48M-IQyozlp5rp8n6So7Otsr6Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.88.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0f:3d:4e:6f:31:f6:56:4d:39:9c:ec:64:ec:af:b2:09:e2:
e4:37:56:15:a4:87:29:00:57:f6:f7:33:d7:8f:9d:7a:ae:ed:
62:77:6e:47:5f:ff:9f:dd:5b:0b:99:e8:29:98:27:ba:ac:9c:
09:3f:a2:e1:5d:df:60:f2:eb:2a:74:07:36:25:81:43:0d:b5:
b3:e3:98:9c:3c:aa:81:07:b5:14:48:e8:3c:2b:38:f6:94:40:
75:35:55:af:90:24:1c:a9:58:a9:60:d1:90:b9:8f:78:46:03:
c5:dc:bb:68:85:f4:c2:66:18:73:05:6e:8f:eb:2b:ca:06:32:
23:30:72:b2:12:8c:32:2b:f0:0f:56:e8:08:67:65:78:b5:d2:
83:d0:a5:11:0d:f3:93:1b:f1:da:cc:f3:80:27:3d:78:6e:27:
f6:43:e4:86:33:d1:5b:00:a1:ca:25:8a:65:e4:65:7b:33:96:
88:8a:c5:23:17:00:df:48:fa:a5:79:3f:f6:7d:a0:95:19:22:
29:e3:a3:ae:4c:a2:c8:39:d4:88:c6:1a:17:4c:9b:9f:2e:2c:
30:aa:47:51:cf:98:7a:8c:64:f3:4a:af:93:51:05:8e:d1:b7:
8b:da:6f:4e:a9:b1:ce:a7:d7:2f:9d:3a:a3:3d:7e:97:1a:c5:
cc:af:ff:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:52:36 2024 by rpki-client on console-ams.rpki-client.org