Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/S4sXdQD_BX4HF2OHiO6pQH4ygmo.roa
File: S4sXdQD_BX4HF2OHiO6pQH4ygmo.roa (raw, json)
Hash identifier: KZg/JivR2VhQgkH6WTJw5G0WHwGpqyOcKuu1BZDTrLQ=
Subject key identifier: 4B:8B:17:75:00:FF:05:7E:07:17:63:87:88:EE:A9:40:7E:32:82:6A
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B90CDDA530FBAA9589EA1EF245D56
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/S4sXdQD_BX4HF2OHiO6pQH4ygmo.roa
Signing time: Mon 01 Jan 2024 18:31:30 +0000
ROA not before: Mon 01 Jan 2024 18:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201801
IP address blocks: 193.192.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:90:cd:da:53:0f:ba:a9:58:9e:a1:ef:24:5d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b8b177500ff057e0717638788eea9407e32826a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:ef:b6:e7:37:2c:27:63:80:d6:c2:cd:91:
d7:4e:a2:65:60:3e:04:e9:3e:86:07:4b:0e:b8:9e:
85:63:11:93:99:f3:bc:52:ea:21:0d:91:db:25:c1:
c0:2f:79:c5:f0:37:8b:53:88:ab:1d:22:0b:87:61:
ba:73:1f:be:58:2e:29:86:b1:8a:a0:8a:6a:00:aa:
42:32:c5:29:ed:d5:c1:d2:a6:b7:96:7d:0a:e5:8a:
a6:9a:be:d9:85:d5:e1:dd:be:b0:e5:1e:da:ec:07:
de:b9:f7:a9:f9:f1:b1:88:41:8d:7c:d3:23:fa:9c:
c8:34:8c:4c:5a:d1:75:59:f3:7f:4d:0b:b6:71:a1:
92:8b:50:5a:36:b1:da:e0:cf:da:4f:8e:aa:30:17:
5a:6b:a3:30:67:91:54:ab:2b:23:9b:d5:df:77:59:
f3:33:b4:79:0c:4c:f7:8e:20:45:4d:05:24:c9:8f:
4b:3a:e7:29:fa:1d:e3:82:30:8e:6d:ab:d6:02:58:
52:cc:22:fe:94:3b:4b:b0:c2:e5:16:b2:c1:b5:b1:
bc:9a:c6:92:da:46:dd:3c:9f:fa:b6:1d:62:35:c6:
8d:c1:b5:e5:62:88:07:de:56:99:49:d7:84:18:52:
15:4d:ac:2b:84:c2:a6:50:bb:64:b6:5e:3e:de:b3:
2a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8B:17:75:00:FF:05:7E:07:17:63:87:88:EE:A9:40:7E:32:82:6A
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/S4sXdQD_BX4HF2OHiO6pQH4ygmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.186.0/24
Signature Algorithm: sha256WithRSAEncryption
33:01:6d:32:70:50:0c:16:a6:d5:e5:df:75:e9:9a:10:ea:fc:
93:d5:cb:80:14:b4:66:1e:21:7b:0e:58:45:3d:1a:1e:3d:f9:
88:46:23:34:5a:6d:2d:9b:79:58:58:93:49:c9:4e:48:c0:1c:
7f:a6:85:6d:94:78:6b:88:37:b3:2f:b0:42:86:67:03:fe:8b:
15:af:e6:75:b6:01:e6:72:2e:dc:44:e4:57:54:0b:61:8b:01:
21:a2:7e:de:26:3a:fa:1f:72:7d:03:c5:71:35:63:41:cc:94:
ee:a0:74:37:00:ed:32:b4:4a:36:30:1d:79:d5:0c:cd:8e:c5:
0f:75:5d:35:0d:13:7c:12:36:5f:96:ee:d7:84:ac:3e:43:a3:
ee:42:3d:03:2b:d1:f2:c3:32:d1:6e:23:58:0c:53:47:eb:5b:
5b:38:a1:bf:0b:75:c5:3d:63:01:f8:0d:4d:0a:ac:9f:24:6e:
5d:c1:7f:03:8b:de:db:c9:98:ac:ca:67:86:f4:37:d4:30:11:
6d:71:12:1d:80:b6:ea:da:80:1c:2a:50:f7:0f:2b:8b:8a:89:
8f:c1:f4:8c:32:63:38:52:e2:55:91:c7:9c:c8:5b:05:31:c0:
ee:3b:61:c8:86:dd:a0:de:78:4b:c4:65:da:a7:4a:41:b9:2b:
6e:9d:70:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:23:58 2024 by rpki-client on console-ams.rpki-client.org