Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/wEvclPcDOLktEK6m1gvRnFhJv1Q.roa
File: wEvclPcDOLktEK6m1gvRnFhJv1Q.roa (raw, json)
Hash identifier: pVWnJucH0bR6YBGBuHuXhoOX0CalW6kepd1IxArw7Ms=
Subject key identifier: C0:4B:DC:94:F7:03:38:B9:2D:10:AE:A6:D6:0B:D1:9C:58:49:BF:54
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 018CC5DC4860F5BABD56FE9819C9C1722A0A
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/wEvclPcDOLktEK6m1gvRnFhJv1Q.roa
Signing time: Mon 01 Jan 2024 16:29:57 +0000
ROA not before: Mon 01 Jan 2024 16:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210220
IP address blocks: 193.25.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:48:60:f5:ba:bd:56:fe:98:19:c9:c1:72:2a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Jan 1 16:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c04bdc94f70338b92d10aea6d60bd19c5849bf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:40:28:fc:07:c5:60:91:ca:fa:c0:62:38:
56:17:83:e1:08:21:78:c0:b2:f8:cb:f8:82:65:b7:
37:35:2c:fa:3d:98:29:49:0e:19:e9:64:89:d5:f6:
6a:e0:c7:13:a3:47:25:af:6f:e7:6b:1c:f0:80:fd:
d6:7b:d9:42:2b:c1:34:8f:11:2b:43:e4:75:87:c5:
f2:df:29:5a:4a:b7:80:0d:a0:6b:44:00:8a:de:35:
c2:f9:89:a8:1e:e0:37:d4:f0:df:e7:60:52:03:fc:
f6:20:74:dd:a0:e8:0a:3c:ac:14:73:92:cd:a1:1c:
40:52:e9:c7:0e:69:96:4f:5d:0a:57:5d:93:08:ef:
58:b1:0d:cd:15:01:ce:f1:f5:f3:db:da:75:bc:58:
ca:38:84:6e:7c:63:be:43:14:6c:28:f9:ba:c5:15:
38:03:ef:b2:95:fd:c6:af:95:26:df:5c:2f:65:c1:
88:21:81:56:38:7a:9f:a2:46:fd:43:44:66:f1:ce:
4e:38:87:46:ff:66:71:91:76:cb:02:a0:56:dc:a5:
e5:7c:3e:56:40:4c:86:b3:2d:ef:06:49:d0:d4:62:
a8:f6:8e:f5:48:30:a1:ce:3a:96:06:d8:ee:df:19:
67:a7:d9:dd:b7:98:08:31:59:f3:5b:2a:aa:85:79:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4B:DC:94:F7:03:38:B9:2D:10:AE:A6:D6:0B:D1:9C:58:49:BF:54
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/wEvclPcDOLktEK6m1gvRnFhJv1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.193.0/24
Signature Algorithm: sha256WithRSAEncryption
71:1b:21:00:e8:ff:5e:ea:8e:1c:bf:27:ad:7f:7e:b6:2d:e5:
f8:b6:4b:33:cf:ab:b1:6d:c8:63:df:ed:6d:c8:fd:f9:92:25:
51:67:d9:04:8a:7f:f7:ce:d9:ff:9a:62:2e:67:1c:37:cb:5c:
e1:43:8a:d6:a0:d3:6a:5a:e0:d8:dc:7b:06:50:40:9d:ee:86:
a5:9f:6c:89:4e:9a:c5:7c:80:ba:95:9b:bd:04:a5:f2:3c:62:
e3:17:c1:70:08:6f:69:19:8e:8f:4e:4c:07:5c:97:87:a4:c6:
32:04:3a:3f:77:e4:f5:4c:26:c0:79:61:7a:7e:93:33:42:7c:
e0:67:39:0d:01:a2:74:31:07:21:92:3e:06:11:11:c1:8a:e0:
e9:87:67:2f:8d:b2:e3:ea:d2:8f:6e:67:02:39:1e:bc:bf:95:
85:93:cb:b7:da:db:6e:a8:da:f4:79:47:65:62:be:0e:ad:70:
f5:46:be:c1:76:3a:00:34:dc:10:8b:5c:7a:38:e4:00:3c:c6:
e1:9b:fd:43:e2:d2:69:58:ed:83:5b:74:a8:37:b0:20:c7:f8:
ae:fe:ec:bc:5d:89:09:88:c2:d0:ec:e6:73:17:18:fa:48:fb:
ad:a5:e0:36:be:36:66:3d:c7:63:25:15:08:6c:d7:d4:4f:cc:
d8:d3:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:21:41 2024 by rpki-client on console-ams.rpki-client.org