Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/HSuBSgby5xb8Up7WUhwuXHJMKqg.roa
File: HSuBSgby5xb8Up7WUhwuXHJMKqg.roa (raw, json)
Hash identifier: 8RvycVY8PsxS6bWlXZsbGUlZHPXG6IRCM/gNIpl8OH4=
Subject key identifier: 1D:2B:81:4A:06:F2:E7:16:FC:52:9E:D6:52:1C:2E:5C:72:4C:2A:A8
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 018CC8DE1D7EF8159BC161394299108E7D8F
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/HSuBSgby5xb8Up7WUhwuXHJMKqg.roa
Signing time: Tue 02 Jan 2024 06:30:48 +0000
ROA not before: Tue 02 Jan 2024 06:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207629
IP address blocks: 193.111.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:1d:7e:f8:15:9b:c1:61:39:42:99:10:8e:7d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Jan 2 06:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d2b814a06f2e716fc529ed6521c2e5c724c2aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:34:41:a0:a0:2f:98:3b:21:f1:8c:c5:db:53:
c1:ff:fd:e4:24:17:61:06:49:52:b5:3c:69:7a:87:
0a:5f:99:1c:84:52:e6:9b:64:70:fb:26:2e:22:b8:
a3:a8:3a:2e:5f:28:4d:74:99:f0:ba:ea:bf:1b:7c:
9e:f8:95:79:24:fe:76:34:64:32:8c:da:c6:a3:33:
bd:2e:fa:e3:ef:53:7e:86:00:51:f6:cc:7b:01:fe:
df:45:16:2b:ce:fb:b8:a1:e0:06:39:2d:84:6c:60:
0d:d9:ae:bf:25:02:a9:a8:77:ac:22:b0:3a:eb:ce:
3f:69:a4:1c:f5:bc:6a:0f:1d:cf:c0:c0:47:02:e0:
e2:d6:40:c7:44:34:8e:e7:1e:ae:1f:f0:21:bd:d9:
8f:ad:02:b4:cd:b9:cc:71:cd:bf:ba:df:fc:9f:65:
e2:68:ac:05:6b:4f:1d:f1:20:7c:44:5b:cf:f3:77:
28:56:fe:9e:cd:e4:16:a6:74:24:36:ff:95:c0:6f:
c0:26:aa:01:fa:93:78:50:e4:8b:af:9c:38:b4:d8:
e1:d9:03:35:d0:d8:d5:63:a7:14:f9:67:09:e6:0c:
e2:84:0b:fb:b3:20:66:07:9f:52:df:60:96:13:c7:
0f:0e:36:e5:32:5e:58:af:e2:e1:fe:d0:2d:4d:64:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2B:81:4A:06:F2:E7:16:FC:52:9E:D6:52:1C:2E:5C:72:4C:2A:A8
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/HSuBSgby5xb8Up7WUhwuXHJMKqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.73.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f6:b5:02:0c:9d:ef:5e:cf:3b:d6:1d:1f:bf:5b:8f:f6:ad:
7f:7c:0e:43:2e:66:f8:3d:df:ce:6e:26:7b:71:89:6e:25:9a:
e0:5f:bd:0d:04:01:5d:46:87:29:54:60:62:57:35:55:89:a2:
f7:a5:95:3b:12:fa:ae:e5:28:70:0d:1f:28:48:89:f3:4f:1e:
81:bc:8b:00:41:42:c6:4d:8a:a6:f1:70:52:1e:c7:c6:5f:1b:
f9:29:22:fe:b7:96:16:dd:2d:60:ac:2d:3e:56:bf:58:aa:f0:
a9:38:d8:11:81:b8:43:e7:a2:33:45:5b:4a:ad:3f:63:bc:47:
38:85:21:65:2c:f4:6f:37:f4:f3:f2:8c:50:25:f6:ac:e1:a0:
7c:f6:1e:e8:d2:d2:15:32:56:49:85:f4:82:70:fb:68:84:e7:
91:a2:0f:8e:3e:8d:12:87:89:c6:a5:88:60:df:7b:82:92:c5:
42:e1:e5:b0:bc:0c:38:ef:4a:20:f4:4b:11:f0:93:f8:ed:c2:
74:73:09:2c:e3:c6:34:f6:05:21:4b:c8:5f:ef:47:43:c1:a8:
ec:39:a6:ba:92:59:7c:60:be:8e:70:ec:95:f8:1a:46:16:62:
6b:f2:e7:2f:ff:81:89:23:be:29:8b:47:f3:23:21:94:92:3c:
29:f9:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:07:59 2024 by rpki-client on console-fra.rpki-client.org