Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/H8bFHhIrpJvGfDk2wOtyAlYwQIg.roa
File: H8bFHhIrpJvGfDk2wOtyAlYwQIg.roa (raw, json)
Hash identifier: ViBYq8saUatYXS2N220J4jYtP7DllnMWTzH3qmSqTiU=
Subject key identifier: 1F:C6:C5:1E:12:2B:A4:9B:C6:7C:39:36:C0:EB:72:02:56:30:40:88
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 018CC3B67E73EC71F8DDE367FFE51E5FB90C
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/H8bFHhIrpJvGfDk2wOtyAlYwQIg.roa
Signing time: Mon 01 Jan 2024 06:29:26 +0000
ROA not before: Mon 01 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.150.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7e:73:ec:71:f8:dd:e3:67:ff:e5:1e:5f:b9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Jan 1 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fc6c51e122ba49bc67c3936c0eb720256304088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:5e:db:f0:3d:ee:90:ee:89:b1:91:df:a4:
de:cc:47:47:05:2d:15:65:3e:d9:64:a3:a0:49:90:
d4:08:7c:72:0a:74:4e:a4:5e:ce:4d:3f:c9:f8:8b:
a4:54:d4:d8:66:df:b0:51:d2:e9:d3:06:67:10:8a:
b2:f7:3f:a7:c2:44:5c:08:b8:13:c0:fb:07:df:30:
ce:aa:72:b3:95:30:ac:a5:f8:b6:63:7f:16:98:91:
67:5f:16:22:2c:bd:33:31:82:8e:7b:0a:23:1d:f1:
90:49:66:af:a7:8e:7b:99:b2:12:61:2b:66:08:da:
de:37:8c:0b:4c:0a:f2:21:df:c4:84:0a:11:27:33:
9e:29:79:21:c4:7e:f5:7f:9a:c1:bd:c6:80:af:e8:
41:b5:d5:74:68:b6:e2:36:75:fc:8c:0f:af:dd:ce:
dc:6e:b7:6e:34:e7:da:44:6a:7e:60:5c:05:f8:29:
7d:c7:d1:1a:c0:90:1f:2a:9f:45:02:96:48:9b:99:
76:9f:49:6e:5c:3e:19:9b:46:bd:35:69:a3:ae:1c:
2e:39:88:c5:54:9b:05:f0:4d:cc:cc:67:23:f9:84:
5c:2a:3d:b4:59:ae:29:86:74:40:66:e6:22:2a:1b:
8e:8c:e1:ad:d1:81:22:42:e9:83:35:b5:8f:11:b8:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C6:C5:1E:12:2B:A4:9B:C6:7C:39:36:C0:EB:72:02:56:30:40:88
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/H8bFHhIrpJvGfDk2wOtyAlYwQIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:56:23:23:3d:2f:0f:48:a4:34:48:7f:64:15:e8:d0:7c:4a:
ef:8c:c8:df:d5:fe:09:74:a1:55:12:21:9f:aa:48:69:60:1d:
6d:d1:d2:b1:96:d9:4c:c1:12:c3:9f:a3:20:b1:b4:f7:e7:2a:
a3:f5:a8:f8:65:91:ac:cd:c0:85:fc:eb:6f:b9:04:df:fa:2f:
14:d1:e1:88:ad:8c:0a:72:ad:e1:5a:30:f6:1c:32:dd:f1:d9:
f7:9e:46:49:a3:13:dd:6d:0a:65:23:4a:eb:c3:cf:00:49:69:
64:70:b1:2b:e4:4e:b7:4b:e6:79:76:e6:da:7f:49:9c:b0:9e:
d7:48:5f:34:46:7c:92:b8:48:63:c7:86:17:99:7b:71:3e:08:
90:e9:10:e1:64:72:21:c1:8f:1d:a8:54:60:78:f4:e9:c0:98:
6e:a7:3e:6d:4c:15:d1:44:98:81:5e:27:32:64:ea:e2:1d:a4:
08:ec:ab:3a:58:40:a7:08:53:52:9b:1b:3b:84:cd:95:7b:9a:
15:af:92:80:e5:c7:58:57:8e:b4:66:84:a7:b8:c4:98:94:6a:
e7:fe:4c:cf:80:6d:a2:18:a9:bb:00:a9:9f:2f:c6:0a:fc:2b:
0c:41:bb:79:e1:e2:4e:25:8c:20:3f:87:67:4a:74:81:d2:e7:
9e:b4:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:18:47 2024 by rpki-client on console-fra.rpki-client.org