Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/RYeWQc-0FaJmwoMolOoIaKPOPYo.roa
File: RYeWQc-0FaJmwoMolOoIaKPOPYo.roa (raw, json)
Hash identifier: ZNzXa0T6w5hvb9ghf/QNBvfcwhJK/waDz8Gy9SDbYb4=
Subject key identifier: 45:87:96:41:CF:B4:15:A2:66:C2:83:28:94:EA:08:68:A3:CE:3D:8A
Certificate issuer: /CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Certificate serial: 018CC348E76170FF97A95746E662FDC66215
Authority key identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/RYeWQc-0FaJmwoMolOoIaKPOPYo.roa
Signing time: Mon 01 Jan 2024 04:29:44 +0000
ROA not before: Mon 01 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137
IP address blocks: 193.43.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 13:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e7:61:70:ff:97:a9:57:46:e6:62:fd:c6:62:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Validity
Not Before: Jan 1 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45879641cfb415a266c2832894ea0868a3ce3d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:ab:16:25:9a:f2:4f:36:7b:01:64:47:12:
93:d3:22:0d:77:4a:6f:b9:0d:50:36:3f:61:5b:6b:
9e:07:06:02:c2:87:b0:8d:f0:d2:6f:a9:2a:c8:15:
db:49:e9:48:4b:a0:f7:b5:0c:97:1e:76:3b:7b:cc:
0c:1e:7f:a7:6d:05:4e:76:7a:64:66:53:7f:38:ca:
32:6a:e4:bf:48:e1:92:7c:78:62:da:e8:a3:45:3f:
80:99:cd:bd:74:ba:c1:9b:5c:22:71:99:08:df:5f:
2d:5c:00:df:1b:d6:cf:81:1c:ab:f8:45:b0:6f:d6:
f3:91:d6:f6:a1:ea:35:e1:42:cd:e1:86:20:03:de:
da:b5:bf:2b:9c:70:de:37:69:d6:95:16:48:55:1c:
77:14:4b:eb:f6:4c:5e:99:7f:fe:04:6d:1d:ce:b8:
c0:60:93:0a:14:a1:86:49:b2:16:8f:49:87:20:ca:
26:ea:67:7d:c9:30:a4:45:c1:e6:4e:51:4f:d6:8d:
b4:db:10:ea:bf:6c:d3:0f:72:e2:e7:57:b4:b5:d3:
62:2b:7b:2f:03:18:89:95:30:7e:37:f7:b8:b9:54:
4e:a8:42:91:ce:b9:c9:25:9c:42:5a:5d:4f:58:fa:
cd:ee:37:fd:46:cf:1a:06:db:79:d4:f7:52:51:3d:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:87:96:41:CF:B4:15:A2:66:C2:83:28:94:EA:08:68:A3:CE:3D:8A
X509v3 Authority Key Identifier:
keyid:21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/RYeWQc-0FaJmwoMolOoIaKPOPYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.141.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d5:a5:87:17:4d:2f:b7:18:24:a3:c9:70:a6:35:89:38:ff:
b2:1c:8d:ad:de:c2:b6:60:95:0b:f0:ea:b7:48:44:76:1f:a8:
a1:01:be:db:5d:8d:35:44:f9:17:dc:b1:7a:c3:15:b4:02:70:
82:c7:70:e9:45:4f:c2:56:24:f8:59:24:d2:ee:f8:7b:bb:56:
2f:e9:fc:80:19:7d:df:8c:0b:b9:a3:2c:30:ea:02:0f:0c:78:
13:94:2b:78:71:4d:73:8c:f6:4c:74:de:99:6e:9f:96:cd:a7:
6a:ac:77:0c:dc:22:de:3a:c0:07:ff:e7:c1:59:a5:50:d5:72:
92:91:4c:30:f6:8a:69:b1:cc:64:a8:48:69:8a:c4:93:8e:37:
42:fa:38:6f:74:e2:6d:11:61:3f:67:b0:22:42:20:62:b3:26:
de:41:d5:6e:fd:da:39:93:56:3b:74:06:0f:1b:87:62:e1:5f:
59:c1:3b:65:92:03:4c:88:67:c0:33:61:14:47:22:9d:aa:c4:
a8:d0:8b:a6:dd:4b:42:1f:cd:83:bc:15:f9:a8:c3:53:97:6c:
d3:a8:48:a2:b2:83:2a:14:1e:a6:d7:20:ea:8c:91:47:a2:b5:
ac:ed:b6:dc:54:07:5d:92:0e:47:1b:90:8f:ce:ab:0a:57:00:
bc:d0:96:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 21:19:07 2024 by rpki-client on console-fra.rpki-client.org