Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/AkDlaqckoRVArheReMrdkGLTX7s.roa
File: AkDlaqckoRVArheReMrdkGLTX7s.roa (raw, json)
Hash identifier: Df5aizqgzUmtS4BvAXNRsodsJ45tE25sNEh4tyAOUlo=
Subject key identifier: 02:40:E5:6A:A7:24:A1:15:40:AE:17:91:78:CA:DD:90:62:D3:5F:BB
Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial: 018CC8DF46DEAC488DDDDA9D09F4A24A4672
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/AkDlaqckoRVArheReMrdkGLTX7s.roa
Signing time: Tue 02 Jan 2024 06:32:05 +0000
ROA not before: Tue 02 Jan 2024 06:32:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 193.203.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:46:de:ac:48:8d:dd:da:9d:09:f4:a2:4a:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Validity
Not Before: Jan 2 06:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0240e56aa724a11540ae179178cadd9062d35fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:ee:4c:43:3f:16:a3:aa:8e:a9:c1:64:90:
2d:37:3a:7b:bb:92:ef:69:95:fb:83:27:5a:03:e9:
b1:50:5e:fe:52:34:dc:af:67:6c:5f:00:09:25:2b:
0b:7f:35:f1:b8:80:44:f7:d5:08:9a:1d:c0:5a:c7:
fd:02:53:b7:19:c5:b9:8f:84:57:07:20:64:5b:65:
02:37:2f:cd:12:f9:e8:de:64:8e:27:a7:2f:8f:d0:
55:bc:c6:25:c0:4c:f2:72:97:b3:15:5d:52:90:d6:
51:62:f2:f5:94:46:c6:9d:c5:63:da:61:24:27:93:
1b:53:6a:73:af:da:b6:a7:a5:26:02:08:88:8e:74:
34:45:b3:67:ae:cd:34:f0:0f:11:ec:bb:3c:e8:b8:
50:0d:e3:a6:d8:0d:b0:f9:cd:af:5c:c5:67:52:ec:
04:d3:e0:34:09:3c:c3:4b:1c:d9:66:a9:59:3a:bb:
4b:9d:39:a9:37:a2:75:56:72:53:c9:88:3f:c2:8e:
d2:98:7a:e9:7d:8c:96:9d:b7:70:ed:ae:b5:a2:69:
e7:12:95:ad:e0:5c:8c:e1:a3:16:df:c3:05:c2:2c:
01:19:e1:b5:6e:d8:9b:d6:94:ef:d0:42:c2:1c:20:
c1:a3:14:e6:cb:8b:a0:98:de:57:14:0e:bd:85:5a:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:40:E5:6A:A7:24:A1:15:40:AE:17:91:78:CA:DD:90:62:D3:5F:BB
X509v3 Authority Key Identifier:
keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/AkDlaqckoRVArheReMrdkGLTX7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.18.0/23
Signature Algorithm: sha256WithRSAEncryption
53:73:ac:1e:98:c8:c3:f9:0f:1c:d0:69:e8:56:11:a1:9a:cd:
08:1d:b3:5b:ac:bd:91:30:fe:50:79:88:71:ad:fa:da:e1:6f:
ab:c1:b7:72:ff:f9:ad:29:66:08:3e:bd:1f:0e:ed:64:da:c6:
d4:d6:84:3f:be:aa:14:c3:a3:4c:d9:f6:cd:d4:b0:eb:da:38:
7e:e1:14:4d:d7:d0:0d:68:3f:be:86:eb:b4:89:82:20:da:97:
b0:5e:ac:7b:fe:cf:96:46:7c:bc:29:13:e3:65:47:08:3a:38:
75:29:49:c5:29:b6:c1:8f:5b:72:5e:b5:88:6e:2b:7e:ce:37:
c4:5d:69:a5:cf:00:3e:c2:af:12:95:df:7d:40:23:ec:55:be:
c1:7c:59:64:89:42:4b:6d:71:52:36:31:bd:79:6f:66:cd:5e:
2b:c5:91:9e:34:91:d2:3d:51:2a:6b:c3:07:8a:c8:df:ac:c3:
c6:39:3a:93:3b:77:43:40:35:a7:d6:19:c9:5b:90:0a:42:c0:
c6:9a:91:2a:aa:9e:75:03:f8:79:3f:5e:af:ff:d0:20:1d:8e:
c1:57:8a:88:4f:3e:5e:a0:ef:b4:c4:52:a1:a5:ee:5c:09:34:
31:da:f6:4b:ed:06:95:b5:cd:a2:a5:1a:b5:05:b2:b1:a8:8c:
61:8d:b7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:01:08 2024 by rpki-client on console-fra.rpki-client.org