Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/g4zCCWj1HMqx2ShfX2pC63ZthPI.roa
File: g4zCCWj1HMqx2ShfX2pC63ZthPI.roa (raw, json)
Hash identifier: jqSGqxN9UcXGWc1xwXoWrdsX1Ap0LuabkoWAiYBs7/A=
Subject key identifier: 83:8C:C2:09:68:F5:1C:CA:B1:D9:28:5F:5F:6A:42:EB:76:6D:84:F2
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 018EF2595B01EDCB4A05E1C36B9A2787E960
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/g4zCCWj1HMqx2ShfX2pC63ZthPI.roa
Signing time: Thu 18 Apr 2024 17:55:26 +0000
ROA not before: Thu 18 Apr 2024 17:55:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215140
IP address blocks: 193.22.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:59:5b:01:ed:cb:4a:05:e1:c3:6b:9a:27:87:e9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Apr 18 17:55:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=838cc20968f51ccab1d9285f5f6a42eb766d84f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ec:55:f5:de:ae:c2:7f:61:84:be:48:99:0a:
07:81:d6:90:cb:0f:51:76:c2:31:ba:c1:07:f6:e3:
b7:7b:76:2d:6d:40:e6:ce:c1:88:88:4d:94:36:2d:
c9:46:11:f4:9f:25:2e:b0:84:0a:a9:4b:83:f4:28:
16:c1:a8:66:c0:83:82:5a:f2:05:52:42:88:ab:6d:
c8:d9:51:af:fb:59:50:1d:df:7c:84:e8:b1:6b:06:
33:2a:be:32:b3:47:61:8a:9f:fc:37:ce:5a:64:dd:
d9:65:b3:cc:21:b9:fb:d6:e1:e2:d5:1b:b3:06:b4:
90:e4:21:24:49:1e:a1:8f:21:f4:8d:59:8c:a0:15:
2d:ef:dc:b2:6b:ad:9d:05:da:3b:20:05:6b:b1:a9:
9e:ad:d0:6e:9d:b6:21:a3:08:ed:27:33:44:9e:b4:
0d:95:d4:60:6b:67:ca:47:fb:ba:38:f7:06:c4:2e:
90:2d:eb:c1:18:44:13:cb:c6:e1:e1:fc:47:d3:71:
60:2d:48:1f:2b:0d:3f:a7:91:29:7d:2e:3f:0b:9c:
2d:f8:50:a0:c1:05:29:6f:c6:18:92:72:55:5b:79:
80:d3:3e:1c:c1:42:11:2d:5b:f6:f3:14:6e:e2:0b:
09:c4:83:23:34:a0:08:6e:16:4c:2a:3e:6b:a4:02:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:C2:09:68:F5:1C:CA:B1:D9:28:5F:5F:6A:42:EB:76:6D:84:F2
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/g4zCCWj1HMqx2ShfX2pC63ZthPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:53:5e:d5:87:26:c1:2e:87:2d:29:82:0d:43:a4:b8:51:ac:
dd:5e:09:14:f3:28:63:54:a5:20:c0:38:c2:6b:3b:3c:07:85:
ce:aa:6a:2c:df:fb:ec:2e:09:63:03:8e:e5:14:7f:e5:5d:3e:
70:11:a6:3f:db:71:83:b5:f3:7a:9e:40:29:c6:f1:4d:6a:7f:
14:51:5b:0c:ab:d2:d2:3c:5f:f8:e4:cd:19:7e:f2:1e:c6:00:
f9:a3:48:0f:8f:ff:93:65:60:bb:1c:26:c8:ec:ed:cd:8c:42:
b0:63:df:82:8e:7f:25:b0:a3:dc:ca:3e:38:d6:6a:89:bb:5f:
2f:0c:d3:40:f5:da:6f:3e:cc:1e:00:bd:e6:28:35:3a:d8:cf:
d0:69:e2:b6:28:dd:91:b0:5f:7e:17:bc:e4:09:01:c5:8a:67:
ab:10:14:cc:4c:7a:e8:dd:f4:fc:ff:34:98:51:f3:a8:75:86:
83:c8:07:9f:46:20:09:5e:ce:cb:c2:9c:f1:c1:7d:70:58:9e:
26:fb:8f:8d:94:f8:30:77:c2:66:90:7a:ae:e0:93:8e:02:7e:
6e:13:a8:e8:d6:d0:ac:83:c4:9d:c8:8c:3d:59:79:b9:7a:07:
be:fd:e4:85:36:4c:68:45:ac:75:5c:28:23:3b:46:09:89:51:
cd:7e:3c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:40 2024 by rpki-client on console-fra.rpki-client.org