Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/1-O1BWLqjTpYyO90J18gW9W118tc.roa
File: 1-O1BWLqjTpYyO90J18gW9W118tc.roa (raw, json)
Hash identifier: +nZ2jb+X1rKvLziaeIfIr9PMPiV2fn6vlvMpaVgPHAU=
Subject key identifier: F8:ED:41:58:BA:A3:4E:96:32:3B:DD:09:D7:C8:16:F5:6D:75:F2:D7
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 018CC56EB96C7BB8C04D909F204AC5B0CFFA
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/1-O1BWLqjTpYyO90J18gW9W118tc.roa
Signing time: Mon 01 Jan 2024 14:30:17 +0000
ROA not before: Mon 01 Jan 2024 14:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43477
IP address blocks: 194.191.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b9:6c:7b:b8:c0:4d:90:9f:20:4a:c5:b0:cf:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Jan 1 14:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8ed4158baa34e96323bdd09d7c816f56d75f2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:16:63:04:13:b8:e0:47:da:11:8e:51:6f:
32:95:bb:91:17:27:6b:d3:4d:5e:43:22:f6:f1:24:
41:67:79:c5:d7:95:ba:a4:ae:a2:bb:6f:49:d3:74:
e4:06:1f:e1:41:95:ad:91:85:3d:b1:92:79:86:77:
48:71:e9:80:cc:96:2e:bb:81:2b:d2:4f:48:5c:4c:
5b:63:a9:3d:e8:fc:f0:05:cf:15:99:67:c7:b3:fe:
dc:7d:52:5f:7e:c0:08:4d:37:af:b3:b4:14:a1:c8:
9f:9c:cb:91:8b:25:50:58:cc:e6:d3:2d:b7:77:64:
4d:4e:c5:79:b2:34:d1:36:48:6b:53:b6:80:ee:54:
61:11:50:25:66:c8:94:ca:14:2e:03:c2:6d:d1:cb:
74:74:92:7f:a5:0d:44:fc:3b:dc:0f:92:74:61:72:
c3:eb:fd:12:73:b3:80:54:8f:61:37:9b:60:a1:1e:
05:bc:df:5c:c2:0f:fa:f7:69:2e:fa:13:fb:96:59:
fe:13:61:3f:e9:d7:12:3b:6b:5a:da:68:f5:1c:78:
9c:0a:87:37:de:d5:8e:d0:e1:2f:34:d6:cb:39:30:
72:68:dc:64:d4:f4:3f:69:ef:01:17:1c:c0:4b:cb:
fb:78:cd:b0:50:31:b6:4e:3c:53:62:81:0c:bc:cb:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:ED:41:58:BA:A3:4E:96:32:3B:DD:09:D7:C8:16:F5:6D:75:F2:D7
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/1-O1BWLqjTpYyO90J18gW9W118tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.191.17.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0a:3c:34:99:e4:df:cd:98:be:89:e2:84:e0:fb:b9:6e:0b:
2c:ce:4d:9b:aa:3e:0b:ba:d4:f9:68:87:40:16:f7:c5:34:b5:
5e:bd:e3:5a:5b:92:24:e4:e1:0d:18:98:f3:b8:74:b4:35:20:
53:94:24:e9:0f:4d:85:68:e0:0f:ea:ff:91:7f:b8:e6:9c:75:
30:ae:3a:7b:b0:29:58:b4:94:e3:2d:31:6f:65:a8:69:86:a6:
29:90:0d:01:67:c8:8c:a1:66:44:72:12:2e:e1:67:1c:3e:d5:
43:17:94:cd:36:f6:a3:05:01:20:94:75:a9:53:f3:5c:a1:3e:
60:c3:51:41:10:81:02:98:26:cf:56:81:f3:9e:74:f8:cd:2d:
75:53:f0:34:04:d9:ac:e1:ed:b6:b9:b3:69:a9:00:2a:64:98:
e9:ec:ce:a8:1c:5d:ba:60:ab:3e:b4:e0:51:10:72:c9:b9:a2:
16:66:29:3c:b8:60:30:75:d5:b2:72:93:ef:ec:0c:af:07:d7:
d1:9a:a1:53:94:a7:d5:14:62:c3:e0:86:b3:ae:09:07:25:4b:
ea:43:e1:15:c3:3a:51:34:70:8c:1c:11:d4:ff:7f:d5:7f:34:
16:e6:89:5d:f7:45:b3:81:fd:78:d0:c9:8b:7c:d3:d0:22:cc:
58:c6:03:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:16:07 2024 by rpki-client on console-fra.rpki-client.org