Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/B53Q3LwU9SB8dw25xfz9QtNatoI.roa
File: B53Q3LwU9SB8dw25xfz9QtNatoI.roa (raw, json)
Hash identifier: a63UvNBlLF4vByg+4vS+Zr5dqG9h59jcIwvJe/OyXxM=
Subject key identifier: 07:9D:D0:DC:BC:14:F5:20:7C:77:0D:B9:C5:FC:FD:42:D3:5A:B6:82
Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial: 018CC4245969129C94444D847B7D7C6A6FAB
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/B53Q3LwU9SB8dw25xfz9QtNatoI.roa
Signing time: Mon 01 Jan 2024 08:29:25 +0000
ROA not before: Mon 01 Jan 2024 08:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25304
IP address blocks: 193.254.230.0/23 maxlen: 23
2001:678:ecc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:59:69:12:9c:94:44:4d:84:7b:7d:7c:6a:6f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Validity
Not Before: Jan 1 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=079dd0dcbc14f5207c770db9c5fcfd42d35ab682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:65:fc:fb:09:71:b0:54:66:37:18:dd:dd:
6b:bc:50:78:ec:57:48:29:08:50:bf:c4:45:eb:34:
0b:fe:34:ef:52:a5:02:58:5e:ce:ad:81:27:b4:bf:
37:5b:0b:31:39:78:1e:81:13:5d:2c:e3:27:00:68:
66:4e:87:15:f3:b2:a2:6c:13:a6:e3:a2:37:88:1e:
7b:7e:40:8b:61:4c:76:a8:be:64:e6:de:fe:d5:62:
db:90:60:e9:61:8d:7f:c0:e2:0d:0a:3e:c0:ca:cf:
5e:de:5c:06:7c:3d:48:84:b1:80:9a:45:ea:bb:fa:
c1:5b:8f:6d:ed:ed:6b:2e:58:14:d5:51:58:40:71:
a7:18:8b:77:ac:92:78:8a:79:29:56:fa:5d:79:5c:
7c:00:ef:86:22:3b:bb:bb:22:88:7f:75:33:10:2d:
da:cc:a3:d2:e5:a0:47:f8:69:0f:91:8a:c8:07:a4:
9a:dc:38:71:48:62:86:0e:fa:92:7b:12:db:42:d9:
66:1a:3e:26:6a:8f:29:02:38:70:ba:e2:e8:fa:45:
f5:b0:31:3b:18:4d:ff:af:95:a4:14:a5:0f:21:fe:
12:54:2e:c8:ee:a8:84:89:55:5b:d5:5f:73:42:e1:
08:a4:79:b8:84:15:4e:a1:3f:d7:10:e0:59:d2:42:
0b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9D:D0:DC:BC:14:F5:20:7C:77:0D:B9:C5:FC:FD:42:D3:5A:B6:82
X509v3 Authority Key Identifier:
keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/B53Q3LwU9SB8dw25xfz9QtNatoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.230.0/23
IPv6:
2001:678:ecc::/48
Signature Algorithm: sha256WithRSAEncryption
6a:71:89:17:f9:f7:60:00:7d:b7:dd:a8:63:5f:81:41:4c:25:
b4:2d:f2:a9:82:b3:22:95:c7:54:2e:90:84:ef:85:a6:89:cf:
6d:b6:f3:eb:cb:a6:01:11:47:05:a0:74:63:ef:3e:c0:2b:7b:
fd:d8:69:55:75:62:7a:fd:3b:99:d7:f5:17:c7:54:fc:8b:08:
44:74:b1:a1:28:da:ce:a2:3a:8b:1f:1b:c6:0e:b9:e0:4f:af:
5a:7c:9b:f3:80:b2:ec:09:76:79:d6:2b:bb:3f:d4:e3:b5:08:
99:f2:8a:ec:06:ab:f5:de:9e:72:95:a9:ba:90:17:e3:42:ad:
e6:68:c4:65:9d:33:e1:c9:3a:5a:8c:d0:a2:92:7c:d5:e0:79:
e4:6c:3d:aa:71:42:99:2f:ee:db:07:c4:30:dd:28:3c:ce:ad:
20:8c:89:d3:bf:3b:33:2d:3e:4c:c8:45:ad:fe:6b:e4:cb:fb:
06:e2:92:07:6a:b3:d4:36:68:e0:bd:6d:2a:54:7b:8e:20:28:
ea:44:32:ed:4e:50:71:5c:42:f2:ee:24:0e:32:65:91:e2:dd:
7e:ae:83:24:b2:6c:80:78:f6:53:19:6f:62:52:ef:5f:a2:3d:
b1:bd:6f:20:d9:26:9d:bb:63:2a:2a:7a:77:8b:6a:ab:d1:a0:
ba:cb:15:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:42:50 2024 by rpki-client on console-ams.rpki-client.org