Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/xfvKPMdDGsdPIRbt-zpv6kJEsR8.roa
File: xfvKPMdDGsdPIRbt-zpv6kJEsR8.roa (raw, json)
Hash identifier: KmvPqG/QG3nANjFID7xOEueQj0zspuRhxWIUwA+UGJA=
Subject key identifier: C5:FB:CA:3C:C7:43:1A:C7:4F:21:16:ED:FB:3A:6F:EA:42:44:B1:1F
Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial: 018CC79376E6BC58AFC446805C4D8A69127D
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/xfvKPMdDGsdPIRbt-zpv6kJEsR8.roa
Signing time: Tue 02 Jan 2024 00:29:39 +0000
ROA not before: Tue 02 Jan 2024 00:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.243.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:76:e6:bc:58:af:c4:46:80:5c:4d:8a:69:12:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
Validity
Not Before: Jan 2 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5fbca3cc7431ac74f2116edfb3a6fea4244b11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:31:c8:13:ef:8a:13:40:47:89:bc:f6:ac:a4:
b0:be:20:77:fc:b2:5d:04:d1:6a:60:29:5e:80:4b:
a6:e7:9f:b3:c1:1d:33:84:43:45:bb:ad:dc:9c:42:
cd:8b:0e:68:c5:40:d1:85:fe:59:a2:d0:e0:a3:01:
24:d4:4f:a8:50:b2:0e:8a:0d:03:57:cc:55:1b:41:
60:a5:7e:99:73:55:64:ed:af:c9:77:aa:15:b6:fd:
3d:ba:e3:dd:8a:2b:17:9a:2a:50:02:2a:89:5b:7b:
dc:fd:a7:6c:86:c6:97:03:da:9e:37:fb:8a:31:68:
27:94:b2:16:ba:51:99:ef:24:15:b1:11:7e:d8:e4:
f2:53:66:60:6c:f9:0f:5c:61:1a:49:4d:5a:98:80:
3f:68:21:f7:5b:04:1d:88:c9:26:6d:6f:c9:cb:91:
d0:f7:9c:fe:0f:bc:f1:2b:a6:6e:58:34:ae:93:34:
14:01:12:c0:41:45:4d:d3:3e:74:11:ba:f3:17:2c:
5c:6d:d0:a8:ec:db:dc:05:02:79:cf:9a:10:6c:ae:
e9:33:73:00:75:9a:73:b2:08:6a:e8:84:af:9e:6e:
a7:9f:25:bf:fb:ff:8a:2f:d9:c6:e7:ce:a7:fa:82:
11:37:77:ed:cc:f1:76:e2:c6:37:53:ce:be:06:7d:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FB:CA:3C:C7:43:1A:C7:4F:21:16:ED:FB:3A:6F:EA:42:44:B1:1F
X509v3 Authority Key Identifier:
keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/xfvKPMdDGsdPIRbt-zpv6kJEsR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:cc:b7:03:74:6f:69:11:76:1d:76:4b:b3:39:ad:31:53:aa:
85:6c:48:d4:3e:5f:c6:8d:89:f0:c5:db:58:80:8a:f7:f8:f1:
92:a2:8e:17:8d:8c:fc:ba:20:de:d8:6d:06:1f:e6:85:1c:aa:
22:39:5c:9b:48:b9:df:32:3e:b5:51:9b:ae:f3:5e:4d:1a:59:
cb:fd:46:f0:4b:2b:89:54:b3:7f:76:4d:d1:48:8e:87:26:bd:
6c:ae:7a:10:99:30:40:39:15:2f:eb:4a:ca:54:05:46:10:96:
eb:41:23:7a:6a:c6:ea:19:85:74:f5:19:bd:5f:d5:ff:48:1f:
62:e8:6e:a8:ea:31:40:b9:f9:bd:18:d9:87:4d:55:fe:ad:f8:
e1:3e:cb:c3:15:a2:b3:5d:e2:2d:11:ef:3f:3c:8e:fc:00:28:
7c:47:d3:83:c8:fc:de:bd:03:12:91:03:ff:64:03:55:ff:91:
bc:dc:d3:df:39:8f:87:02:9c:45:a0:a3:f6:ab:4b:82:c8:3f:
7f:82:24:cc:72:f9:89:ee:ce:d9:38:7c:f7:86:a1:6e:1a:c2:
9a:aa:6a:9f:24:78:67:e5:ce:23:bf:8e:f4:32:75:16:e6:20:
58:af:11:9e:e3:9e:87:d5:09:4f:6e:44:ff:d1:46:09:b8:98:
c8:47:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:20:12 2024 by rpki-client on console-ams.rpki-client.org