Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/F1yQr5zsQH3NcFuwyxd6dzmpm80.roa
File: F1yQr5zsQH3NcFuwyxd6dzmpm80.roa (raw, json)
Hash identifier: hGpYZAlEqhhBoEjlZFBAJPxWFokFrhTrY+ltSSkexOY=
Subject key identifier: 17:5C:90:AF:9C:EC:40:7D:CD:70:5B:B0:CB:17:7A:77:39:A9:9B:CD
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 018CCA2B04870CF531663C56C168C9C43992
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/F1yQr5zsQH3NcFuwyxd6dzmpm80.roa
Signing time: Tue 02 Jan 2024 12:34:25 +0000
ROA not before: Tue 02 Jan 2024 12:34:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43887
IP address blocks: 193.236.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:04:87:0c:f5:31:66:3c:56:c1:68:c9:c4:39:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 2 12:34:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=175c90af9cec407dcd705bb0cb177a7739a99bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bf:fd:89:7d:c2:66:96:28:7a:74:3a:16:4a:
af:6e:af:34:0f:b7:ed:2d:dc:50:66:23:21:b7:09:
31:f6:54:39:d3:cd:67:ef:53:bd:66:f0:e6:78:36:
63:bf:42:e3:80:bc:97:3c:ed:3a:9b:3c:10:37:dc:
f4:47:ef:61:6c:12:70:6c:6e:2d:8c:55:30:cc:e8:
e6:80:53:13:f8:32:50:94:87:06:b8:cd:40:39:23:
29:ee:ed:72:5e:a7:83:9f:00:3a:e5:68:6b:c3:a2:
f0:8f:66:13:ce:ae:ba:b4:e7:be:7f:8e:2a:9d:11:
cd:a8:5e:f6:3d:54:dd:df:e6:fe:d9:82:b4:82:25:
fe:eb:d0:d7:58:9c:8f:ca:c2:ab:a5:33:b9:1b:61:
fd:7b:c7:b8:9f:c6:2d:bc:cc:15:01:7b:38:39:19:
9d:70:55:4b:91:83:3c:cd:98:8f:76:96:26:29:2c:
ce:26:c9:3f:df:0b:5a:0d:55:54:9c:91:85:53:90:
7d:fa:27:52:ac:a8:c7:89:52:00:42:3e:c5:55:61:
3b:54:62:56:31:a7:45:cb:3e:8e:0b:24:d4:1e:fd:
f6:57:e3:d0:3d:ca:56:48:0a:3e:3e:c3:70:d2:69:
cd:e6:c6:fd:da:9e:1c:03:9c:82:d0:34:bd:01:91:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5C:90:AF:9C:EC:40:7D:CD:70:5B:B0:CB:17:7A:77:39:A9:9B:CD
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/F1yQr5zsQH3NcFuwyxd6dzmpm80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.236.152.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:bc:9b:91:94:f6:3f:49:ef:50:c4:8b:10:ce:bf:d4:ed:fb:
54:a1:77:9f:89:29:7f:95:9d:d4:78:45:db:04:1f:b1:99:68:
54:c4:fa:75:fb:4a:51:23:29:0c:a5:5c:03:cf:c5:5a:5a:64:
2f:99:2f:2f:d6:06:b9:ad:19:d1:62:bb:18:d4:89:4a:86:4f:
79:fe:84:34:93:07:25:48:e7:cc:6f:4d:0c:f7:ed:69:36:49:
08:f2:66:31:2e:22:1a:a0:75:27:2d:75:43:23:83:3a:a7:de:
96:bb:3e:67:a1:15:68:84:b6:6c:2b:71:6d:dc:61:fe:2d:42:
d7:88:a3:dd:18:13:1f:74:d7:ee:34:2c:0a:87:7b:28:04:54:
6d:ce:6f:65:0c:9b:a8:76:10:75:9b:63:25:7f:fc:f6:fe:ea:
d0:7d:f7:04:02:9f:72:87:c8:46:dc:9c:91:4d:90:18:48:86:
c5:d4:a8:0d:be:1b:d6:53:8f:8d:f9:17:8d:23:91:10:6f:77:
6f:e5:5c:76:c5:a3:e7:9e:52:e7:5b:bc:0b:44:17:da:4b:68:
bf:2c:d1:b9:c6:19:96:50:b5:4c:1a:0b:7c:e2:94:19:ae:15:
e3:1e:3c:d3:13:d3:27:91:bb:f8:51:5c:0f:44:17:22:b0:ce:
66:92:c0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:31:58 2024 by rpki-client on console-ams.rpki-client.org