Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9220da-0fd5-4a22-a11b-e1332e7f06fc/1/xSduVY02ewqaMJJSVtFMzm85AaY.roa
File: xSduVY02ewqaMJJSVtFMzm85AaY.roa (raw, json)
Hash identifier: vPcG7GBujF/wb7Fw4JM1J9O8zrtxSNLJqn8NdbyJeSg=
Subject key identifier: C5:27:6E:55:8D:36:7B:0A:9A:30:92:52:56:D1:4C:CE:6F:39:01:A6
Certificate issuer: /CN=b2d9401eca6c8a9306d10092bbe0c2e19500e97f
Certificate serial: 018CC49391EED31AA136FF30744746A853CE
Authority key identifier: B2:D9:40:1E:CA:6C:8A:93:06:D1:00:92:BB:E0:C2:E1:95:00:E9:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stlAHspsipMG0QCSu-DC4ZUA6X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9220da-0fd5-4a22-a11b-e1332e7f06fc/1/xSduVY02ewqaMJJSVtFMzm85AaY.roa
Signing time: Mon 01 Jan 2024 10:30:54 +0000
ROA not before: Mon 01 Jan 2024 10:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43427
IP address blocks: 193.228.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9220da-0fd5-4a22-a11b-e1332e7f06fc/1/stlAHspsipMG0QCSu-DC4ZUA6X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9220da-0fd5-4a22-a11b-e1332e7f06fc/1/stlAHspsipMG0QCSu-DC4ZUA6X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/stlAHspsipMG0QCSu-DC4ZUA6X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:91:ee:d3:1a:a1:36:ff:30:74:47:46:a8:53:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d9401eca6c8a9306d10092bbe0c2e19500e97f
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5276e558d367b0a9a30925256d14cce6f3901a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:e6:8b:7e:04:4f:2b:7d:ee:92:eb:df:ab:
06:de:d8:6e:81:18:f9:bd:7a:d1:ca:5e:84:d0:8d:
ec:7f:4e:cd:ab:8b:f7:cd:c3:a7:66:53:a8:e8:f2:
1f:20:7a:9c:f5:df:3e:83:24:06:f1:cc:f8:2d:31:
54:4b:82:ab:0a:9a:d0:1a:64:34:80:e5:f3:e8:63:
60:0a:fe:72:c2:76:e8:2f:8e:09:1a:31:80:be:a4:
34:29:8d:0b:5f:2f:8c:e1:76:2f:ab:ad:3a:14:6a:
fe:85:a0:5d:93:b8:75:9d:44:9d:b7:a2:16:95:c0:
62:86:13:d2:e8:4e:72:de:3c:2e:cd:01:69:c4:e6:
1a:92:bd:b4:5e:73:bd:e0:87:c2:3c:11:34:12:a7:
ef:02:4f:bf:2f:e9:d4:ab:aa:cb:6d:08:78:e9:30:
59:28:0c:6a:da:d4:07:22:d4:73:1b:99:1a:ac:f8:
b4:11:c6:15:83:e5:d3:a0:12:08:3b:bc:d6:30:12:
d8:00:f5:e7:e2:39:f7:b9:20:37:c9:71:cf:e4:68:
17:7d:b9:20:bd:66:c8:76:07:92:d2:82:71:2d:43:
24:15:01:94:a3:af:34:dc:63:6c:84:1a:d4:c6:1b:
ff:d6:44:53:47:ed:fc:56:83:56:0b:9f:3b:a4:05:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:6E:55:8D:36:7B:0A:9A:30:92:52:56:D1:4C:CE:6F:39:01:A6
X509v3 Authority Key Identifier:
keyid:B2:D9:40:1E:CA:6C:8A:93:06:D1:00:92:BB:E0:C2:E1:95:00:E9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stlAHspsipMG0QCSu-DC4ZUA6X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9220da-0fd5-4a22-a11b-e1332e7f06fc/1/xSduVY02ewqaMJJSVtFMzm85AaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9220da-0fd5-4a22-a11b-e1332e7f06fc/1/stlAHspsipMG0QCSu-DC4ZUA6X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.151.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e5:5d:37:42:4b:ee:7c:ff:81:ff:8b:5e:01:9e:cc:30:0d:
b6:11:b3:ad:83:1d:72:f8:e2:ff:4d:ff:40:55:d2:57:ca:bb:
39:00:c6:7c:c3:d8:d8:4d:a5:16:83:89:db:fb:41:15:01:5a:
80:2e:f6:a9:b7:71:b4:47:2e:73:6c:25:1c:84:07:ce:05:3e:
7d:ff:6f:23:47:ce:60:10:b8:18:b7:63:c6:05:39:91:9c:8c:
5f:14:44:c5:9c:ff:6f:f8:12:fd:2a:90:bb:14:0b:75:44:1a:
21:ad:3b:b6:d9:7f:86:41:59:25:95:3a:b9:d9:5c:e1:85:23:
a3:43:7c:c5:90:94:0d:99:74:0b:7a:a4:b0:a0:7d:fa:d0:25:
ff:0a:9f:fe:d6:be:48:b6:b3:57:08:a6:0f:6e:af:f2:63:f3:
ca:ef:46:5a:0a:63:ec:d3:50:0f:03:07:01:18:a3:21:cc:2e:
c7:8e:5a:02:47:61:34:ef:1d:fb:7c:48:b8:e7:0b:d6:3a:36:
6c:14:d2:ef:73:85:a7:75:f9:39:06:51:6c:d0:7c:41:ab:b9:
13:75:a4:e8:de:1c:7e:56:37:fa:41:cb:81:b4:74:8a:c8:dd:
f5:4b:16:6b:aa:26:5a:44:c9:36:b6:02:98:cb:d7:c2:a9:f3:
fc:29:4f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:13:26 2024 by rpki-client on console-ams.rpki-client.org