Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/RP7uFutszB-xOFADZVTEBD5Ri4U.roa
File: RP7uFutszB-xOFADZVTEBD5Ri4U.roa (raw, json)
Hash identifier: TUS5+ARPzHo+zDeUTzJJVC83a+LP72AYw/7iz0HelVU=
Subject key identifier: 44:FE:EE:16:EB:6C:CC:1F:B1:38:50:03:65:54:C4:04:3E:51:8B:85
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 018CC9BCB0FA00DC7EB73613088C7F104133
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/RP7uFutszB-xOFADZVTEBD5Ri4U.roa
Signing time: Tue 02 Jan 2024 10:33:55 +0000
ROA not before: Tue 02 Jan 2024 10:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39686
IP address blocks: 193.247.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b0:fa:00:dc:7e:b7:36:13:08:8c:7f:10:41:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Jan 2 10:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44feee16eb6ccc1fb13850036554c4043e518b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:b1:54:76:78:86:53:0d:e2:e1:cb:53:b2:
97:b3:48:1b:d5:a7:f3:1e:77:19:89:bc:11:76:07:
61:25:25:5d:c4:96:b5:8f:e7:b7:01:c0:58:b4:fc:
6b:ab:4d:66:cf:36:07:85:bd:f4:27:48:17:fe:ae:
67:32:c6:51:49:ca:4c:85:eb:40:fc:cb:93:8b:95:
4c:77:32:b1:a1:27:51:92:32:36:4e:8f:ef:03:21:
12:31:67:ac:f7:30:50:cb:66:7c:b4:fd:1c:0f:bf:
0e:4c:a3:75:4d:7f:b3:7e:70:be:48:ac:6d:81:b5:
72:f5:44:53:cd:2e:6f:a8:48:f9:a5:43:b3:4c:fc:
37:db:98:4b:63:af:4b:8e:e7:62:a1:ce:34:98:a0:
d1:c4:66:cc:23:5c:9e:a2:d7:57:b7:44:e8:fa:fb:
0c:22:81:f9:ba:30:49:92:1b:01:d0:33:68:25:4b:
a8:f3:2a:2a:5f:f2:05:15:81:0f:cb:e1:57:b6:4f:
ec:15:ac:2d:3a:5e:56:d8:fd:92:60:01:f2:6b:fe:
5a:05:eb:9b:e8:b5:89:46:4f:f1:9e:f4:44:fb:10:
0e:e0:8b:ba:1e:85:b5:33:4b:6a:4e:27:e1:5c:0e:
77:b6:ea:81:5e:e3:c9:1d:af:ef:ec:81:22:d8:7b:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:EE:16:EB:6C:CC:1F:B1:38:50:03:65:54:C4:04:3E:51:8B:85
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/RP7uFutszB-xOFADZVTEBD5Ri4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.198.0/24
Signature Algorithm: sha256WithRSAEncryption
07:85:96:b7:30:ff:72:65:e5:25:9c:ba:e3:2a:56:4c:af:c4:
8c:21:14:a0:7c:80:16:f3:cc:15:56:5f:bf:fe:87:f1:5a:fa:
a0:99:4a:f1:dc:b0:5a:1b:7d:7d:fe:9c:39:26:db:1d:64:af:
a2:30:5a:9d:99:c3:96:af:54:58:01:a3:de:da:bf:1e:34:23:
de:e4:f7:fc:c8:db:d7:a8:2a:1a:9c:47:fa:15:be:59:6e:9c:
aa:f6:40:18:25:0e:51:00:98:02:ac:98:20:d7:aa:39:cf:70:
42:72:24:ad:d7:6e:75:ab:cc:8f:18:11:15:8b:fe:7f:6f:6e:
7a:4f:82:e1:d7:9b:9d:56:15:0c:64:82:d7:6f:32:51:5c:93:
f1:70:b4:bc:3e:66:f0:82:84:fb:9d:00:3f:ac:3d:65:04:8d:
e0:42:60:57:f8:8c:cc:fd:ef:cf:d5:ee:ae:9e:b4:cf:6a:45:
84:2b:67:1a:8a:e7:32:ee:79:20:ed:47:66:71:f7:3e:1d:4a:
02:ae:ee:47:fa:e4:6b:c1:7a:7c:f5:55:77:bc:f1:56:7c:b9:
37:4e:cb:41:ae:21:65:76:17:f8:62:04:73:0a:eb:bc:a7:29:
81:35:ca:78:a3:08:ad:0a:dd:7d:09:e8:0b:fd:96:63:dd:0e:
44:4f:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:06 2024 by rpki-client on console-ams.rpki-client.org