Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/riCP4CAyHz3dY19_Li897S2B9-k.roa
File: riCP4CAyHz3dY19_Li897S2B9-k.roa (raw, json)
Hash identifier: i2AHS4nyyYMpKBgIk5lkdxwzIJ4W3CewrsXgki0tp1E=
Subject key identifier: AE:20:8F:E0:20:32:1F:3D:DD:63:5F:7F:2E:2F:3D:ED:2D:81:F7:E9
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 018CC3B6F051B8D0AD845F834148EE8DE128
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/riCP4CAyHz3dY19_Li897S2B9-k.roa
Signing time: Mon 01 Jan 2024 06:29:55 +0000
ROA not before: Mon 01 Jan 2024 06:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3215
IP address blocks: 193.26.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f0:51:b8:d0:ad:84:5f:83:41:48:ee:8d:e1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Jan 1 06:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae208fe020321f3ddd635f7f2e2f3ded2d81f7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:b0:db:64:fd:b8:5f:78:64:60:f7:ff:1c:
bd:67:4c:2e:65:7a:48:8e:32:e5:67:24:de:2c:a0:
58:0f:5b:4d:97:a6:86:a5:22:59:c9:90:6a:53:3a:
df:68:dc:af:64:67:ab:a4:72:90:76:be:d4:fa:91:
0a:f4:c3:74:43:1a:61:e6:99:b9:ff:c8:87:1e:15:
c4:55:73:0a:44:fa:b5:b9:b3:0d:9c:08:c4:1c:4c:
28:d4:50:f2:25:ce:66:60:13:05:d5:23:18:2c:ff:
14:41:e1:f1:72:eb:92:59:29:59:8f:ad:f3:54:34:
89:03:61:f7:67:2c:cb:c1:7b:13:67:65:a0:43:1b:
0a:b9:b9:06:57:55:bd:1f:67:37:45:03:b6:da:01:
e3:ad:96:11:83:8a:ec:b4:df:e9:49:ce:8d:a3:27:
3d:99:0b:d0:20:cb:84:83:25:33:c0:66:f2:ae:77:
01:ce:41:9b:a9:40:27:f0:d6:39:64:5d:36:27:31:
1d:50:d4:41:83:29:1c:e4:20:ff:40:1c:d2:d2:b9:
55:fe:ef:e5:02:5c:82:45:a5:53:65:ca:0d:36:5f:
f3:2d:fc:aa:39:7c:88:e1:10:a3:93:48:15:ed:ed:
49:e4:8a:cc:d0:69:1d:b3:cd:eb:0b:ab:c8:92:23:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:20:8F:E0:20:32:1F:3D:DD:63:5F:7F:2E:2F:3D:ED:2D:81:F7:E9
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/riCP4CAyHz3dY19_Li897S2B9-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.29.0/24
Signature Algorithm: sha256WithRSAEncryption
16:43:6a:8a:a0:fe:fd:69:f3:08:d2:c4:df:d1:12:aa:e8:70:
e0:c3:eb:07:2d:36:7a:8a:6f:ff:95:8c:b9:67:ea:2c:da:09:
96:09:65:e7:c3:60:c3:8c:4f:7e:af:fe:1b:be:85:08:70:b8:
f4:19:51:8f:31:58:9d:4b:1a:22:84:17:06:72:89:5d:8b:5a:
c4:c0:7f:c7:6b:7f:9b:e0:ec:b2:4e:0b:2c:8d:bd:aa:ef:e6:
0f:d6:b3:f9:b2:e8:50:a0:d9:f2:f1:73:f6:63:55:71:0c:c0:
11:72:c2:4b:ce:ce:6a:64:eb:a0:f3:91:72:f1:03:ce:77:d8:
57:e7:b3:da:80:09:8f:27:48:13:25:15:3f:62:04:fe:2c:97:
d0:68:62:c3:6c:16:ca:9d:99:64:26:c6:0f:88:c7:e9:68:d3:
8c:f2:26:fc:49:19:8c:df:6b:d4:f9:5e:71:99:d5:06:eb:3a:
d9:56:10:23:22:52:a8:f9:d4:d8:dc:35:8a:c3:01:57:5b:33:
e8:4e:4e:8c:9f:22:5d:5a:4d:cb:f6:bf:52:78:c4:08:cf:69:
49:b4:17:98:2a:de:28:05:09:06:00:22:11:8d:7a:9a:39:ad:
e7:88:0d:9d:09:40:7d:4c:a0:c6:d3:f9:98:2e:c4:8c:f0:ea:
d2:28:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 05:10:06 2024 by rpki-client on console-ams.rpki-client.org