Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/53OTQ-9puIizhxERbqIKjpxxnnw.roa
File: 53OTQ-9puIizhxERbqIKjpxxnnw.roa (raw, json)
Hash identifier: /J+eHgcxbTpw3B7Z8fowM08UR5pHOuWkv9P2cvu91+s=
Subject key identifier: E7:73:93:43:EF:69:B8:88:B3:87:11:11:6E:A2:0A:8E:9C:71:9E:7C
Certificate issuer: /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial: 018CC86F5F7F4A43A03705BBE5BE99F64912
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/53OTQ-9puIizhxERbqIKjpxxnnw.roa
Signing time: Tue 02 Jan 2024 04:29:51 +0000
ROA not before: Tue 02 Jan 2024 04:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3242
IP address blocks: 193.43.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:5f:7f:4a:43:a0:37:05:bb:e5:be:99:f6:49:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Validity
Not Before: Jan 2 04:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7739343ef69b888b38711116ea20a8e9c719e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a6:ef:47:ec:64:9b:cd:89:8d:9f:37:8a:6c:
16:36:9d:a6:dd:82:cd:fa:14:5e:4d:ee:a6:d3:71:
c5:20:ef:b0:34:23:6b:5f:0e:6d:69:e0:ae:b9:af:
e2:79:8a:29:d6:6a:9c:5b:84:62:75:ca:06:9e:aa:
67:0a:c9:b2:eb:97:c4:24:05:2f:da:ac:22:ac:18:
4d:d0:b3:ed:4a:b1:6d:9a:24:c4:17:3d:3a:b4:4d:
6e:7c:9a:6b:5f:9c:8f:0b:be:69:20:fd:d8:57:25:
a7:41:d8:1c:6d:51:29:d4:df:c1:9f:b0:5b:fe:d3:
88:f0:34:22:19:f2:a6:e7:fc:b4:7c:52:cb:b3:a7:
93:45:65:65:42:5e:b7:fa:a3:26:9f:cd:67:c4:d8:
70:90:30:59:78:48:d0:8e:d8:ff:ab:fd:3c:21:ca:
dd:11:c6:8b:82:c3:1d:f2:1f:5b:d1:e4:80:eb:39:
d4:23:6b:50:86:e8:44:e2:73:1b:5e:c6:9a:08:bb:
b8:de:97:28:c1:f2:59:98:4d:9f:a1:0f:28:19:8b:
65:ef:bf:aa:d2:63:98:36:3c:d4:90:cc:50:09:16:
7b:da:81:1e:d9:6b:8d:eb:09:b4:eb:95:fb:d4:ba:
bb:60:fa:4c:9b:3b:7d:97:30:d9:69:b0:c9:04:ae:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:73:93:43:EF:69:B8:88:B3:87:11:11:6E:A2:0A:8E:9C:71:9E:7C
X509v3 Authority Key Identifier:
keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/53OTQ-9puIizhxERbqIKjpxxnnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.132.0/23
Signature Algorithm: sha256WithRSAEncryption
22:a7:44:40:9a:18:66:0c:f0:6d:14:59:91:0f:aa:47:03:2c:
f6:9b:76:6f:6d:7f:0d:65:24:58:94:4c:76:df:cb:38:f7:0c:
16:7d:18:2f:70:df:6f:8f:72:82:79:b9:3c:fe:bf:b9:66:f2:
38:73:9a:8f:0b:32:54:4e:5a:e6:19:14:8b:f2:76:78:f7:e2:
16:fb:63:11:a4:db:36:46:54:fd:9a:73:3f:79:bd:9b:d0:b4:
24:68:cc:6b:d9:3e:cd:71:91:36:79:a8:26:bc:8b:f8:bf:fb:
7f:c8:2a:b4:9e:b6:ba:c3:87:53:02:11:c2:b9:8b:d0:51:d3:
b9:d6:34:e0:eb:75:3f:0f:9a:59:b5:41:ca:40:68:d8:42:3c:
8c:b6:53:62:23:8d:04:2d:02:3a:c4:34:2a:d6:bd:89:b0:7b:
ae:06:3e:c5:f4:f0:21:ad:5f:ee:5b:83:57:ea:f4:1b:a2:5e:
42:2c:ce:ec:df:41:20:2d:49:d4:75:f3:73:c5:e3:00:d4:db:
c4:6c:51:60:16:6c:ec:c4:f5:cc:af:5c:b1:29:56:8e:e0:fc:
ce:a6:35:9c:d5:7c:fa:17:61:83:d3:20:4c:2a:24:56:08:d9:
08:22:df:46:d0:be:d8:eb:2e:80:81:e3:ed:9b:39:d2:b0:bc:
8b:a2:e5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:08:47 2024 by rpki-client on console-ams.rpki-client.org