Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/BwjXQhIEu2fvqeVa-KoixCZWpmY.roa
File: BwjXQhIEu2fvqeVa-KoixCZWpmY.roa (raw, json)
Hash identifier: 6Xg79+A/O3zrbemfrI9j7COtJgOoaXKoaU8CyFjLJWo=
Subject key identifier: 07:08:D7:42:12:04:BB:67:EF:A9:E5:5A:F8:AA:22:C4:26:56:A6:66
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 018CC493681465556BF61D2D4763CD3BEE7A
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/BwjXQhIEu2fvqeVa-KoixCZWpmY.roa
Signing time: Mon 01 Jan 2024 10:30:43 +0000
ROA not before: Mon 01 Jan 2024 10:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 193.10.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:68:14:65:55:6b:f6:1d:2d:47:63:cd:3b:ee:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 10:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0708d7421204bb67efa9e55af8aa22c42656a666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:d7:c0:fb:93:13:8b:35:e3:2a:06:b0:07:
09:df:16:be:9b:7a:0e:3a:97:ff:76:27:ff:9f:48:
fd:51:d9:f2:e8:4d:00:ac:b4:83:4e:f0:1f:1f:65:
c3:0e:21:81:7c:0f:39:0a:c5:43:96:cf:a8:68:ad:
ae:79:88:f1:78:96:37:56:f0:99:9c:47:2e:06:6e:
b4:12:7c:1f:9b:1f:03:69:ad:79:c3:e4:cb:ba:99:
59:2d:a6:41:cb:60:b9:0b:04:67:03:77:3c:3f:9c:
c7:0d:5b:be:a0:88:95:21:ee:0e:22:06:3b:b0:60:
77:10:55:36:c0:1d:db:75:3b:02:ee:b0:41:70:33:
af:07:4f:33:f6:61:b6:60:78:a6:20:52:8f:fe:59:
54:b8:03:81:3c:7e:d3:f8:4a:c6:7c:f4:17:26:7b:
88:2a:64:4c:4e:91:35:29:30:3c:6c:f6:20:60:ca:
df:aa:e4:a1:ca:b9:71:22:8d:da:ba:f8:c1:e4:dc:
1e:14:65:62:20:81:e1:36:22:eb:fb:70:36:59:01:
70:00:b5:ad:31:0f:e8:28:19:35:24:fb:2c:f5:84:
00:0c:6d:0b:e0:60:06:5b:b5:c5:44:cc:b3:83:0c:
d6:03:7e:a7:a6:11:e1:47:58:ad:cd:24:94:36:e2:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:D7:42:12:04:BB:67:EF:A9:E5:5A:F8:AA:22:C4:26:56:A6:66
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/BwjXQhIEu2fvqeVa-KoixCZWpmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.144.0/24
Signature Algorithm: sha256WithRSAEncryption
86:bc:3c:38:b8:ad:f0:bb:8e:02:8b:e2:da:e3:af:42:31:3d:
80:a0:f5:3e:42:72:79:02:db:8b:22:7d:5d:aa:09:ca:63:50:
89:03:82:aa:30:36:ca:fe:02:5d:9f:7e:d3:11:0c:bf:f7:7d:
d4:1c:2b:ed:f9:5b:2d:12:96:6e:2f:d4:9b:42:03:13:bd:d9:
0c:2b:36:22:83:33:fc:1d:3d:dd:9e:af:46:e6:7f:5c:f6:1e:
ec:1f:19:11:d8:fe:13:85:ec:c0:90:ac:4c:5b:d4:77:33:d3:
70:d3:1f:ea:8b:b1:dd:53:af:d9:6d:75:73:ae:62:9d:a1:b6:
99:07:35:91:50:60:a5:45:fa:b0:f2:c8:04:86:c3:79:3c:67:
0c:19:07:b3:b7:44:2a:d7:ee:48:16:db:d6:b1:c2:84:b3:0a:
7e:58:a5:98:bc:12:23:68:7f:fc:e3:7d:b4:80:2f:af:75:cc:
7a:c5:f5:e4:d6:13:30:6a:f3:ab:ae:1c:bb:1c:4f:82:5b:4f:
7f:c1:29:d1:37:40:b7:69:f9:4b:59:5d:d3:b7:7e:fc:0e:7a:
21:19:12:e1:9d:6c:7e:78:a3:74:70:90:33:5c:5a:4c:58:66:
94:09:22:56:f8:2b:03:97:e5:cc:3c:20:d5:36:31:a2:9c:fd:
00:11:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:28:06 2024 by rpki-client on console-ams.rpki-client.org