Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/Cj8PEaZC7DZrL6wVENgMWQ3wRp8.roa
File: Cj8PEaZC7DZrL6wVENgMWQ3wRp8.roa (raw, json)
Hash identifier: VWfgk2cb/ch9MMwXby49ufQNDB828fFMklAT4o+AM8Y=
Subject key identifier: 0A:3F:0F:11:A6:42:EC:36:6B:2F:AC:15:10:D8:0C:59:0D:F0:46:9F
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 018CC4936BF083B8CC879453010903FE4493
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/Cj8PEaZC7DZrL6wVENgMWQ3wRp8.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43665
IP address blocks: 193.10.30.0/23 maxlen: 23
193.10.29.0/24 maxlen: 24
193.10.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6b:f0:83:b8:cc:87:94:53:01:09:03:fe:44:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a3f0f11a642ec366b2fac1510d80c590df0469f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:85:18:f4:e0:a6:7e:16:e3:ab:2d:70:fd:
0c:e3:2c:31:24:74:53:b3:6b:10:74:c1:6e:17:df:
7f:f5:6b:0c:8a:a8:57:30:6f:cd:11:3a:ae:f2:8a:
0f:05:44:b9:db:71:44:f9:dd:7f:ed:73:71:59:20:
70:f8:79:c5:b7:c5:a4:7f:88:b0:9d:c9:5e:c7:6b:
ea:7f:b7:80:4e:95:bb:35:45:40:f1:31:77:90:83:
69:a6:fe:f4:9d:bc:46:c5:44:78:b6:77:df:41:83:
ce:49:10:69:9c:5a:b8:80:db:f8:73:1a:92:06:14:
7d:40:d9:47:1c:8d:6d:34:e1:4e:39:81:b5:ae:82:
a2:d4:9d:14:80:9c:1a:bf:d7:a8:fc:8f:3a:12:96:
ba:71:07:77:88:12:7e:0b:ef:ef:e3:ed:14:0a:aa:
02:c4:91:91:e9:94:75:b1:35:4e:ef:aa:07:f0:7c:
cc:f9:84:85:71:fa:2b:01:2f:5c:25:87:77:72:5c:
45:ff:21:d4:1b:38:52:2d:be:f2:3b:d6:97:c1:5a:
ac:16:55:6f:5b:e2:a2:b1:98:2d:c2:e3:12:1a:51:
04:12:51:44:74:55:c8:09:a4:5d:ef:68:d8:b7:96:
1d:33:5e:55:b9:f6:90:5c:33:75:3c:7d:af:3c:22:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3F:0F:11:A6:42:EC:36:6B:2F:AC:15:10:D8:0C:59:0D:F0:46:9F
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/Cj8PEaZC7DZrL6wVENgMWQ3wRp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.29.0-193.10.31.255
193.10.160.0/23
Signature Algorithm: sha256WithRSAEncryption
47:ec:46:24:89:44:4f:df:ac:ee:27:e1:ec:0e:61:c7:da:48:
ca:c0:12:e1:b6:ae:f3:e5:58:0a:76:ad:73:94:31:ad:2a:a8:
93:86:27:2c:ce:71:b4:c3:19:94:af:f9:b0:76:ab:27:5b:fb:
c0:3f:9c:04:e2:81:6c:2e:c6:e3:5d:45:c5:92:59:72:04:2c:
e1:44:3f:1b:ba:3a:a1:b5:e4:d4:2a:43:00:06:02:3d:0e:d3:
c2:b5:d2:a5:b3:62:d2:15:14:db:77:33:65:4f:4b:93:2e:b8:
b9:89:1a:08:2f:31:06:f9:4d:3f:ee:1a:93:68:f6:56:bd:4a:
b5:c8:bd:96:0b:ee:ac:49:fa:bf:ad:16:c9:15:db:6f:78:d5:
42:38:cb:40:74:e9:1d:4b:52:f9:ab:1c:a7:8e:7e:97:a3:52:
d0:de:cf:24:2d:3e:27:7a:ea:7e:e0:27:eb:f0:9e:34:01:c8:
bf:33:65:b9:15:b8:8c:ec:c7:e2:c2:b6:93:36:64:45:9d:53:
99:52:57:65:0e:fc:2d:35:c2:be:0a:59:e1:41:9d:d9:8b:85:
04:24:e1:be:db:c2:47:28:2a:cd:4c:da:1c:41:bf:15:33:68:
c9:4b:03:db:9c:55:18:d1:44:7d:65:68:f7:f2:f6:0a:0f:ca:
c0:62:a8:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 17 08:36:19 2024 by rpki-client on console-fra.rpki-client.org