Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/lPuxstygnDX5Ql06feou0LQiiwQ.roa
File: lPuxstygnDX5Ql06feou0LQiiwQ.roa (raw, json)
Hash identifier: qDdEpb63IXKuRcD1bubaHgwiWpmh5FDhuHQUcLz5yWE=
Subject key identifier: 94:FB:B1:B2:DC:A0:9C:35:F9:42:5D:3A:7D:EA:2E:D0:B4:22:8B:04
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 018CC4936A481261E935396C557D6CC7D7C6
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/lPuxstygnDX5Ql06feou0LQiiwQ.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8769
IP address blocks: 193.10.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6a:48:12:61:e9:35:39:6c:55:7d:6c:c7:d7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94fbb1b2dca09c35f9425d3a7dea2ed0b4228b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a1:77:c8:1f:77:a0:9c:7c:3f:93:f1:6a:69:
76:c1:b9:c5:a0:bd:29:17:86:b2:2d:2e:39:82:d8:
2c:b1:05:6f:3e:f2:69:6a:df:00:7a:fb:7a:b2:de:
cd:a6:4d:b3:1e:b7:39:c0:63:89:ef:44:58:18:5a:
ba:50:12:e8:d0:9a:8a:db:32:22:76:57:5d:2e:ac:
ed:12:42:0e:38:09:f1:a2:af:48:7d:6a:81:66:75:
6e:59:12:9a:4b:a3:e0:d9:75:15:a8:d3:6c:1f:bc:
62:56:1a:68:98:b8:bb:ad:16:71:c5:82:fc:33:d9:
6d:43:13:9d:1f:f8:85:f9:6e:99:8f:35:39:60:38:
9a:ef:e5:e3:12:86:d7:2f:fe:15:f8:79:22:89:05:
c0:76:f9:f4:33:44:f8:07:c7:f9:f7:eb:62:3d:9e:
4a:19:ee:49:b4:80:ec:6b:f5:56:77:25:f0:14:a8:
34:bf:61:d4:3a:ec:85:2d:72:2a:fc:10:bd:9e:f0:
d4:26:cf:2a:e3:2f:9f:0b:6e:5d:39:26:6a:06:9d:
37:8c:fe:72:14:51:11:38:5b:4a:d9:f5:d4:97:93:
b1:47:e6:c5:66:a2:db:29:98:04:7d:6e:16:71:98:
81:49:68:67:b9:98:aa:f8:5d:b5:e4:98:1a:c2:e0:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FB:B1:B2:DC:A0:9C:35:F9:42:5D:3A:7D:EA:2E:D0:B4:22:8B:04
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/lPuxstygnDX5Ql06feou0LQiiwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d8:f2:63:e9:d6:45:e3:89:88:ad:25:3f:4d:21:a9:30:73:
a3:c5:ae:7e:a5:17:fa:ac:4b:aa:24:7c:3d:65:fb:7e:b9:c7:
33:be:63:1a:ce:c9:b6:f0:d4:30:8a:08:5a:27:69:3a:a0:7e:
50:0d:3f:af:f2:94:e6:d7:6a:76:1c:4c:c1:b2:6c:90:8f:a9:
1d:b0:e6:ab:6e:c8:4f:9a:31:6b:18:c0:f1:27:ab:83:9a:7d:
f6:db:d0:62:e7:77:1d:21:20:df:be:0f:16:af:db:39:b7:3b:
0d:3c:3f:96:ac:8d:17:3b:66:ff:f8:f1:e1:9d:9b:8c:b7:8c:
e8:ca:fa:f9:be:3d:f5:2a:0e:e3:16:aa:39:ac:3f:2f:9c:a7:
79:ea:60:75:46:bb:e4:f3:76:91:d4:4a:5d:98:bd:e4:98:99:
0b:7f:9a:2c:83:91:95:54:bc:79:60:52:5a:57:ee:80:fa:c0:
ab:5a:0e:74:d6:78:a1:19:68:17:3d:34:70:16:1c:f9:54:e0:
dc:1a:59:0f:4d:84:d5:82:bd:1a:46:2d:b7:5e:ad:03:fa:3c:
68:0b:2f:29:ec:53:b6:f7:d3:2e:fe:e0:32:e9:b2:20:d2:f0:
da:32:92:31:73:c1:90:6f:39:57:ba:41:73:d3:27:05:1d:86:
1f:ba:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:06:47 2024 by rpki-client on console-ams.rpki-client.org