Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/o7pQiS-1VDUhgKh5b8Ab44TnFBQ.roa
File: o7pQiS-1VDUhgKh5b8Ab44TnFBQ.roa (raw, json)
Hash identifier: RpP52HbaFhwWsBgPPuzdG2C4pM9Aqwh2X5ef9w0mVm4=
Subject key identifier: A3:BA:50:89:2F:B5:54:35:21:80:A8:79:6F:C0:1B:E3:84:E7:14:14
Certificate issuer: /CN=aaf2288014995932737ae7f9fc224df102141255
Certificate serial: 018CC86EF74F00665096112D1116E7E3DBC1
Authority key identifier: AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/o7pQiS-1VDUhgKh5b8Ab44TnFBQ.roa
Signing time: Tue 02 Jan 2024 04:29:24 +0000
ROA not before: Tue 02 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198199
IP address blocks: 193.38.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f7:4f:00:66:50:96:11:2d:11:16:e7:e3:db:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf2288014995932737ae7f9fc224df102141255
Validity
Not Before: Jan 2 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3ba50892fb554352180a8796fc01be384e71414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:d8:30:a3:6e:e6:05:ca:e0:d9:5a:b6:ae:
9c:91:08:48:95:b9:d1:fd:3b:25:5a:21:42:77:28:
74:b6:da:ed:6e:dd:d0:7b:ae:db:7b:2b:0a:ea:d6:
9c:07:d9:e8:8b:b6:24:8e:61:76:1e:43:eb:86:5c:
34:b7:0d:49:e5:49:ad:b6:e5:16:3e:d2:47:1d:5f:
b4:4e:9e:97:a6:88:9e:04:77:a6:fb:23:82:25:8c:
47:3b:57:ec:e5:f0:fd:a6:1a:af:56:de:97:a2:14:
2d:c1:8c:99:62:28:a2:3e:a9:bb:31:a3:84:6d:42:
9d:4e:0e:79:f2:67:41:a6:66:a0:d1:a4:f5:4d:f2:
e6:87:7e:d0:b5:09:df:4d:21:ba:31:68:3e:e5:a2:
a0:c7:21:0f:f5:4c:2a:75:16:1c:c5:07:0f:a2:0a:
54:9c:0f:fa:9d:b0:1c:5b:58:25:81:c2:55:58:6b:
1c:39:a8:22:eb:b9:69:ac:53:aa:6c:0e:59:b1:7e:
26:ac:be:32:1c:f7:a9:13:b7:f5:30:8b:c5:44:eb:
84:9d:60:64:8c:7f:2a:d4:49:c3:40:6c:c7:44:41:
4e:c6:27:b9:af:70:ee:97:0f:e6:f1:2d:d7:ef:9f:
e4:10:1a:be:14:7c:c1:16:86:b4:07:bc:99:2e:73:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BA:50:89:2F:B5:54:35:21:80:A8:79:6F:C0:1B:E3:84:E7:14:14
X509v3 Authority Key Identifier:
keyid:AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/o7pQiS-1VDUhgKh5b8Ab44TnFBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:1e:57:b8:76:73:bc:55:17:fa:45:05:29:8c:4a:48:9a:c5:
e2:85:fa:6c:e8:04:2e:29:fb:6d:65:24:57:e1:4b:62:d1:0a:
8f:d3:b2:19:65:e5:9f:6d:a5:fb:71:b6:ba:f9:9b:1e:4f:1f:
cf:b1:2e:cd:d5:bb:d6:53:fe:27:0e:b7:9e:59:ff:32:5e:30:
ef:dd:c0:40:41:17:9d:44:f4:ae:8e:01:a4:d3:05:2e:44:2f:
c4:74:64:ec:99:74:d0:30:34:87:e0:8c:27:87:3b:25:d4:41:
ef:16:b0:4b:49:55:84:53:78:92:f6:8e:ba:2c:52:b0:c5:5a:
2a:60:bb:a2:ef:69:c3:f8:e1:84:a0:01:52:f7:48:ac:a0:d8:
58:3e:bd:66:ab:23:5a:36:57:da:19:2d:6f:91:9d:76:26:b4:
68:e1:cd:d5:bb:38:0a:6b:c4:3c:06:16:0f:22:18:57:68:a0:
72:e4:3a:3a:86:ca:dd:b7:72:8e:50:bf:07:b9:c9:02:bc:a9:
15:2d:51:a5:e4:ed:65:ff:18:32:e6:b8:58:fc:fb:b2:20:c3:
df:d9:aa:ca:81:a3:10:e6:80:d1:13:e5:b1:fe:eb:db:38:76:
15:ea:51:fa:f7:7a:b5:32:29:b0:ff:15:eb:23:5b:c4:53:6a:
10:de:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:22:26 2024 by rpki-client on console-fra.rpki-client.org