Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/rRgfhJR4TT9dzLqJcDGdlpW1Lok.roa
File: rRgfhJR4TT9dzLqJcDGdlpW1Lok.roa (raw, json)
Hash identifier: rKFzq8KjYrmf4ByGWZ0AJvg3JiKHfmUeLEg5WftlB6Y=
Subject key identifier: AD:18:1F:84:94:78:4D:3F:5D:CC:BA:89:70:31:9D:96:95:B5:2E:89
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A7AF9A8490855ACF84CAB797642C4
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/rRgfhJR4TT9dzLqJcDGdlpW1Lok.roa
Signing time: Tue 02 Jan 2024 12:33:50 +0000
ROA not before: Tue 02 Jan 2024 12:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399641
IP address blocks: 193.36.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:7a:f9:a8:49:08:55:ac:f8:4c:ab:79:76:42:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad181f8494784d3f5dccba8970319d9695b52e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dc:12:a4:00:6c:c6:43:ee:8d:62:86:e6:23:
38:e4:97:05:7c:6e:05:a9:b4:ad:b4:64:79:8c:44:
6a:3c:b3:a1:7d:6d:12:54:a9:43:57:18:2a:fe:ee:
39:8a:2e:c9:e9:16:7a:1d:27:a3:ab:36:fd:d0:34:
f1:1e:88:9c:1d:12:ac:e6:1a:40:df:fa:55:5f:20:
9b:95:00:2f:7a:f2:a3:62:91:db:0f:f6:ab:7d:e2:
99:7a:a4:8e:90:ad:94:79:e5:6a:2f:99:32:ea:1d:
fa:a0:7d:39:dd:6f:62:bb:ae:a7:4a:70:80:ad:c7:
5b:f0:ab:4c:55:a7:91:34:cd:e7:70:a5:12:9d:ea:
75:10:9d:7d:53:01:1a:31:43:20:89:13:d4:93:a4:
49:95:eb:8a:58:9f:8a:39:14:a5:ac:68:b9:57:0d:
5c:f1:81:5f:9a:a9:ca:4e:14:00:1f:18:b2:c3:14:
93:75:99:c6:ab:ef:7e:6b:c0:af:cc:b9:70:54:20:
a2:18:fb:51:d3:7a:35:83:21:99:0e:2b:42:7b:0c:
ae:55:5c:88:91:7d:ef:35:5f:ef:f8:ec:86:27:24:
0f:11:a9:be:e9:75:be:df:59:8e:ba:3f:ba:20:f8:
65:c0:0b:fb:33:66:85:7e:7a:d3:0f:be:29:20:62:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:18:1F:84:94:78:4D:3F:5D:CC:BA:89:70:31:9D:96:95:B5:2E:89
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/rRgfhJR4TT9dzLqJcDGdlpW1Lok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.73.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:47:c2:aa:d8:f5:de:42:b5:ee:c5:f3:92:cb:3f:06:75:82:
ec:92:dd:9d:4b:e9:70:c1:dc:1f:32:51:af:9b:87:5a:75:f8:
c6:9c:6b:78:93:c9:b2:e9:ba:11:b0:66:a0:3b:b6:3f:79:b4:
bd:f2:d3:6e:16:4a:f7:30:0d:1e:6b:c6:b1:53:3b:ff:67:a5:
16:34:6e:76:62:af:02:75:94:d7:47:17:67:bb:9e:a5:eb:ea:
89:32:8a:bb:1d:8d:c1:68:7f:b5:6b:cd:7b:50:63:d0:9d:fe:
41:dc:1d:01:dc:02:d0:eb:34:46:3c:07:27:00:90:c8:a5:b7:
f2:1c:2a:95:c9:df:df:1f:67:7a:a9:45:c5:e0:61:3a:c4:53:
d8:18:fc:8e:85:b4:cf:38:1b:d8:71:fe:e6:19:f6:89:47:2d:
f5:bf:af:8e:43:1b:52:1d:49:06:e0:26:84:ac:70:b1:92:80:
78:f7:3c:4f:8d:e0:45:50:45:9a:bd:49:46:a7:42:0b:d0:21:
a3:a3:ff:d3:ca:06:fc:89:d9:5c:6f:3c:c8:e7:8e:6d:7e:10:
3c:1a:ca:a6:c5:d8:af:ad:a5:3b:d4:ec:2d:63:ed:1f:17:23:
c3:ea:d1:c1:d7:d8:81:fd:a2:4d:ed:44:8b:56:71:00:48:7d:
3a:dc:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:19:52 2024 by rpki-client on console-ams.rpki-client.org