Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/1qFPAwQ3C6YKvLn1MWbtcOhKF2s.roa
File: 1qFPAwQ3C6YKvLn1MWbtcOhKF2s.roa (raw, json)
Hash identifier: gF1OCAp00qZP6/pKRw1PYTyGiCEnfcVSN47yExfnQx0=
Subject key identifier: D6:A1:4F:03:04:37:0B:A6:0A:BC:B9:F5:31:66:ED:70:E8:4A:17:6B
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 018CC6B8FCDE950C3201C90F763BDDBB8D99
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/1qFPAwQ3C6YKvLn1MWbtcOhKF2s.roa
Signing time: Mon 01 Jan 2024 20:31:01 +0000
ROA not before: Mon 01 Jan 2024 20:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 193.103.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 04:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:fc:de:95:0c:32:01:c9:0f:76:3b:dd:bb:8d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 20:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6a14f0304370ba60abcb9f53166ed70e84a176b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:52:7d:0e:a1:36:bf:a8:73:35:49:3e:7f:
2d:0e:3c:a6:d0:86:b0:7b:da:e1:98:ff:e3:7e:23:
2f:ae:ac:58:4e:f1:a9:9a:c3:b3:ce:aa:fa:fb:66:
a3:ea:63:34:35:88:d7:d9:35:e7:f5:e9:87:60:84:
2a:a1:3f:01:cc:47:cc:c1:69:82:76:2e:a5:66:dc:
60:7a:a8:28:a3:f4:db:e5:76:60:26:42:3b:e3:2f:
9a:df:66:d1:36:5d:64:98:a6:f6:b6:81:0c:89:05:
1e:6a:13:1a:f8:d3:d4:14:1c:0f:83:72:c3:cb:59:
e9:72:57:a9:d2:4b:cf:d3:b7:88:af:5a:89:49:12:
ef:7e:30:e6:ca:b3:43:2c:da:c3:b7:c0:e7:a3:2d:
17:b4:f6:df:79:91:13:ab:73:82:74:08:4e:34:8b:
13:1c:66:79:03:fd:6c:97:29:85:04:eb:96:73:5c:
a5:f3:cc:be:76:eb:da:2f:d4:03:94:33:ac:d9:32:
90:44:2c:e5:e6:76:71:62:9e:fa:68:1f:7b:28:8f:
38:cd:b5:ec:f3:fe:5c:09:6a:ed:3a:77:82:7f:ef:
4a:b4:42:5d:aa:74:17:44:12:b3:d9:96:3f:c2:cb:
1c:7a:4a:8c:b8:13:49:63:f9:c0:c1:df:ca:24:06:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A1:4F:03:04:37:0B:A6:0A:BC:B9:F5:31:66:ED:70:E8:4A:17:6B
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/1qFPAwQ3C6YKvLn1MWbtcOhKF2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:85:bc:83:0d:d1:b9:87:1f:46:8b:b4:0b:46:76:e1:1c:3a:
07:7f:f0:92:36:b3:0f:cc:ff:a4:f6:36:0f:b6:b7:42:93:04:
43:b2:c3:6a:8b:25:e9:ba:25:5a:69:12:f5:fb:9f:6d:b8:48:
77:b1:43:e8:6b:98:70:49:2a:cf:41:52:a0:89:70:92:97:9c:
43:6b:82:fe:67:2b:02:73:a6:ad:81:d7:57:d6:85:e3:b8:23:
67:55:38:9d:95:29:85:34:1e:2a:d0:c0:e4:ee:4f:1e:2a:10:
0f:be:90:be:90:75:18:2b:6c:b0:3b:c2:e2:47:c4:93:fa:4e:
bf:57:27:0d:39:e9:00:fb:3d:6d:c4:8b:41:b9:aa:6f:13:7f:
f7:69:ff:36:a2:3c:ba:4f:0c:00:c7:76:77:3f:a6:5e:15:d4:
c0:19:b4:d8:f9:4d:41:03:ff:af:b5:c4:9a:59:75:06:0b:bc:
84:18:c2:ea:60:12:5f:95:f0:2f:26:f1:32:70:04:fb:5c:b4:
94:e8:04:9a:75:59:87:6d:cc:e4:27:fc:74:78:96:d5:bb:ae:
7e:60:15:67:bd:08:cd:cf:0e:d7:41:f8:51:e7:44:e3:e7:90:
9c:1a:84:93:81:52:a1:8a:4f:9b:a5:24:be:88:e6:83:99:05:
24:bb:23:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 10:13:51 2024 by rpki-client on console-ams.rpki-client.org