Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/v1510sXmrdmFsDgpvJtK2lKZAVw.roa
File: v1510sXmrdmFsDgpvJtK2lKZAVw.roa (raw, json)
Hash identifier: xDIOHilkpMC/po5uvnmRW31cLz5+biysmpyF9eXqXJw=
Subject key identifier: BF:5E:75:D2:C5:E6:AD:D9:85:B0:38:29:BC:9B:4A:DA:52:99:01:5C
Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial: 018CC4252A9351F8DF8E3899A07512D11524
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/v1510sXmrdmFsDgpvJtK2lKZAVw.roa
Signing time: Mon 01 Jan 2024 08:30:19 +0000
ROA not before: Mon 01 Jan 2024 08:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3332
IP address blocks: 193.40.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 23:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:2a:93:51:f8:df:8e:38:99:a0:75:12:d1:15:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Validity
Not Before: Jan 1 08:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf5e75d2c5e6add985b03829bc9b4ada5299015c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:4e:c8:ee:0a:69:f6:43:0a:b9:3d:0c:df:
11:03:a1:df:e3:0b:ae:d7:c3:2f:0f:84:2a:90:32:
06:9a:c2:81:48:60:a8:b8:26:ad:2c:c0:39:0f:0f:
e8:01:f9:5d:50:c4:ff:3d:e5:eb:99:d2:da:f6:cc:
81:34:c2:54:c0:3c:96:4c:2c:79:72:b3:63:e6:7d:
2a:df:61:43:4b:3e:19:31:ab:96:1f:e9:09:b9:dc:
c7:a3:09:29:e3:44:41:e3:69:40:3f:c2:ca:d3:1e:
e3:f0:c2:52:84:4d:92:2d:25:98:ed:06:ce:f0:09:
1e:55:58:f8:cc:48:21:f5:3c:d7:f6:ee:0c:57:df:
1a:af:a7:92:ef:5c:fa:49:77:eb:9c:51:99:63:f9:
2c:6c:a9:4c:f6:b2:a6:54:55:6e:db:5a:84:a7:b6:
6f:cd:2c:61:51:d1:90:33:a1:3e:d1:21:ed:55:6f:
5e:14:c0:9c:07:8f:d3:55:55:09:b5:4d:2b:83:bf:
cb:e3:c4:b4:57:9e:9a:ef:9b:d1:71:13:52:33:00:
4d:d4:6e:3f:d5:1a:88:54:98:a8:b6:fc:13:5e:a0:
d4:37:94:4a:43:2a:b6:3b:9a:4c:be:7c:76:ee:de:
49:42:f0:53:f8:45:f5:2c:f8:8c:77:7d:46:77:13:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5E:75:D2:C5:E6:AD:D9:85:B0:38:29:BC:9B:4A:DA:52:99:01:5C
X509v3 Authority Key Identifier:
keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/v1510sXmrdmFsDgpvJtK2lKZAVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.40.195.0/24
Signature Algorithm: sha256WithRSAEncryption
73:90:94:32:9c:f7:12:47:e9:13:63:10:2d:19:f6:e8:97:24:
45:3a:4e:17:7c:0c:a6:f8:78:fd:21:62:7b:c8:bc:60:d4:7b:
59:70:40:cc:50:af:e2:11:c8:d5:46:b7:30:c0:43:aa:e1:77:
f6:48:86:9e:e9:a1:a3:d8:3c:e2:37:3f:58:ac:46:f6:55:36:
75:47:c0:dd:a6:9c:e9:04:88:28:4e:27:81:da:e9:54:99:85:
76:11:92:cb:12:d5:d5:5c:c6:f1:f0:a4:fe:5b:fb:71:4d:0c:
4f:98:70:ef:cc:70:10:a6:55:1e:4a:43:30:7d:f4:cf:27:6d:
71:9e:87:36:34:bf:39:20:9c:ce:69:30:ef:3f:cf:98:40:0f:
b4:2b:97:71:3c:84:47:43:43:21:11:6c:28:a2:7f:d6:90:d5:
6a:c5:cb:db:f8:5a:80:db:a3:b1:f8:02:8a:72:8c:09:7f:6d:
e0:86:aa:17:db:44:c8:63:3a:1b:8c:f6:6e:ae:60:03:f7:b3:
ac:6f:e5:68:0c:26:f6:36:78:6e:de:44:a0:c9:19:21:62:e0:
5e:af:b4:90:ca:9a:30:00:8d:6a:e3:f4:65:65:12:d7:e1:2a:
2d:36:cb:cb:95:64:b7:81:ea:bc:3e:60:b2:18:65:aa:22:d9:
cd:72:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:02:22 2024 by rpki-client on console-fra.rpki-client.org