Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/38YzUzIK-QpSverlBDVNC7Q89NU.roa
File: 38YzUzIK-QpSverlBDVNC7Q89NU.roa (raw, json)
Hash identifier: AhaLPuXazwygMPG+zyPMxmH3rbwhEhXyAq+1PxF4pJY=
Subject key identifier: DF:C6:33:53:32:0A:F9:0A:52:BD:EA:E5:04:35:4D:0B:B4:3C:F4:D5
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7955BDC204DFEC3DE805B384242D505
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/38YzUzIK-QpSverlBDVNC7Q89NU.roa
Signing time: Tue 02 Jan 2024 00:31:43 +0000
ROA not before: Tue 02 Jan 2024 00:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58337
IP address blocks: 93.119.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5b:dc:20:4d:fe:c3:de:80:5b:38:42:42:d5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfc63353320af90a52bdeae504354d0bb43cf4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:e4:ba:3a:16:dd:33:7e:d0:09:11:78:e7:
e1:87:9c:48:aa:00:26:7f:a9:3e:52:f2:23:2c:4a:
0f:c0:58:1f:33:13:88:d0:98:e3:36:5b:db:2b:25:
85:1b:07:0a:33:41:3f:97:c3:d1:bc:b9:7f:26:de:
28:fd:a9:65:91:bf:0a:26:5c:b4:f7:9c:4f:d9:6e:
f8:51:51:cb:df:ed:3d:14:9a:69:dd:31:c4:94:7a:
5e:6a:0c:41:7e:1b:4e:cc:93:57:91:b8:5e:8f:a3:
05:1c:37:fc:a6:8e:31:63:1d:d2:3c:0e:61:b4:33:
1d:3e:01:2f:59:bc:e0:9d:b7:4d:4a:12:9a:5d:b9:
57:9c:b4:2f:6d:11:80:3a:d2:60:b3:bc:4e:d9:9a:
7c:56:da:b1:9a:97:69:f2:fd:df:eb:d8:e9:65:c2:
9b:e1:e4:b0:36:e4:73:e6:40:a9:1f:54:cd:d2:14:
dd:d8:c4:b0:aa:f9:10:11:86:c0:a0:84:56:8c:84:
17:3c:fd:e3:ed:25:ed:eb:5b:b3:37:e7:81:64:bb:
e2:ab:d7:3b:70:d2:49:17:7a:da:a2:c0:2f:ca:87:
86:a3:5e:f2:e6:4e:93:18:d0:bf:f7:83:61:0e:24:
b5:f0:3b:2f:39:5f:99:e8:27:13:a3:c4:3a:eb:8f:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C6:33:53:32:0A:F9:0A:52:BD:EA:E5:04:35:4D:0B:B4:3C:F4:D5
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/38YzUzIK-QpSverlBDVNC7Q89NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.192.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:3b:f0:b2:4a:1d:8a:0b:2d:66:d4:fd:16:51:8d:79:fd:48:
38:e6:b5:64:05:22:9b:db:c9:85:8c:68:19:ad:a0:42:48:72:
79:3f:42:de:40:70:1c:0c:21:4f:f9:9b:f4:b8:66:80:d2:1f:
d1:ff:b9:ee:9b:56:df:31:bb:16:83:08:48:ea:c7:12:79:98:
4e:50:12:fa:e8:85:42:a3:79:6f:e8:12:02:15:55:c0:f6:64:
45:0b:d5:73:b8:1c:68:25:50:0d:fa:4b:b8:50:dc:86:26:2b:
1c:2e:8a:0b:f4:3a:32:48:b5:5b:0a:be:78:31:6b:28:ce:7f:
50:aa:08:05:71:86:3a:f1:26:36:77:8e:50:42:d3:56:f3:23:
b1:bd:73:98:64:96:21:36:17:55:28:26:a8:7d:70:3a:3a:f3:
99:0a:9f:ae:4d:75:cf:5a:d9:75:cf:ba:0d:a0:78:07:3b:05:
22:67:45:9f:59:f3:4b:91:7c:d4:43:b4:b8:08:be:8e:c8:41:
5f:98:f6:e8:fc:6e:ef:66:db:17:42:65:ea:61:b6:dd:b4:1b:
f1:8a:e1:1b:0f:33:44:5f:63:41:9a:58:43:90:89:d5:70:04:
e7:62:7d:5e:f8:55:0d:67:29:b5:b8:57:f1:ba:6e:f8:db:c5:
74:ec:43:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 17:22:54 2024 by rpki-client on console-ams.rpki-client.org