Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/qDY7COzGCI6FKy2BRC_0A3sfUsU.roa
File: qDY7COzGCI6FKy2BRC_0A3sfUsU.roa (raw, json)
Hash identifier: u5ePAXrl3vQGoISm+8xqP12Dder+ASUT837B6IMub9I=
Subject key identifier: A8:36:3B:08:EC:C6:08:8E:85:2B:2D:81:44:2F:F4:03:7B:1F:52:C5
Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial: 018CC5DC252D1E15F73BA334E73C6D61F4A6
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/qDY7COzGCI6FKy2BRC_0A3sfUsU.roa
Signing time: Mon 01 Jan 2024 16:29:48 +0000
ROA not before: Mon 01 Jan 2024 16:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43910
IP address blocks: 193.186.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:25:2d:1e:15:f7:3b:a3:34:e7:3c:6d:61:f4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
Validity
Not Before: Jan 1 16:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8363b08ecc6088e852b2d81442ff4037b1f52c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:59:74:67:a2:35:25:79:96:24:5b:b8:f0:
0f:f4:97:8b:80:5e:35:b6:6e:ad:e3:f2:f2:64:53:
a3:26:8a:eb:60:c0:d3:b7:ae:9d:49:05:72:f3:7b:
24:db:9e:2f:52:77:69:ef:3a:51:52:97:ab:0e:98:
94:9b:d3:a5:8b:46:90:74:05:51:1d:27:2f:20:50:
f0:b9:eb:0b:2a:d0:8c:ea:34:4c:4d:04:31:29:67:
ec:01:f1:f2:f8:ae:9d:04:e4:44:19:02:46:b3:9a:
5a:aa:9b:a8:39:c5:2a:ce:a0:13:59:84:0b:d4:04:
db:42:89:68:c7:0a:d8:d8:9e:e6:f9:62:f3:47:e6:
a7:38:aa:35:d2:97:b4:e5:3a:83:23:f2:0e:02:6e:
cd:bf:8a:8b:a6:26:4a:6e:3c:56:a5:63:42:71:5b:
70:32:63:45:10:aa:01:76:d5:76:9e:79:6d:09:3d:
42:73:2a:af:84:65:e9:76:eb:a1:bf:14:07:56:74:
ab:06:f8:5e:b9:16:ad:3f:1a:09:cd:08:0c:f4:34:
5c:c0:c1:4b:fb:18:62:03:c6:dc:7d:0a:ec:94:be:
ca:30:c1:97:82:9d:b2:e8:32:e1:14:5f:9d:bd:cf:
53:bf:f9:12:75:00:ad:f1:94:07:25:b1:ce:0d:db:
d0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:36:3B:08:EC:C6:08:8E:85:2B:2D:81:44:2F:F4:03:7B:1F:52:C5
X509v3 Authority Key Identifier:
keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/qDY7COzGCI6FKy2BRC_0A3sfUsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f0:4c:89:61:00:fd:36:cb:1d:8d:c8:4a:e2:d4:a9:97:6f:
ec:99:8a:ec:25:60:18:6d:5e:a4:f7:ac:6a:61:71:5f:b1:30:
2b:cd:4f:47:9b:f7:6c:3b:dc:40:7a:9a:63:d1:6b:93:d2:30:
75:ac:48:f5:2e:98:04:f8:c7:ae:55:c4:c8:a6:64:57:d2:7f:
08:c3:e6:1d:75:fc:26:14:ae:bd:17:e3:ab:a4:b5:0e:8b:d1:
c8:ce:48:8f:c5:47:81:9a:e1:08:aa:59:26:fa:1c:24:90:bd:
31:80:a6:19:54:37:24:b9:2c:48:a6:a6:e1:c5:03:4b:dd:2a:
6c:d9:2a:16:cc:c5:a6:56:0d:31:f5:e4:14:21:ec:ec:e8:c8:
a4:9f:1a:6f:87:d6:6e:e0:8f:70:9f:0b:a0:ac:87:cc:bd:df:
1b:ac:a4:29:5f:0a:11:a4:ed:20:da:bc:84:91:a2:b4:12:a8:
d7:32:59:2a:e0:a9:76:50:3d:19:ff:a0:4a:ad:b6:92:b2:fb:
6c:a7:df:7f:0b:21:e5:aa:83:e7:03:af:3a:d1:d9:bc:a1:5e:
aa:c1:89:10:e8:73:17:0b:0a:5d:c7:50:7e:5c:ce:c3:4a:00:
77:38:1c:3b:f4:3e:a4:f7:e0:cd:72:09:cc:74:f3:47:94:95:
1d:69:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:16:58 2024 by rpki-client on console-ams.rpki-client.org