Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/_0scJz_Pv9nrmUTQVdX7qVTqK40.roa
File: _0scJz_Pv9nrmUTQVdX7qVTqK40.roa (raw, json)
Hash identifier: rVJ1uimrY3aUthEjxEA61uwMFsgbcF6ksXx5+Styops=
Subject key identifier: FF:4B:1C:27:3F:CF:BF:D9:EB:99:44:D0:55:D5:FB:A9:54:EA:2B:8D
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 018CC5010D7CBB3C928723CAE1AF135837B3
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/_0scJz_Pv9nrmUTQVdX7qVTqK40.roa
Signing time: Mon 01 Jan 2024 12:30:29 +0000
ROA not before: Mon 01 Jan 2024 12:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13054
IP address blocks: 193.101.168.0/21 maxlen: 21
193.101.168.0/22 maxlen: 22
193.101.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0d:7c:bb:3c:92:87:23:ca:e1:af:13:58:37:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff4b1c273fcfbfd9eb9944d055d5fba954ea2b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:4c:e4:d6:58:da:c9:79:09:24:3f:90:ca:
86:72:19:4b:3b:73:24:bc:76:6b:82:c7:8b:e1:52:
d2:7a:20:53:61:9f:68:2d:22:5b:0a:7d:1d:63:e5:
ff:dd:f8:99:87:eb:3f:a3:7e:7e:3d:05:31:1e:10:
99:43:11:88:18:72:c7:75:b8:b8:2e:b1:b9:62:07:
05:32:fe:22:36:6d:8c:21:fe:5d:f6:b2:20:db:32:
6d:28:32:20:a3:0b:d5:7c:61:f9:88:07:5c:a4:8f:
f0:a9:28:a0:de:b2:a9:c4:96:3c:0e:af:0c:1e:21:
e1:8e:38:ae:e1:cf:fa:f3:d2:ce:9d:db:8d:6a:2c:
c3:28:18:49:ef:d8:3e:ce:b3:cd:76:dc:9e:4c:7e:
46:f6:b6:a2:dd:f6:fe:61:1d:0c:af:6e:52:9a:23:
5a:94:4c:8c:46:31:38:fc:56:6b:ad:94:5e:b2:03:
6b:7d:22:68:9d:e0:1e:e5:0f:60:6c:2a:21:8b:42:
c9:82:45:90:fc:4e:e2:f1:fd:af:41:b6:a2:0c:97:
37:75:82:68:03:92:b9:23:bf:b9:8d:9e:4d:a4:9a:
6d:fd:7b:be:dc:3c:af:f0:af:d2:0b:5d:4c:d3:27:
b8:b0:cd:1b:9e:f7:06:87:28:b8:de:0c:f4:ba:24:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4B:1C:27:3F:CF:BF:D9:EB:99:44:D0:55:D5:FB:A9:54:EA:2B:8D
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/_0scJz_Pv9nrmUTQVdX7qVTqK40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.168.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:a3:1a:3d:81:c3:d9:63:f8:3d:d2:da:f3:b3:b2:f1:f0:7e:
2e:4f:7f:f8:72:d1:dd:04:17:6f:eb:40:00:83:50:7b:09:20:
97:e5:56:27:80:72:8f:c7:d0:1e:34:72:e5:4c:0a:c6:a9:9c:
c4:87:61:1f:d5:4b:00:60:77:1a:d9:4c:58:5e:db:66:7d:a8:
79:28:70:f1:22:39:09:68:a6:d8:dd:b9:f5:10:d2:b8:a6:c1:
6a:6a:10:0a:ac:89:d3:65:1c:65:26:ac:bb:8f:1c:78:83:7d:
37:0c:f8:20:40:05:01:85:15:63:ee:aa:e8:dd:95:12:36:45:
8f:7a:14:d3:c0:e1:93:30:fc:3a:31:20:73:92:e7:78:11:a6:
00:cd:1f:09:d0:4f:cb:5a:73:44:6e:94:45:d1:43:cc:28:c8:
ac:3f:ac:2e:70:71:fa:a3:b9:7a:ba:b5:88:e4:a2:04:65:de:
60:9a:78:a6:5f:fd:2d:dc:95:da:e5:2c:d6:5b:bf:b9:27:38:
57:d4:c2:16:84:87:38:8e:f0:30:f8:c3:10:2f:1a:cc:8b:17:
4c:7d:49:b2:f5:72:70:04:82:23:74:ca:aa:d5:e1:fe:6a:74:
16:2f:0f:0b:eb:cf:6c:20:0b:a7:6b:bd:ba:a7:36:1a:99:95:
42:32:5e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:32:30 2024 by rpki-client on console-ams.rpki-client.org