Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/1-3sL9i5wkk8-oUivQuXlskOoouY.roa
File: 1-3sL9i5wkk8-oUivQuXlskOoouY.roa (raw, json)
Hash identifier: sYutg7/fDDKG99nQRCzfHiYaHmGv4LrN2Djugh0MLDc=
Subject key identifier: FB:7B:0B:F6:2E:70:92:4F:3E:A1:48:AF:42:E5:E5:B2:43:A8:A2:E6
Certificate issuer: /CN=c20897c1dbd606929137e672bad0c1f67e637d16
Certificate serial: 018CC3B71AC704DECB7AFE653EEC793C369E
Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/1-3sL9i5wkk8-oUivQuXlskOoouY.roa
Signing time: Mon 01 Jan 2024 06:30:06 +0000
ROA not before: Mon 01 Jan 2024 06:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 193.188.240.0/24 maxlen: 24
193.188.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1a:c7:04:de:cb:7a:fe:65:3e:ec:79:3c:36:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16
Validity
Not Before: Jan 1 06:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb7b0bf62e70924f3ea148af42e5e5b243a8a2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:f9:8a:0d:27:36:df:58:fa:22:5d:30:59:
5c:2d:7d:b0:9f:ce:66:7d:e4:1f:63:20:0f:61:e0:
0f:28:e0:bb:c1:65:32:02:ef:b9:11:08:94:cc:fe:
f1:06:0d:88:58:d9:29:d9:45:7d:2b:fb:17:b5:40:
ba:bb:1e:3e:a6:f1:d3:f9:8b:7a:0b:8a:e0:aa:64:
16:a0:37:f6:28:1d:82:93:7b:19:d8:1e:dc:d7:a1:
11:d2:94:2f:6a:84:63:6e:fa:e1:f2:5f:50:6b:14:
3d:e0:1e:30:5b:5d:ad:b0:55:56:f8:1d:9c:2b:06:
fd:7e:29:d2:d6:e6:9f:82:76:84:93:40:a1:63:ee:
e0:0b:2a:00:cd:17:a7:c2:bc:be:48:93:fa:d8:d2:
ae:a9:3a:0a:a5:6b:b5:75:82:cf:76:bd:2f:e4:31:
63:e4:35:eb:46:48:1d:85:13:ec:79:16:7c:c4:0c:
12:a7:59:f1:cc:20:bb:19:68:88:14:95:79:1a:21:
26:1d:a7:65:6b:0f:8c:02:5e:e0:44:e8:4f:1a:0b:
fb:55:57:a3:d6:36:0e:04:5b:55:7c:2e:aa:d5:92:
32:e5:c2:b6:ce:a3:f0:ae:68:f8:93:01:d6:59:76:
84:92:4a:33:e1:08:04:37:e8:02:21:f0:72:2e:58:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7B:0B:F6:2E:70:92:4F:3E:A1:48:AF:42:E5:E5:B2:43:A8:A2:E6
X509v3 Authority Key Identifier:
keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/1-3sL9i5wkk8-oUivQuXlskOoouY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.240.0/24
193.188.245.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8a:af:ab:23:10:b2:80:b0:43:ca:1e:9c:5b:f7:64:a8:9e:
89:93:51:e8:36:03:67:5d:8b:3d:d5:10:90:67:d9:85:46:78:
0b:7d:9b:a1:75:97:62:e5:ae:b0:3d:d9:03:2d:eb:80:89:df:
b0:51:9b:b3:f9:b3:d1:b5:92:cb:c6:2d:52:77:b0:e6:05:b9:
71:60:07:f3:25:cc:40:34:a5:f3:e2:a0:71:40:25:0e:fe:6d:
65:20:95:52:97:0d:c3:37:db:0b:c9:0c:16:23:1d:96:f1:04:
c6:e9:b7:7b:4d:dd:22:79:95:02:67:d2:a6:e1:6e:34:75:2d:
78:6a:fc:e3:32:db:25:80:17:1d:5c:b7:5a:e5:d9:e5:36:2d:
9e:36:69:4c:5c:05:8d:88:87:53:98:c8:b5:15:6d:be:fb:15:
64:79:ea:9b:f2:d8:fb:20:51:97:2c:13:5e:5c:7f:32:9d:4a:
a5:86:31:53:2c:a8:f1:be:96:84:65:ef:ae:2f:b2:5c:84:e3:
e4:08:ed:6a:3b:e0:16:45:44:d4:e8:e6:f6:df:09:6c:86:98:
fc:ad:ad:63:be:e0:61:d7:4b:53:d0:19:b5:0a:58:71:61:82:
7a:70:d4:1f:dc:36:4d:48:93:c1:a0:4f:fe:82:5f:77:e5:2e:
5b:35:7e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:43 2024 by rpki-client on console-fra.rpki-client.org