Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/1-7t7iw0wJBfVfGafTFVAPlcCPB0.roa
File: 1-7t7iw0wJBfVfGafTFVAPlcCPB0.roa (raw, json)
Hash identifier: 4GuCLViDGppVcLVd9keIUPii5cWPN75L4xumCx3lYc4=
Subject key identifier: FB:BB:7B:8B:0D:30:24:17:D5:7C:66:9F:4C:55:40:3E:57:02:3C:1D
Certificate issuer: /CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Certificate serial: 018CC49329112A7CC15B33656B75D45F8D52
Authority key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/1-7t7iw0wJBfVfGafTFVAPlcCPB0.roa
Signing time: Mon 01 Jan 2024 10:30:27 +0000
ROA not before: Mon 01 Jan 2024 10:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21385
IP address blocks: 193.108.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:29:11:2a:7c:c1:5b:33:65:6b:75:d4:5f:8d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Validity
Not Before: Jan 1 10:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbbb7b8b0d302417d57c669f4c55403e57023c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:4a:6b:ef:cd:a1:cc:97:c5:de:82:cd:bd:
8c:b1:26:04:ab:ad:01:e7:85:88:d5:27:9d:41:d5:
be:dd:7e:5a:00:8f:d7:2a:c9:6c:05:58:e2:b7:20:
b6:f9:f7:bc:f6:7f:6d:ff:69:16:68:55:ce:2a:7e:
20:58:6a:17:77:41:60:64:2f:da:61:e7:20:75:57:
09:f1:aa:59:26:18:4e:b2:ac:25:12:ca:a2:30:bf:
ab:47:10:4d:03:b7:92:f4:6a:19:fd:6e:78:08:db:
6c:f0:f6:39:e5:1e:4b:ca:5a:13:75:1e:e7:b7:7a:
c0:26:4b:91:af:62:42:d6:8c:f6:4b:10:25:7e:a0:
d9:e6:38:0e:03:5b:eb:8c:f5:b7:30:c1:23:d7:b5:
c1:38:09:ee:e3:14:ad:a3:ab:ea:bb:20:41:1e:8a:
06:90:b3:d0:70:d5:9f:f0:08:3c:9e:67:4d:16:61:
70:6a:9d:cd:d9:d1:c9:5f:77:27:30:b1:73:fa:e1:
fa:fc:98:8f:59:1e:e3:ac:01:96:12:cf:ec:0b:63:
47:b6:61:25:48:4a:00:68:60:22:88:15:eb:19:53:
ec:af:b0:25:51:e5:ee:72:73:fa:04:93:67:72:ec:
8a:ec:01:8a:d8:90:7b:9c:87:94:f3:98:bd:06:d0:
1c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:7B:8B:0D:30:24:17:D5:7C:66:9F:4C:55:40:3E:57:02:3C:1D
X509v3 Authority Key Identifier:
keyid:51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/1-7t7iw0wJBfVfGafTFVAPlcCPB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.19.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1f:6a:f1:ae:08:90:fd:1e:d5:60:04:c1:c7:87:52:05:be:
3d:4a:f8:9f:b8:9d:04:66:9a:30:83:e0:64:ff:f0:2f:06:64:
54:91:e7:76:f9:1b:e7:d7:c0:8b:45:3c:0d:c3:7a:12:fe:7c:
76:f7:56:5f:f4:a8:df:2c:da:76:60:e4:a5:fc:26:5d:c1:98:
88:0d:a9:01:89:48:15:49:02:51:2f:98:b4:2e:33:07:22:53:
13:d8:4a:d6:c7:ab:90:f6:46:f1:77:17:30:32:59:d5:02:05:
07:02:25:e8:0d:9f:63:66:00:56:bb:f4:aa:0f:34:33:53:20:
af:62:96:34:04:5a:37:fd:ff:44:06:95:4b:dd:73:18:d9:a7:
33:af:7d:2e:29:63:5e:58:1c:07:dd:6a:6e:4c:71:ec:9f:d8:
fe:89:8f:47:64:05:45:da:b1:f8:49:1e:46:66:f6:86:f3:ee:
0a:6e:59:90:d9:dc:bf:80:90:35:4b:eb:74:49:15:f5:61:b2:
93:e1:17:90:c9:50:5d:31:33:cd:f7:04:25:7a:e3:7e:0e:db:
c0:f2:e3:50:a8:3f:1b:05:a7:fd:0d:2e:f5:ca:12:5a:39:98:
c4:18:fe:2f:ca:3b:65:1b:07:61:1d:ff:7c:1c:c7:70:96:48:
8a:76:2b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:05:33 2024 by rpki-client on console-ams.rpki-client.org