Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/aNvbc4cbXtiCnGJCWTREvpxgato.roa
File: aNvbc4cbXtiCnGJCWTREvpxgato.roa (raw, json)
Hash identifier: +MbgN0rW8t641zGu9NK+l6Vh4a0PMwFE1u9pGbjDzaM=
Subject key identifier: 68:DB:DB:73:87:1B:5E:D8:82:9C:62:42:59:34:44:BE:9C:60:6A:DA
Certificate issuer: /CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Certificate serial: 018CC8DEAF65338E25560006226BBCBAC226
Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/aNvbc4cbXtiCnGJCWTREvpxgato.roa
Signing time: Tue 02 Jan 2024 06:31:26 +0000
ROA not before: Tue 02 Jan 2024 06:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208101
IP address blocks: 194.5.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:af:65:33:8e:25:56:00:06:22:6b:bc:ba:c2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Validity
Not Before: Jan 2 06:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68dbdb73871b5ed8829c6242593444be9c606ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:d2:4e:58:23:bf:e8:3f:d5:dd:e8:b0:bc:
2c:63:27:ee:bc:a5:ed:48:74:97:fa:02:d2:66:f1:
c2:ee:cc:0e:2a:69:dc:3e:27:e9:7c:01:0e:11:2e:
e6:c3:95:b7:10:1a:6b:09:bf:fa:58:1c:74:ca:e1:
a5:31:a4:16:3a:9a:5b:56:25:eb:06:46:12:64:ce:
16:03:2c:9a:39:9b:64:11:c3:15:28:a0:9b:4b:df:
d4:c8:12:fc:f4:1d:a3:e3:ae:d4:65:98:c7:4e:e5:
e2:2f:57:06:df:cf:11:b3:12:42:6f:eb:a7:76:43:
40:7a:74:3c:ad:47:ec:fe:34:65:70:51:a5:13:ae:
26:40:4a:cf:9c:19:fa:b1:52:10:dc:9e:5f:ec:4e:
02:3a:bb:ad:7a:12:6e:a7:76:c0:c0:b9:35:9e:87:
1a:51:cf:8e:c4:85:80:e5:2a:d5:a6:83:f7:0e:cb:
49:2f:6e:16:81:49:50:98:f5:a7:38:e1:a2:b6:fd:
98:4a:fa:bb:09:68:84:b7:56:77:c8:8b:41:b4:87:
24:5c:87:8e:05:ad:a5:dc:cd:ed:85:08:58:08:68:
6d:c7:20:c2:cd:9b:80:55:6d:a2:de:37:97:6d:b9:
19:c6:44:94:51:0d:99:f3:ae:1a:b8:de:23:41:a4:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DB:DB:73:87:1B:5E:D8:82:9C:62:42:59:34:44:BE:9C:60:6A:DA
X509v3 Authority Key Identifier:
keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/aNvbc4cbXtiCnGJCWTREvpxgato.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.101.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d7:c2:e5:75:a1:48:93:3b:35:c1:bc:87:5d:a9:30:af:e5:
78:ce:63:b6:d5:d2:82:24:cf:a9:93:6e:4b:a4:e8:dc:d4:4b:
5a:42:bd:26:51:14:50:4b:6e:3e:93:39:fe:50:99:1f:2f:98:
0f:07:62:b3:2f:02:7c:d7:ca:a8:0b:34:cd:97:cc:da:3d:52:
ef:10:d5:f2:44:3a:b3:ba:75:d4:43:e9:98:31:f3:07:8d:17:
aa:d0:70:32:91:81:21:e8:83:a7:15:c1:e9:d5:74:1b:b0:2f:
21:7d:04:10:0a:f6:5e:e8:18:09:e8:67:b8:b5:a5:1c:cd:5d:
82:28:b3:b6:19:0c:d4:eb:ae:e9:56:6f:a5:d9:be:f5:6f:e6:
f5:6a:36:b3:c2:99:e5:17:45:42:32:37:7e:45:b0:b0:96:f9:
b1:e3:8a:77:0c:91:a0:e7:db:30:52:6b:b7:8d:80:1d:5b:70:
4d:4a:a3:91:3c:51:df:15:49:af:b9:1c:c1:f8:a2:93:ee:25:
99:db:d3:70:46:21:57:ef:76:cb:3b:0a:d6:05:2f:52:99:3d:
8e:db:60:01:7c:2f:fe:67:e0:53:fe:99:e1:02:f3:5d:15:0d:
f1:30:92:a1:7a:c2:aa:3e:cc:ef:27:87:c9:0b:4c:71:73:11:
31:3b:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:31:09 2024 by rpki-client on console-ams.rpki-client.org