Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/xn3XFMQq9rW1Qv-nus0DZZ666K0.roa
File: xn3XFMQq9rW1Qv-nus0DZZ666K0.roa (raw, json)
Hash identifier: QjZTtWLjLw/9dLntS8R+5cHaOZcY6p485pUIVVhUdV8=
Subject key identifier: C6:7D:D7:14:C4:2A:F6:B5:B5:42:FF:A7:BA:CD:03:65:9E:BA:E8:AD
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 018CC5006957BC2AD350F59C521FE950242C
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/xn3XFMQq9rW1Qv-nus0DZZ666K0.roa
Signing time: Mon 01 Jan 2024 12:29:47 +0000
ROA not before: Mon 01 Jan 2024 12:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.31.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:69:57:bc:2a:d3:50:f5:9c:52:1f:e9:50:24:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Jan 1 12:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c67dd714c42af6b5b542ffa7bacd03659ebae8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:bc:fd:3a:1f:b6:b1:79:1a:c9:c7:29:0a:
9e:87:cb:3b:41:4a:63:91:11:e4:6b:39:38:90:97:
1b:5d:80:93:41:71:fb:f6:a7:c8:b6:96:1f:a7:45:
12:80:45:ca:0b:3d:df:68:4d:a1:00:f3:98:b3:05:
c3:77:b9:1a:f2:eb:f7:c1:80:82:03:bd:1e:b4:52:
e7:de:d1:75:09:bd:cb:9a:86:86:2a:b7:66:e5:de:
fe:36:09:0c:de:35:5a:02:04:35:ae:6b:d4:28:92:
51:bd:65:45:45:be:a7:af:48:eb:a6:03:78:92:80:
d6:5f:5c:3f:92:81:5c:46:b0:f2:ab:88:5f:d7:94:
62:72:fb:63:95:8b:2a:46:be:0a:6b:8c:28:03:bb:
3d:47:62:33:43:ac:3c:b0:38:ca:96:81:7b:fb:4f:
e1:39:ef:fb:0c:91:2c:74:13:0a:27:db:ab:c8:b7:
51:a2:7c:74:b9:1e:de:1e:0c:15:95:ab:a0:10:8a:
6f:62:bd:f4:82:98:57:e5:6f:10:01:c1:1b:8f:2a:
e7:b7:a0:b6:73:20:b7:01:30:94:29:2a:a0:25:2c:
85:02:28:fc:51:e6:b6:43:f6:7b:2d:52:1b:c7:b2:
2e:8b:9c:aa:dd:43:48:05:cc:d5:72:76:f2:c4:6e:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7D:D7:14:C4:2A:F6:B5:B5:42:FF:A7:BA:CD:03:65:9E:BA:E8:AD
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/xn3XFMQq9rW1Qv-nus0DZZ666K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.111.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:68:8b:7d:aa:b9:dc:fe:bd:24:fc:74:79:56:13:7f:4f:76:
a6:17:2b:10:4f:9c:c4:64:b4:d7:89:65:be:2d:80:c8:c3:29:
e3:4a:e3:bc:d2:40:02:8c:87:a5:66:61:6a:21:15:55:12:13:
a4:57:22:e4:79:36:25:29:18:16:25:7b:ff:5a:5f:58:7d:8b:
a8:80:5b:87:b1:36:f2:7a:fc:fd:94:6b:a3:9c:50:f4:21:96:
c5:d0:b6:33:f1:af:61:3c:1f:f6:c8:76:71:b4:da:1f:15:c2:
f7:02:9b:c2:90:c5:28:d7:12:e1:31:35:5a:ed:5a:64:0e:8a:
08:f8:5d:36:6c:2c:8c:6b:2d:ad:e0:50:9b:b5:92:d5:63:0c:
8b:1c:3d:e3:98:26:50:32:e8:7c:28:17:23:36:e5:ae:b7:be:
5c:da:8f:0a:db:3f:ae:ea:53:47:a2:c0:4e:19:10:a4:f0:f8:
5f:9b:29:b8:f6:f4:6a:60:27:af:dd:3f:49:08:68:5f:7b:af:
9b:81:28:35:dd:1f:43:5f:aa:c1:ba:33:22:f7:c8:40:28:43:
3c:98:84:49:f4:08:7a:d3:78:aa:0e:98:24:d3:f8:17:c2:c6:
9b:f7:2c:40:62:92:34:ae:22:1d:af:45:72:6c:47:7c:8b:e7:
8f:cc:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:32:29 2024 by rpki-client on console-ams.rpki-client.org