Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/9Gckpgj615o1Dmz5QGu19vjq0cs.roa
File: 9Gckpgj615o1Dmz5QGu19vjq0cs.roa (raw, json)
Hash identifier: LS57GAHOJ/d3/qOCgfLpgld5fd4V/+mYjZmUjPMD+6g=
Subject key identifier: F4:67:24:A6:08:FA:D7:9A:35:0E:6C:F9:40:6B:B5:F6:F8:EA:D1:CB
Certificate issuer: /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial: 018CC7954D947F73C1312F98C9664CABFB80
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/9Gckpgj615o1Dmz5QGu19vjq0cs.roa
Signing time: Tue 02 Jan 2024 00:31:39 +0000
ROA not before: Tue 02 Jan 2024 00:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 193.53.16.0/22 maxlen: 24
193.53.20.0/23 maxlen: 24
2a00:f620:1::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:4d:94:7f:73:c1:31:2f:98:c9:66:4c:ab:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Validity
Not Before: Jan 2 00:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f46724a608fad79a350e6cf9406bb5f6f8ead1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d2:49:3c:cd:58:d6:aa:4a:c4:e4:01:20:08:
94:f8:b3:7c:ae:d4:b9:ce:e0:94:4a:48:2b:2f:5c:
a8:b9:cb:3b:20:70:0f:47:08:da:fa:10:bf:9f:0e:
47:e3:f0:1a:7e:20:9a:ad:8a:be:86:a3:e9:3d:74:
ad:2e:db:02:60:f3:ee:62:95:c3:e3:3c:b3:c6:c1:
af:b3:18:49:11:13:86:a3:98:8b:22:3b:6e:05:ce:
39:1e:1d:9e:d7:83:8f:a2:5b:b3:ec:30:5f:e4:87:
bb:02:10:b3:9f:95:7e:49:a0:1a:39:c4:3b:47:60:
c1:5c:a4:13:8b:c8:45:da:db:eb:43:71:94:4f:e0:
f8:6d:2e:da:ff:dc:d0:b4:a6:ee:8e:81:2e:09:47:
2f:6a:76:d4:1d:4f:03:c1:7f:d3:2c:d2:b7:53:72:
97:a6:9c:bf:dd:dc:29:48:7d:b2:b1:c0:08:c6:1a:
c5:0e:88:b3:32:e0:b9:c8:f5:7d:fb:a6:26:6b:e5:
23:79:aa:ff:0d:12:a7:1f:97:80:7f:88:7a:1b:e2:
66:77:83:63:19:2e:ba:29:1d:fd:2c:8c:b9:44:6e:
44:97:93:82:ea:cf:28:2e:7e:99:62:57:90:6f:62:
0d:38:14:de:5d:c2:3a:69:34:e0:58:8e:40:17:2b:
5b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:67:24:A6:08:FA:D7:9A:35:0E:6C:F9:40:6B:B5:F6:F8:EA:D1:CB
X509v3 Authority Key Identifier:
keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/9Gckpgj615o1Dmz5QGu19vjq0cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.16.0-193.53.21.255
IPv6:
2a00:f620:1::/48
Signature Algorithm: sha256WithRSAEncryption
84:4b:a9:ca:8e:c7:87:41:50:b8:04:6d:c4:eb:42:6f:c5:a1:
dd:4e:bc:62:3f:b5:4f:f7:c1:fc:03:8f:43:d6:fe:73:be:d5:
a4:7e:eb:f2:5c:1f:db:1e:90:a3:a4:f6:45:b9:6e:7e:7b:a4:
48:ce:68:43:0c:58:3e:b2:5f:ba:08:ec:d0:dc:61:49:9b:fb:
0e:df:2f:6c:e1:42:23:44:1c:94:27:8e:d0:28:28:e4:e0:b5:
ab:04:c7:49:39:1a:2c:75:5c:b1:3d:07:59:96:3b:a6:77:34:
8c:ef:20:e3:96:8f:d8:5e:e2:47:15:77:78:b3:5e:a7:7c:fa:
b4:8d:7d:ad:81:37:b6:50:db:e7:30:cb:24:bd:03:40:5a:f9:
b4:f3:45:80:10:52:8d:2b:5a:9e:01:02:7f:9c:e4:8c:05:1d:
87:17:d5:19:3c:31:3f:f9:d0:17:a4:04:11:5f:a5:4f:fd:73:
c8:aa:6e:67:d1:bd:20:8d:b1:70:89:fa:1b:45:6c:c1:e6:92:
53:c5:08:a9:8c:78:c6:a3:02:cc:e3:3c:cd:c3:97:f8:09:2b:
61:51:78:c9:79:c7:31:e3:3f:a1:d5:27:d9:9b:ef:2f:18:69:
2d:c6:6b:f2:08:10:b2:5b:bc:f8:e5:59:8e:00:64:e7:33:d0:
58:6d:9e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:30:58 2024 by rpki-client on console-ams.rpki-client.org