Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/687ZxyyN6efkBKlAyu25wfXNyxY.roa
File: 687ZxyyN6efkBKlAyu25wfXNyxY.roa (raw, json)
Hash identifier: wYTgXZEAJmq4xZQCJK0VxX2jQCRxjH2ClPkl4pAongk=
Subject key identifier: EB:CE:D9:C7:2C:8D:E9:E7:E4:04:A9:40:CA:ED:B9:C1:F5:CD:CB:16
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 018EF0113F7C5B8C3C78CA7D27EA3C0852E6
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/687ZxyyN6efkBKlAyu25wfXNyxY.roa
Signing time: Thu 18 Apr 2024 07:17:25 +0000
ROA not before: Thu 18 Apr 2024 07:17:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.93.64.0/22 maxlen: 22
2001:678:890::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:11:3f:7c:5b:8c:3c:78:ca:7d:27:ea:3c:08:52:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Apr 18 07:17:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebced9c72c8de9e7e404a940caedb9c1f5cdcb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bf:40:5e:9d:50:e2:c5:65:89:14:b3:1a:e7:
e3:ce:d8:8b:4e:16:8f:18:c6:49:92:9e:3f:62:5d:
0a:c7:89:49:ac:1c:85:5f:30:66:86:be:f2:8a:76:
79:14:27:bf:b0:9d:31:90:b6:02:ac:b7:93:07:fa:
fc:cf:38:bc:9c:4a:1d:1d:b2:c8:e8:d7:f2:54:36:
55:23:e8:6a:e7:cf:27:3f:24:69:e8:a2:3f:88:65:
5c:31:b2:f2:db:80:bb:e7:bc:fb:47:3e:97:02:d3:
10:76:c0:85:f4:92:05:36:da:36:5e:cb:45:4e:ff:
1c:e5:5f:1f:eb:45:81:03:4e:6b:a6:33:7e:c0:fb:
cc:7b:96:97:7f:16:9c:d4:1f:66:80:6f:51:3b:aa:
2f:f8:a2:23:ed:2b:4a:f8:6a:87:ef:52:fe:b9:59:
54:83:b9:c3:b8:f8:4f:b9:a3:e3:3c:cd:7a:52:34:
0e:ed:50:82:99:2c:4a:23:f8:11:ec:fe:86:33:d8:
b0:1a:f5:5a:ae:21:67:ee:28:60:9d:04:1c:6f:1d:
9d:ac:6a:db:81:ce:f0:98:0f:da:1c:54:3d:ab:4d:
7c:1f:17:b0:ee:8c:57:2d:f8:f1:ea:f2:ee:6a:64:
70:99:52:53:32:25:7b:56:7f:dd:7b:f4:44:fb:cd:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CE:D9:C7:2C:8D:E9:E7:E4:04:A9:40:CA:ED:B9:C1:F5:CD:CB:16
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/687ZxyyN6efkBKlAyu25wfXNyxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.64.0/22
IPv6:
2001:678:890::/48
Signature Algorithm: sha256WithRSAEncryption
5a:b3:07:45:5b:88:5b:68:b5:76:dd:8f:34:78:65:fa:a4:f8:
55:88:ca:8e:1a:79:1a:b6:49:d4:fe:2f:13:27:6b:46:0a:cf:
f7:1a:f0:33:a7:82:9c:01:e4:9c:50:27:60:d4:af:3f:10:90:
13:43:6e:e8:59:54:7d:7e:3e:03:54:ee:82:a4:7f:82:9c:67:
16:b2:d1:42:ea:cc:0a:7a:81:ca:6b:16:3f:28:65:65:4b:66:
65:df:de:4a:cf:08:26:e2:ed:ba:f7:25:63:d1:da:06:6a:ee:
53:6b:68:2a:a4:36:c3:6b:ca:d7:6b:43:e2:cb:71:ab:a8:1d:
ec:0b:da:22:1f:82:39:0a:0f:ab:97:3a:b0:cd:f1:b4:6a:02:
a2:27:8b:17:4f:39:a3:93:83:6b:a2:67:b0:50:c0:a5:96:75:
93:09:0f:c3:02:b0:e0:86:ea:be:f8:64:a4:d9:1c:00:66:64:
8d:7d:9b:14:f8:d6:ba:97:f7:8c:46:0a:10:49:72:be:d1:6c:
3c:ef:9e:a4:ab:7e:7b:5a:c8:4e:d8:7b:aa:c2:d8:68:33:f6:
2e:d2:4f:9c:a1:fe:0d:a0:8c:8a:48:d7:ea:9e:51:42:a4:9d:
e6:80:68:02:2a:58:3a:f5:e6:0b:bf:1e:66:cc:b6:81:0b:62:
7d:01:e6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:36:30 2024 by rpki-client on console-fra.rpki-client.org