Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/R0lAwkw9UhOcgygqVkBj8V0WbZc.roa
File: R0lAwkw9UhOcgygqVkBj8V0WbZc.roa (raw, json)
Hash identifier: 8VNA7nIP7R7SjFCOcId72IEvPrdL12WGyuI8YqW59kU=
Subject key identifier: 47:49:40:C2:4C:3D:52:13:9C:83:28:2A:56:40:63:F1:5D:16:6D:97
Certificate issuer: /CN=432075596545093c06a6fcf8fab57b192e7790aa
Certificate serial: 018CC424BFCE49EA62599E2CF0CC72B69C42
Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/R0lAwkw9UhOcgygqVkBj8V0WbZc.roa
Signing time: Mon 01 Jan 2024 08:29:51 +0000
ROA not before: Mon 01 Jan 2024 08:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1930
IP address blocks: 192.132.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:bf:ce:49:ea:62:59:9e:2c:f0:cc:72:b6:9c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa
Validity
Not Before: Jan 1 08:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=474940c24c3d52139c83282a564063f15d166d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:61:9f:bc:f2:d2:91:b4:59:e6:4e:84:a2:
37:3f:d0:73:70:7e:1e:df:b3:a2:81:6e:e2:0a:b9:
25:55:5d:db:69:a6:24:e5:39:c6:bd:5a:38:c4:ed:
95:9f:e3:c0:9c:ef:a9:f9:d5:5c:df:2d:92:99:d2:
06:86:9d:68:65:97:a4:8d:8d:4f:e3:eb:df:67:20:
0e:f8:39:6f:e3:6a:f6:70:92:56:41:1f:93:8f:9b:
d3:3c:f9:03:8a:64:63:49:98:8d:dd:5c:96:c0:a6:
02:a8:62:af:22:90:24:c8:53:9a:78:89:5f:44:c8:
01:bb:e3:2f:9a:70:55:89:e9:2e:49:73:16:0c:19:
7e:dc:d6:6f:98:55:85:93:4f:22:38:ed:01:4e:3b:
a6:26:d8:87:c2:33:23:f8:3c:53:87:af:35:50:a0:
55:20:bb:73:4e:fc:23:f8:0a:da:49:07:30:71:bf:
a1:33:7e:0d:7e:a2:a1:47:8e:f3:1d:8d:8e:55:f6:
9b:8e:bc:8b:c1:67:bc:25:8d:62:8a:03:4a:b1:db:
c7:a6:bc:c9:94:f7:b3:68:f4:c7:dd:08:ae:ed:c8:
be:0f:e3:9a:0b:87:63:63:59:03:29:11:ae:16:08:
7c:dd:86:69:4b:91:f6:23:18:4b:f4:7c:6f:f2:ba:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:49:40:C2:4C:3D:52:13:9C:83:28:2A:56:40:63:F1:5D:16:6D:97
X509v3 Authority Key Identifier:
keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/R0lAwkw9UhOcgygqVkBj8V0WbZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.132.55.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:10:f9:06:ad:52:12:b5:67:eb:ce:da:d0:d2:6f:06:45:da:
e4:fa:9a:37:ad:e3:a9:69:aa:03:fd:fe:79:db:7f:62:ec:b1:
b4:1a:49:dc:70:52:42:0d:75:ad:7b:00:79:0c:fe:a7:5b:e8:
c1:5d:9e:38:2a:26:c0:3c:ed:25:85:1f:ad:f9:1f:df:cf:aa:
0c:78:89:08:57:5f:a9:76:4e:52:ae:e3:85:8c:7b:bc:c0:31:
73:93:22:69:13:12:b9:6a:3d:23:41:ae:68:c7:06:26:c6:6e:
c5:26:bd:f7:25:cf:ff:d6:3e:28:b3:f3:3e:78:e8:ec:57:7f:
a3:3e:c7:3a:37:71:fc:3e:bd:d0:07:77:4e:63:cc:b2:fc:5b:
1b:fe:dd:86:6c:13:8f:df:18:c5:c5:65:3d:1f:64:20:3f:b6:
c3:d2:a4:f0:72:7f:90:61:e9:c1:fa:46:d7:5e:db:08:df:c4:
b5:56:5b:27:42:a2:26:98:7f:8a:98:cf:3f:9b:56:9e:ba:e4:
fe:9a:e6:67:64:b3:64:ad:58:c8:52:bc:d8:2b:7e:e3:8d:c2:
3b:f3:0b:3c:c9:54:1f:dc:c9:33:bd:d1:83:51:6b:c8:4d:b6:
74:8b:18:48:e6:86:fe:b3:63:be:7d:88:97:04:4d:65:e1:69:
ec:86:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:10:28 2024 by rpki-client on console-ams.rpki-client.org