Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/4hrAD1ku5w_W9uwionezL6V-oOg.roa
File: 4hrAD1ku5w_W9uwionezL6V-oOg.roa (raw, json)
Hash identifier: KqMPPurU2M010Mab4nx59BK72X9z+X5soiIG6buoTRM=
Subject key identifier: E2:1A:C0:0F:59:2E:E7:0F:D6:F6:EC:22:A2:77:B3:2F:A5:7E:A0:E8
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 018CC8DF1ECA51F1EB1D1A372E1E181BA8AC
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/4hrAD1ku5w_W9uwionezL6V-oOg.roa
Signing time: Tue 02 Jan 2024 06:31:54 +0000
ROA not before: Tue 02 Jan 2024 06:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 193.164.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:1e:ca:51:f1:eb:1d:1a:37:2e:1e:18:1b:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 06:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e21ac00f592ee70fd6f6ec22a277b32fa57ea0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:76:f8:bb:58:d4:ba:16:95:44:f5:db:ad:
43:2b:a5:3b:bf:d1:ea:05:75:d7:db:25:63:51:b1:
18:60:36:83:df:d3:a4:59:fd:bc:a3:81:3a:14:fb:
14:42:f7:1a:ab:e2:89:8a:a8:a6:8d:a7:aa:18:bc:
e0:20:35:93:99:b4:6e:67:30:29:0d:b3:01:6d:50:
80:6e:e1:13:2a:2a:cc:07:51:03:78:26:c8:5b:c4:
59:23:ae:8a:f5:c3:0c:5e:b1:6d:e1:fb:f5:2a:6d:
2b:b4:b2:de:80:2a:78:ab:7f:26:4d:66:ee:bf:25:
f4:b9:1f:4c:61:80:2a:46:6f:38:5b:7d:44:f2:f9:
69:db:8b:14:8c:c5:a4:f1:85:39:a6:c8:5f:f6:7c:
53:7a:3b:d4:69:1b:e5:0b:e5:34:39:49:14:16:e7:
34:ce:de:47:1b:d2:e7:54:5f:4a:03:b9:57:c3:6c:
4f:67:c3:a1:b2:0c:ef:85:a7:79:73:51:17:ec:17:
24:fc:e2:f2:64:25:21:84:ea:fe:f9:fb:4f:43:9a:
0f:04:3d:70:6d:cc:58:3c:bf:93:e8:91:4f:68:10:
c8:47:de:80:32:de:83:fb:ec:d2:f7:8c:79:4f:9d:
6a:d0:a0:ce:ca:5e:27:78:d4:65:d5:5c:8d:80:8e:
13:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:C0:0F:59:2E:E7:0F:D6:F6:EC:22:A2:77:B3:2F:A5:7E:A0:E8
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/4hrAD1ku5w_W9uwionezL6V-oOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:90:1f:7a:fd:dd:79:a7:10:b3:f0:b2:2b:7c:da:18:64:79:
26:27:bb:f6:c8:47:02:7a:57:b7:b3:f6:b3:f1:dd:dd:6e:86:
95:72:5e:c9:ab:1d:ba:fe:e3:65:35:cd:1f:f5:30:06:22:30:
ba:dd:90:81:95:6f:03:57:33:65:a4:7d:89:2e:1c:5f:2c:bc:
ef:ff:df:08:1f:b8:e3:e4:0b:19:d2:f8:3c:96:27:e7:06:1b:
54:02:4f:80:a1:ff:41:d6:9e:2d:bf:e5:34:88:0d:d0:b7:93:
67:aa:08:ef:1d:0d:8f:1b:35:76:5b:bc:f1:0c:ff:46:22:1b:
27:63:1d:2f:ed:44:59:b8:0b:d4:c1:f5:d5:66:93:76:0a:59:
b5:52:cb:8b:db:32:99:60:25:00:93:65:5d:a1:7b:33:21:f7:
69:6f:d7:31:1c:fa:fe:d8:1a:36:5c:b0:bd:4c:20:c0:fa:2a:
a5:3c:03:04:9b:c9:45:c7:1d:ca:f4:db:42:88:ae:71:e6:0d:
8e:65:dc:d1:22:2e:f1:bd:da:36:a2:c4:39:7d:bc:5c:c2:2a:
68:fc:bf:5c:68:ff:4a:01:78:e6:da:b5:d8:7a:cc:c8:ad:53:
ce:17:33:e5:2d:0a:a0:fb:32:01:1a:c2:96:a2:af:cc:97:98:
05:7c:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:50:42 2024 by rpki-client on console-ams.rpki-client.org