Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/TRu4cU8LhN1NvFD32YBlh4IUVx8.roa
File: TRu4cU8LhN1NvFD32YBlh4IUVx8.roa (raw, json)
Hash identifier: Tcvc+CMCBmjYnDU6ysKZrRZ15pLp679KA1wzN+25Jo0=
Subject key identifier: 4D:1B:B8:71:4F:0B:84:DD:4D:BC:50:F7:D9:80:65:87:82:14:57:1F
Certificate issuer: /CN=c098914cb0a945440f84deaf3f3d97fc77fd26ce
Certificate serial: 018CC3B72DB073328ED916619389BA79B3DF
Authority key identifier: C0:98:91:4C:B0:A9:45:44:0F:84:DE:AF:3F:3D:97:FC:77:FD:26:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/TRu4cU8LhN1NvFD32YBlh4IUVx8.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 193.25.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2d:b0:73:32:8e:d9:16:61:93:89:ba:79:b3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c098914cb0a945440f84deaf3f3d97fc77fd26ce
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d1bb8714f0b84dd4dbc50f7d98065878214571f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6e:7f:5c:35:2f:6a:ac:33:67:7f:6b:10:1d:
f2:b9:65:bc:6f:28:1e:07:76:ed:18:41:76:2d:14:
39:ac:38:ab:fa:0e:1d:e3:d4:47:92:2e:19:b9:ff:
d9:d9:22:8c:f5:3f:ed:cf:ec:5f:b9:da:42:4c:96:
d5:f7:fd:5f:7f:c6:1d:9f:1d:8a:b8:78:05:43:d0:
2a:f9:84:e9:83:b6:d8:3c:9f:2a:fb:dc:ca:53:55:
8f:be:41:8f:3c:42:de:b1:85:87:1f:e4:29:e4:a2:
f7:3d:6c:15:3d:e3:79:23:01:97:da:c6:53:29:b1:
20:d8:cf:f2:5e:c7:16:89:14:3f:6a:e8:8d:48:42:
ec:ce:67:04:c6:f6:34:fe:b2:05:18:70:1d:a3:92:
17:a9:56:c7:6c:33:a7:6c:22:e4:36:54:77:2b:4c:
e6:11:8c:e1:8f:5f:78:d5:1a:bd:2e:e9:cc:51:f7:
27:0b:74:71:e0:3b:a2:b1:10:22:5d:23:4b:cc:c4:
a0:b9:aa:32:5a:e9:66:c4:2d:ba:38:36:98:ee:7f:
27:d6:e7:78:f3:25:63:b0:48:15:07:27:9f:7c:0a:
30:e4:f1:15:bc:1e:ea:d8:aa:68:95:b0:8e:ec:dd:
dc:8f:fb:6c:87:28:67:2b:50:75:1c:66:e6:cd:83:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1B:B8:71:4F:0B:84:DD:4D:BC:50:F7:D9:80:65:87:82:14:57:1F
X509v3 Authority Key Identifier:
keyid:C0:98:91:4C:B0:A9:45:44:0F:84:DE:AF:3F:3D:97:FC:77:FD:26:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/TRu4cU8LhN1NvFD32YBlh4IUVx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:2e:6b:0b:7b:a9:e2:e5:a3:89:d3:15:63:af:eb:87:5e:91:
51:61:9d:63:db:3d:5f:5c:16:09:f3:42:45:cf:25:6c:9d:43:
c2:23:90:39:81:55:0e:61:f2:fb:14:c9:02:4b:dc:4a:9b:3e:
11:9d:b1:ca:88:11:17:4f:62:c8:8c:64:c6:c2:88:1e:6c:b1:
9c:d3:45:cc:a9:5f:b6:af:c0:b5:86:7b:fc:cf:b9:b4:d4:2f:
b8:7e:b1:e8:0d:4b:68:e9:48:00:34:8c:1f:7b:f0:29:6e:40:
14:e8:a9:01:ec:c5:1c:2a:f3:86:dd:ee:3f:ac:e8:50:58:b0:
e8:10:60:b4:3b:09:a1:ee:ef:e3:8e:40:9c:ed:51:88:b4:35:
94:35:df:0d:55:9e:8b:31:20:41:f7:25:8b:b9:d5:5b:4c:b9:
90:c3:76:b7:fc:a7:6c:d8:f7:31:11:9e:ac:96:37:56:11:34:
65:27:50:98:e7:23:c4:4d:68:37:75:02:41:92:af:5b:3e:ff:
71:86:a1:f7:8b:4f:d4:bd:c0:d0:42:43:7c:55:f2:d0:08:c0:
bc:72:9b:6f:9a:bc:a8:87:68:b0:9d:c3:fd:0d:69:aa:f9:d1:
ef:df:9c:02:a3:55:f0:fb:58:6b:77:56:88:71:12:72:c0:d8:
68:0c:02:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:52:58 2024 by rpki-client on console-ams.rpki-client.org