Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/F_tcR1vd0df-Q77bf0ffN-I_K8A.roa
File: F_tcR1vd0df-Q77bf0ffN-I_K8A.roa (raw, json)
Hash identifier: sfjm7N3JuqRIxF04Q4zR6ltJTN9NaZSRjeYhD+qOTU8=
Subject key identifier: 17:FB:5C:47:5B:DD:D1:D7:FE:43:BE:DB:7F:47:DF:37:E2:3F:2B:C0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 018CC56EE82D0352F07FD38B15150EE825DC
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/F_tcR1vd0df-Q77bf0ffN-I_K8A.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34380
IP address blocks: 193.43.245.0/24 maxlen: 24
193.43.246.0/24 maxlen: 24
193.43.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e8:2d:03:52:f0:7f:d3:8b:15:15:0e:e8:25:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17fb5c475bddd1d7fe43bedb7f47df37e23f2bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:ff:13:c2:ae:58:9c:d2:c4:99:7d:44:7e:
58:25:02:2c:a7:87:62:7d:b4:7a:6b:fa:df:85:5f:
8b:a1:ad:01:25:27:b4:53:42:59:0c:7a:f5:ac:36:
cb:96:da:f6:78:8d:66:2c:7f:12:1b:22:a9:1d:85:
f3:85:6e:7b:02:1d:c4:6d:88:02:84:b6:a7:2b:df:
d4:6b:ae:89:3a:70:44:30:63:4e:62:99:88:59:f2:
56:4a:72:f1:4f:a7:f9:0f:e8:35:7e:37:43:e5:b3:
8d:8a:ab:56:44:c2:db:c7:5c:48:86:7c:e0:fc:67:
63:ab:8a:be:51:d2:f2:89:2e:7f:6a:90:53:f5:d7:
6e:f4:c3:d8:22:ff:75:5c:b6:e9:69:eb:39:42:4e:
03:c0:69:4b:8e:78:cd:b2:32:3c:90:31:8c:8f:51:
72:b9:51:8c:d5:67:32:bf:5b:ee:cf:5e:14:2e:93:
ed:b0:66:49:33:f8:67:80:9d:16:f1:9d:14:30:8d:
89:57:e7:a7:1c:d3:f2:5e:af:2a:31:7c:a4:46:56:
f1:23:db:0c:7e:ae:86:2a:67:d5:e3:1d:93:ca:39:
d8:3a:16:28:7c:97:13:8c:72:10:00:fb:5f:fa:79:
7d:43:17:db:f8:53:f7:cc:2f:97:d3:13:54:6e:a2:
9e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FB:5C:47:5B:DD:D1:D7:FE:43:BE:DB:7F:47:DF:37:E2:3F:2B:C0
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/F_tcR1vd0df-Q77bf0ffN-I_K8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.244.0/22
Signature Algorithm: sha256WithRSAEncryption
67:a3:87:13:00:a3:e6:c0:05:64:57:67:9e:23:0a:8a:86:f8:
07:16:af:94:6c:9e:cc:a1:d1:1d:bf:0e:84:c9:a2:ce:e5:81:
b3:22:66:50:00:4a:0e:3c:15:4d:7e:ca:af:4d:47:d2:dd:01:
c1:87:8d:f6:db:f9:e1:e1:03:f2:9e:0c:67:56:89:bc:3c:0a:
7f:34:a3:43:f1:e6:58:ee:f8:8f:58:10:c8:9c:5b:ea:c8:ac:
90:05:6c:7c:50:79:52:da:a6:f3:f0:d4:2e:70:26:f5:40:5a:
44:b0:66:04:90:1c:6c:57:33:72:e1:c6:c0:14:69:f9:6c:9f:
d8:2e:22:15:8d:2f:5a:ff:5c:23:f1:7e:b6:66:57:bc:11:14:
1f:1a:5b:cf:6d:61:8d:24:d9:b3:3d:5d:f6:fa:78:b4:c7:13:
44:3d:29:c8:33:79:4b:3a:02:6e:ed:c6:61:9b:19:2c:0d:1d:
b5:5a:ad:6e:6b:fa:cf:62:8e:a9:19:db:02:45:bb:e6:d3:2b:
61:f6:fb:15:86:a1:c2:7d:2c:8a:0d:aa:74:88:c5:21:ef:ea:
14:a3:82:38:76:74:85:83:6a:6b:73:f7:3c:7f:90:99:1d:60:
be:da:5e:de:10:f3:ce:12:8f:2e:f0:4e:4e:6d:65:50:bf:a4:
f1:f5:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:00 2024 by rpki-client on console-fra.rpki-client.org