Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/skxbN87EKfO25iOZwfa0FuP27AE.roa
File: skxbN87EKfO25iOZwfa0FuP27AE.roa (raw, json)
Hash identifier: y8VVp5t2w/hkTVlpGOPnt5dGMU/7v9yDHLXtX0yAV74=
Subject key identifier: B2:4C:5B:37:CE:C4:29:F3:B6:E6:23:99:C1:F6:B4:16:E3:F6:EC:01
Certificate issuer: /CN=f78b6354748fe3e852e06498282c21540075fc66
Certificate serial: 018CC793565414895C6994CFAFCB7A4B4413
Authority key identifier: F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/skxbN87EKfO25iOZwfa0FuP27AE.roa
Signing time: Tue 02 Jan 2024 00:29:30 +0000
ROA not before: Tue 02 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 193.47.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:56:54:14:89:5c:69:94:cf:af:cb:7a:4b:44:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78b6354748fe3e852e06498282c21540075fc66
Validity
Not Before: Jan 2 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b24c5b37cec429f3b6e62399c1f6b416e3f6ec01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:83:a0:f8:ff:88:90:7a:f7:cc:a7:1b:8a:
15:2f:0c:e6:fb:6c:35:eb:7f:36:32:6e:96:c3:37:
5f:fc:cb:e1:b1:9e:ad:63:d4:77:58:01:5b:84:bd:
ee:94:90:22:81:cd:69:1a:43:78:8a:6a:a1:2c:4a:
b7:21:da:a6:48:23:d4:6c:cd:fa:e8:ed:64:2b:6f:
97:0d:8a:77:56:9a:3d:ad:37:a3:e6:8e:71:ed:3b:
57:c8:dc:20:f4:bf:65:c2:18:2d:55:18:54:4a:31:
f2:07:2b:e1:59:5f:a6:20:96:01:43:d4:c9:a9:46:
2b:58:37:e7:43:5a:34:e5:7c:18:29:27:71:65:15:
dd:4e:38:04:35:0b:48:ec:03:b5:aa:91:86:4e:89:
03:a0:90:eb:6f:4b:42:7b:07:46:0a:ea:56:d1:c9:
69:da:03:a7:e0:c3:4c:84:fe:12:fe:9d:59:a2:75:
13:60:ef:30:4c:b6:10:a6:af:24:42:f8:e9:a8:4c:
7a:cd:80:24:6c:33:5a:5d:7f:a5:75:21:59:e1:e2:
c1:0a:c5:2c:d8:a7:0c:5a:64:59:3a:c7:8e:6d:e4:
f1:a5:a1:3c:f4:65:58:ff:6b:bd:d1:f0:74:9c:35:
5b:5e:05:37:36:62:af:99:af:85:d0:24:c0:63:c7:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4C:5B:37:CE:C4:29:F3:B6:E6:23:99:C1:F6:B4:16:E3:F6:EC:01
X509v3 Authority Key Identifier:
keyid:F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/skxbN87EKfO25iOZwfa0FuP27AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.0.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d2:75:79:b2:ee:b3:7d:f3:6d:74:75:96:ca:2a:9f:e0:49:
44:bd:3a:41:32:2c:07:2f:e7:ca:56:03:da:78:e0:62:52:40:
a2:86:07:81:1a:3a:30:4e:1e:96:27:94:2b:c8:87:c1:ac:29:
43:dd:0d:32:c5:25:84:ef:73:ee:00:b5:41:83:43:86:ef:7b:
eb:3d:cc:7e:37:dd:88:9b:be:7d:38:0a:45:34:44:26:0c:59:
a4:a2:a6:db:93:28:c1:33:9a:42:78:86:34:dd:fe:5a:29:c3:
b4:ba:49:1e:ec:51:aa:f7:c2:cd:f3:13:a8:b3:48:42:18:84:
95:ea:91:1e:d7:0e:29:6c:91:82:f7:b7:71:1b:8d:d9:2c:6a:
fa:b5:4f:f9:cb:22:72:c3:28:68:65:81:8a:f1:b0:6b:30:64:
7d:99:4e:0b:e2:3d:46:4b:50:2c:3c:34:9c:30:f0:8b:1c:ee:
8a:1b:e6:8f:f5:06:66:a0:69:26:15:92:b5:63:33:22:a8:b0:
a9:37:44:08:0c:92:29:1d:5e:25:cb:bc:72:4a:58:cd:e2:55:
31:aa:24:2f:f3:6a:19:ab:aa:bc:a5:64:0b:51:98:39:db:6f:
d5:39:78:41:45:3a:82:b5:5f:ac:a1:2a:c0:d6:62:cb:1f:d9:
24:06:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:35:01 2024 by rpki-client on console-fra.rpki-client.org