Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/PT6cZmyPgyBn_zZYfCXPUkfKKwo.roa
File: PT6cZmyPgyBn_zZYfCXPUkfKKwo.roa (raw, json)
Hash identifier: GzmIhKjTlo8Q2kD0JSSM96+SgoARj2583ZFf0rwpWD4=
Subject key identifier: 3D:3E:9C:66:6C:8F:83:20:67:FF:36:58:7C:25:CF:52:47:CA:2B:0A
Certificate issuer: /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial: 018CC9BBE53BEC7D336FCF7968B787062CA0
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/PT6cZmyPgyBn_zZYfCXPUkfKKwo.roa
Signing time: Tue 02 Jan 2024 10:33:03 +0000
ROA not before: Tue 02 Jan 2024 10:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49868
IP address blocks: 193.201.124.0/24 maxlen: 24
193.201.124.0/23 maxlen: 23
193.201.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:e5:3b:ec:7d:33:6f:cf:79:68:b7:87:06:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Validity
Not Before: Jan 2 10:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d3e9c666c8f832067ff36587c25cf5247ca2b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:f0:22:02:22:b6:83:30:9b:3a:fa:80:50:
c3:30:9b:d0:8c:d9:82:7b:3f:44:3f:39:62:50:05:
cc:15:03:5b:4f:1d:75:a7:54:c5:2e:21:5a:e4:32:
39:41:50:70:d2:94:a5:00:ef:2d:d3:cf:6f:28:a0:
ca:24:e0:8f:06:e2:11:28:a1:44:70:0b:f0:b4:56:
19:20:38:1a:b0:2b:e2:7c:46:79:0f:99:82:a1:1a:
37:91:e8:3c:d3:9c:d6:b3:cb:22:28:03:e9:d1:33:
9c:71:f8:8b:bd:52:20:cd:6d:4c:b9:23:d4:f0:5b:
85:41:c3:0e:9c:c1:99:b9:57:e3:ab:e1:63:dd:f1:
01:b8:1f:5b:a3:3b:cf:03:38:a1:98:cc:88:d2:38:
3b:f0:ff:a5:58:ce:73:38:d4:31:bb:fe:70:8b:29:
88:28:a0:b9:fd:d8:8f:3b:e6:47:b6:33:09:e9:56:
83:07:99:a8:0f:d7:ae:b2:30:bd:bd:97:a6:d6:5d:
fa:dd:80:b9:05:5c:5b:c6:d6:ae:a9:eb:78:81:63:
d7:74:94:88:65:04:a7:67:f3:6a:77:5d:a9:83:b6:
a6:a6:27:e5:0c:88:bd:5e:eb:b7:53:bb:aa:fd:05:
32:e2:3e:3a:cc:b0:cb:35:5a:19:03:cf:dd:c1:bf:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3E:9C:66:6C:8F:83:20:67:FF:36:58:7C:25:CF:52:47:CA:2B:0A
X509v3 Authority Key Identifier:
keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/PT6cZmyPgyBn_zZYfCXPUkfKKwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.124.0/23
Signature Algorithm: sha256WithRSAEncryption
77:fe:82:5d:91:fc:de:35:41:ec:7e:7b:d9:5d:0e:b0:79:77:
5a:de:a1:c4:eb:f3:34:37:99:bb:6e:29:60:b9:c9:bc:01:f6:
86:fb:dc:26:e8:25:46:fb:e6:cf:0a:c7:28:b8:5e:36:9e:b0:
e7:10:ee:83:b5:36:12:11:93:3c:2b:18:87:df:8d:b5:c3:c6:
f0:09:39:8b:64:89:37:fd:32:f7:d4:03:c2:9c:e7:9b:6b:94:
c1:34:eb:99:ae:a9:a7:af:52:0f:48:fe:ea:5a:0a:a8:99:49:
a2:0c:28:84:e1:37:cb:4a:c2:92:10:bb:17:04:73:f4:3a:d6:
d9:0d:3a:ec:de:0b:28:16:3f:93:ae:e9:d8:b9:b8:6d:c1:78:
e7:e8:90:e1:2e:9e:1e:29:1a:a0:3b:36:26:3d:e1:19:6a:a6:
81:d7:63:df:b5:da:0a:dd:82:92:39:a5:59:cf:a1:b4:91:30:
bd:e8:23:e9:ae:9a:a8:8d:b7:04:20:8f:61:6c:c8:0d:3c:3e:
4b:ae:1d:df:9e:7b:47:d7:5d:23:a8:cb:d2:74:6b:b1:40:72:
a7:2f:34:c6:70:6c:af:b3:c1:88:a2:f0:51:fe:a2:24:18:7c:
f9:c4:c5:2e:18:3d:1e:a4:f1:28:50:29:46:a2:65:2f:18:23:
24:95:7d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 03:30:13 2024 by rpki-client on console-fra.rpki-client.org