Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/23PihBj3O8zVlWtW0eKRGrr20yA.roa
File: 23PihBj3O8zVlWtW0eKRGrr20yA.roa (raw, json)
Hash identifier: 3AxANG4xm8m68OaKTmPe6xZxzvrYJyP/bXXLzVNlhZs=
Subject key identifier: DB:73:E2:84:18:F7:3B:CC:D5:95:6B:56:D1:E2:91:1A:BA:F6:D3:20
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 018CC425262A42F2F90D14187EE9CA3C0233
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/23PihBj3O8zVlWtW0eKRGrr20yA.roa
Signing time: Mon 01 Jan 2024 08:30:18 +0000
ROA not before: Mon 01 Jan 2024 08:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50469
IP address blocks: 153.92.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:26:2a:42:f2:f9:0d:14:18:7e:e9:ca:3c:02:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Jan 1 08:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db73e28418f73bccd5956b56d1e2911abaf6d320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:79:78:5f:eb:f8:fb:26:9d:c0:12:25:a2:
d0:8c:70:13:08:78:53:69:fc:a2:16:68:f4:a3:e7:
c3:07:8f:e2:da:3b:29:d5:e4:bc:7f:22:30:cd:2c:
21:29:8c:90:2d:76:5a:47:8f:1c:e9:b6:a1:5b:6f:
92:eb:f5:18:8f:44:58:c4:6d:2b:78:95:a8:de:88:
3b:1b:ef:b1:bb:3e:71:86:c1:15:70:44:a5:bd:57:
65:2a:b5:0c:f7:b7:44:73:37:23:c8:1b:ca:f9:8d:
94:66:46:40:b0:60:32:9e:11:f0:a5:8a:0e:8e:14:
a6:50:ce:d0:1c:01:e0:d6:17:04:7b:a4:0a:d2:fb:
74:1d:0d:e4:c3:cd:f8:05:af:c7:d1:f0:ad:76:88:
3b:f7:26:80:99:ef:5e:bf:d8:84:d3:bc:07:f6:01:
78:2c:89:47:d3:e3:ed:43:f4:0e:55:10:22:f9:e8:
af:e5:fc:b7:c8:d4:da:30:01:36:94:ab:0c:c5:6b:
4c:3d:f7:e3:8e:8c:4d:74:ef:a7:55:4b:6c:70:d0:
3a:5e:fd:a1:e9:e8:59:f1:ba:92:ad:e2:75:01:ff:
bb:2e:e3:89:88:bc:46:33:d2:20:66:18:93:73:cd:
3f:a8:eb:1b:a1:17:9f:3f:72:78:c1:8f:28:3a:82:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:73:E2:84:18:F7:3B:CC:D5:95:6B:56:D1:E2:91:1A:BA:F6:D3:20
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/23PihBj3O8zVlWtW0eKRGrr20yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.187.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a8:41:f4:b9:42:00:d2:22:b1:df:a0:0e:e2:21:ba:6c:0e:
e2:a7:cc:a3:33:b8:f6:88:18:1e:45:af:1f:76:77:08:46:18:
3c:7f:d7:76:19:f3:ae:f6:b2:f7:3f:b6:98:40:bc:fb:b4:1c:
f1:2b:b2:f9:95:0a:d8:11:67:f8:1b:74:69:8d:b4:95:e9:d0:
e3:e5:eb:e7:ed:73:7f:ac:25:ee:88:94:e0:04:8b:7f:ee:25:
eb:fe:4e:94:21:ac:52:a6:ce:db:a4:1e:ab:d0:ab:f9:c3:98:
48:d7:b3:26:53:ea:5e:7d:c0:d2:7b:8f:d2:e7:6c:25:d6:2c:
6b:2f:99:41:be:3b:81:6c:51:2e:b0:e1:0e:32:68:fb:df:44:
cc:e9:2d:30:5c:26:23:6a:93:e4:67:fa:50:96:55:58:4d:7b:
e2:15:23:49:f1:8d:56:46:6a:52:a5:db:4f:6e:f6:4b:6f:6c:
ee:5c:32:10:75:d3:2e:f6:02:1f:d2:14:61:d9:55:9c:f1:81:
17:50:ed:dc:10:36:3e:99:dc:af:4d:5e:32:28:ec:ab:72:e5:
f8:c3:a3:46:e7:08:c3:6a:c8:ed:3a:79:26:f8:5e:86:0b:19:
6c:3e:a7:e8:00:02:23:41:8f:a5:3c:2f:99:24:ea:b1:da:e7:
6b:08:64:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:09:19 2024 by rpki-client on console-fra.rpki-client.org