Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/vwVCQS7HYp6iJv4rDJU1UjJq-9A.roa
File: vwVCQS7HYp6iJv4rDJU1UjJq-9A.roa (raw, json)
Hash identifier: YmIpBPv+89Of5CI+NUkRY4i6bWz27WyXiGyg8PSewvU=
Subject key identifier: BF:05:42:41:2E:C7:62:9E:A2:26:FE:2B:0C:95:35:52:32:6A:FB:D0
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 018CC5DBEFF7478F2ED332F856394388D021
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/vwVCQS7HYp6iJv4rDJU1UjJq-9A.roa
Signing time: Mon 01 Jan 2024 16:29:34 +0000
ROA not before: Mon 01 Jan 2024 16:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34878
IP address blocks: 193.196.32.0/20 maxlen: 20
2001:7c0:2310::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ef:f7:47:8f:2e:d3:32:f8:56:39:43:88:d0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Jan 1 16:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf0542412ec7629ea226fe2b0c953552326afbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:7d:18:65:1f:15:2c:da:a2:55:9e:30:8f:
1d:bf:6e:f7:e1:8e:9a:5c:d5:10:e1:99:ec:2f:11:
6b:b7:e2:6f:52:af:c3:b6:c9:60:bf:61:ef:cf:42:
28:b3:ea:05:73:5e:52:a5:cd:20:fd:96:a4:6e:27:
7e:b1:f6:7f:d2:7e:af:05:e2:19:9b:3d:3b:ce:92:
e2:3d:33:17:b8:fa:72:59:11:e9:63:3b:5a:bd:51:
b4:66:27:b8:6c:2f:1d:98:12:63:a5:41:f1:8b:5b:
c4:e2:92:f2:5d:5a:01:a7:46:cd:a8:e6:a8:4a:78:
81:69:61:99:3c:b9:6a:e4:ea:a8:8d:17:35:cc:ba:
21:44:db:b7:45:0c:15:4c:de:ce:c9:84:1a:d9:0a:
3a:f3:07:f3:fe:99:e4:93:6b:27:a4:a9:8a:6d:c8:
c6:50:07:10:9a:52:3f:e7:0a:70:2e:6e:14:34:de:
c9:38:f4:9d:00:6d:d0:b2:6a:e0:a3:f2:38:dd:d4:
82:17:07:f6:93:2e:08:95:c8:1f:e3:78:9e:6b:af:
87:be:57:71:dd:46:05:d8:98:3a:e2:8f:32:10:d6:
5d:91:30:06:3f:d6:c1:2e:13:17:9e:a2:9c:ed:be:
31:94:a6:bd:4e:44:ea:4f:08:be:50:e1:0a:59:c5:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:05:42:41:2E:C7:62:9E:A2:26:FE:2B:0C:95:35:52:32:6A:FB:D0
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/vwVCQS7HYp6iJv4rDJU1UjJq-9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.196.32.0/20
IPv6:
2001:7c0:2310::/44
Signature Algorithm: sha256WithRSAEncryption
28:7b:c1:64:58:28:a6:32:f9:b9:a2:96:c6:5d:32:39:e3:85:
46:ef:39:b7:a5:10:99:a2:7f:31:7d:5a:11:8f:ba:c5:18:a1:
56:fb:79:51:99:44:9e:e3:0c:3b:a4:4a:6c:5a:1d:72:3a:1d:
16:44:89:74:94:25:18:a5:eb:65:e6:1b:cf:80:b1:d9:25:4d:
f6:33:5e:31:e6:cb:ed:96:10:f8:64:8d:2e:38:c9:fe:b4:e3:
93:50:7e:01:c5:32:5c:18:84:de:d2:94:53:26:13:99:89:3b:
7f:3a:bb:39:1c:ed:99:16:fa:6c:7e:44:ce:20:b4:1d:0f:d4:
b6:66:fa:cf:e3:4d:fb:27:d8:2f:b2:3d:8d:67:4c:18:6c:e0:
9e:73:d4:fc:0a:96:2c:2c:bc:0a:4a:9f:5a:14:3a:73:94:e0:
58:14:74:7f:da:7b:5e:a7:03:2a:45:43:2a:f3:c4:18:b5:23:
e5:8d:69:8f:64:e5:dd:5f:4c:c4:91:ab:8d:a8:b2:81:36:50:
9e:3c:c8:ab:e4:bc:96:38:11:82:65:68:6a:f1:9f:3f:ea:1c:
9a:05:cb:12:c5:47:27:06:0f:e9:2a:a5:fa:b7:eb:9b:f7:e9:
19:11:31:8f:ee:86:9d:fc:9d:5b:56:df:68:67:57:52:c6:39:
7c:a2:dd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:47:36 2024 by rpki-client on console-ams.rpki-client.org