Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/_scb2Hi-vJi9nUwGQW9xso44Wqc.roa
File: _scb2Hi-vJi9nUwGQW9xso44Wqc.roa (raw, json)
Hash identifier: 8LU5O2TpXB8UCMGu4pnxHlKP7uaZ8UhjzpIiwX+urSo=
Subject key identifier: FE:C7:1B:D8:78:BE:BC:98:BD:9D:4C:06:41:6F:71:B2:8E:38:5A:A7
Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial: 018CCA29249347CDF5F96D8472D9E72475A0
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/_scb2Hi-vJi9nUwGQW9xso44Wqc.roa
Signing time: Tue 02 Jan 2024 12:32:23 +0000
ROA not before: Tue 02 Jan 2024 12:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57022
IP address blocks: 193.35.28.0/23 maxlen: 23
193.35.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:24:93:47:cd:f5:f9:6d:84:72:d9:e7:24:75:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Validity
Not Before: Jan 2 12:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fec71bd878bebc98bd9d4c06416f71b28e385aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:2b:b7:72:0b:16:48:c7:2a:e6:80:f2:04:
ff:38:63:6c:b1:64:2a:f1:5b:a2:fe:3b:d1:ce:42:
8d:34:fd:be:77:f4:77:4a:ef:6e:14:f2:27:c9:70:
8c:07:5b:92:83:0c:e1:6a:66:2f:9f:31:32:0a:95:
ab:7f:76:3d:d1:f7:43:fc:fb:48:07:d9:bc:8c:d4:
60:2b:27:be:64:5a:ec:b2:1c:b0:8a:ab:bc:e0:af:
7e:f9:e5:44:36:dc:b6:a0:93:a2:10:42:aa:88:65:
74:83:4e:2e:e4:5b:7f:12:5f:e9:b4:41:1e:9d:19:
e1:3f:81:da:79:41:69:94:c8:e3:bf:58:0b:7c:09:
80:b8:a6:cd:13:c7:bf:ec:75:24:9f:38:d6:e2:b8:
f0:ba:56:3e:af:2e:c7:3f:1d:78:da:ca:16:77:bf:
c5:cf:04:41:38:f3:6d:4b:30:4b:37:73:9c:91:58:
df:08:ad:e7:68:e5:64:28:c5:4d:b7:42:1e:9b:0e:
5a:11:92:77:d4:9c:e0:cc:8a:88:f8:77:ee:ab:3f:
51:7c:e2:68:6b:cd:4d:77:a0:09:60:cf:8d:4f:1e:
3c:d0:59:91:7e:11:5a:da:58:33:23:1b:ec:4e:74:
a4:f7:25:74:86:0b:84:f1:d4:3a:35:a7:1a:89:fd:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C7:1B:D8:78:BE:BC:98:BD:9D:4C:06:41:6F:71:B2:8E:38:5A:A7
X509v3 Authority Key Identifier:
keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/_scb2Hi-vJi9nUwGQW9xso44Wqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.28.0-193.35.30.255
Signature Algorithm: sha256WithRSAEncryption
43:dc:32:e7:d2:95:b8:ad:e9:cf:a7:97:35:ac:ba:68:9c:a9:
af:e7:9a:50:fb:62:c2:25:1f:e2:2a:24:f2:e6:de:b0:f6:e4:
b7:4c:88:60:4a:da:a5:09:1b:3f:f2:e3:0b:81:f8:c8:43:33:
58:99:83:7e:70:0c:b2:e8:a0:74:6c:ae:01:f8:08:af:84:32:
4a:75:a0:cf:c5:b9:96:4d:d3:ab:be:ce:0f:cc:99:51:56:76:
63:33:86:d3:73:1c:ac:e1:f1:01:21:a5:70:a5:97:f1:7a:9b:
c9:30:dc:a6:e1:eb:7e:da:5d:e5:ef:3b:55:e9:57:50:84:c2:
da:1d:92:a9:8d:e7:c5:95:29:cc:7a:d3:c7:d5:81:07:32:07:
cc:d8:69:6d:7a:6f:b1:8f:a6:dc:33:27:e7:c2:7b:fc:0b:d0:
b7:14:21:d5:31:f5:32:4a:ae:4e:26:82:8b:63:dd:c0:1e:d5:
f3:8b:ef:d3:f6:8c:9d:61:35:90:99:e5:67:07:cf:43:bc:44:
d6:64:f2:5f:c7:52:72:c8:c6:04:97:5f:bc:5a:6c:52:de:6d:
3e:82:a1:fd:ec:7c:6b:f0:c8:39:62:08:ea:5b:e9:f2:86:4f:
aa:af:9f:43:7c:3c:20:95:a8:1d:d8:3d:31:ab:99:85:e7:99:
45:55:37:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:35:57 2024 by rpki-client on console-ams.rpki-client.org