Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/Azwk5R7_ZoUMHJ0rKt7JcjDy4kE.roa
File: Azwk5R7_ZoUMHJ0rKt7JcjDy4kE.roa (raw, json)
Hash identifier: 7PdSaSLMXqCoN22v9SeUFjS+x26dCPJEzfliOvEVLzw=
Subject key identifier: 03:3C:24:E5:1E:FF:66:85:0C:1C:9D:2B:2A:DE:C9:72:30:F2:E2:41
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 018CC6499FF1CD66D420683CA3C7A7C304F3
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/Azwk5R7_ZoUMHJ0rKt7JcjDy4kE.roa
Signing time: Mon 01 Jan 2024 18:29:22 +0000
ROA not before: Mon 01 Jan 2024 18:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 193.17.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:9f:f1:cd:66:d4:20:68:3c:a3:c7:a7:c3:04:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Jan 1 18:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=033c24e51eff66850c1c9d2b2adec97230f2e241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:43:32:58:f0:3e:e0:c1:e5:a2:68:18:3d:
cf:36:b9:29:43:34:af:74:33:d4:59:eb:7e:05:30:
0d:c1:48:b4:1a:b3:28:26:07:b0:74:54:b8:47:c3:
6d:00:49:6d:c6:a7:7d:9d:bd:20:4f:2d:ad:4d:80:
65:cb:5c:d7:cb:17:1a:e3:18:ab:7e:15:72:c1:e1:
1f:42:cc:23:fa:69:61:ae:34:df:a3:c0:eb:db:cc:
87:39:4b:a1:4f:70:11:9e:d0:2b:f5:2a:61:5f:26:
00:8d:f4:7c:9b:03:78:03:af:48:bc:33:32:38:39:
6b:9b:b9:36:a4:62:7a:78:90:2f:26:64:eb:c5:16:
b3:88:0f:c6:90:6b:e2:83:13:8c:53:31:2a:70:b7:
3f:7f:00:f9:58:d3:b8:e6:8c:9a:e8:0c:62:6c:79:
f0:ee:ea:b1:4e:c7:bc:36:57:2f:4d:c5:53:b3:27:
c4:9d:b6:81:fb:5c:4e:d7:44:22:6a:d3:ca:a9:3a:
a8:b9:f6:97:08:b6:c5:b1:b5:af:05:25:69:ec:e8:
08:b5:f2:10:c8:e5:e6:8a:f6:20:d3:af:c5:66:f6:
2c:30:59:ac:18:8f:69:6c:a0:35:f3:21:5c:94:df:
74:61:cb:ef:3d:dc:e7:10:a6:e6:8f:20:24:ee:53:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3C:24:E5:1E:FF:66:85:0C:1C:9D:2B:2A:DE:C9:72:30:F2:E2:41
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/Azwk5R7_ZoUMHJ0rKt7JcjDy4kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.195.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1a:36:0a:d9:b4:b4:69:53:f7:d7:f0:6b:1c:e5:87:39:4b:
4d:0d:d6:45:46:7d:4f:6f:62:33:f4:fa:08:92:6a:43:91:1e:
26:d7:a8:96:80:2a:c7:b8:89:c5:9d:56:a3:02:89:d0:49:56:
dc:78:fa:87:b5:47:9d:ef:8f:e8:56:7b:9b:1e:9f:aa:65:2c:
e0:91:9c:4e:c9:41:42:86:9f:1a:88:09:f6:ab:4a:54:6e:a5:
ea:bc:62:9c:55:e1:ac:a8:87:e9:3b:d4:af:cb:e4:18:00:39:
14:de:10:60:56:c2:eb:cd:6f:fa:8c:d5:d7:51:82:80:91:ad:
79:34:b1:76:25:4a:2e:91:54:c3:a2:55:ad:34:7b:58:47:bc:
28:48:48:9c:07:91:f0:1b:dd:94:b2:13:12:0b:d2:6e:0a:d2:
61:b5:a3:51:20:9b:c2:28:c6:8f:b6:fc:ba:8a:d2:c9:78:13:
ac:eb:ae:75:38:8d:e5:ad:34:a7:a9:93:f0:3d:39:af:9a:fc:
2e:1e:d9:4a:7e:3b:69:4e:d7:9c:a9:4a:dd:32:09:04:6a:39:
ce:2d:0d:2d:63:39:e5:ff:9e:b2:85:64:a3:96:69:63:8e:a5:
3f:f1:95:43:37:cf:94:90:f3:0e:ba:6f:12:b9:03:1d:d2:7a:
89:14:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:50:56 2024 by rpki-client on console-fra.rpki-client.org