Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/x1hzwFrokWJ5AtvWDsWiL1l84ys.roa
File: x1hzwFrokWJ5AtvWDsWiL1l84ys.roa (raw, json)
Hash identifier: CPGiO0j+2yXDMGTSt/d+L9xDLVWA249aF6s+yOiFOlY=
Subject key identifier: C7:58:73:C0:5A:E8:91:62:79:02:DB:D6:0E:C5:A2:2F:59:7C:E3:2B
Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial: 018CC3B69FBFC45B6126FBC41B925CD8B754
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/x1hzwFrokWJ5AtvWDsWiL1l84ys.roa
Signing time: Mon 01 Jan 2024 06:29:34 +0000
ROA not before: Mon 01 Jan 2024 06:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43891
IP address blocks: 193.186.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:9f:bf:c4:5b:61:26:fb:c4:1b:92:5c:d8:b7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Validity
Not Before: Jan 1 06:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c75873c05ae891627902dbd60ec5a22f597ce32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:ec:2c:99:94:ab:62:f1:01:cb:18:2c:41:
c7:77:24:fb:ea:04:ce:54:12:c6:0f:3a:a4:ca:82:
b1:37:37:6a:f8:70:62:30:11:6e:80:c6:60:24:8b:
e2:dd:cc:3e:0b:6e:b6:d9:9c:0e:c3:b6:57:21:74:
04:3e:ee:cf:7e:9d:43:09:4a:cc:15:43:a4:d6:f5:
9d:57:0a:a7:b5:a7:b6:cc:4b:10:30:af:10:4a:50:
ad:98:3a:bb:f3:39:1c:43:dc:45:12:66:4c:da:e4:
c5:20:0b:31:54:6d:b6:00:a8:5c:26:9c:cc:f2:d2:
2d:be:2e:29:ae:dc:a9:a9:d2:75:1e:4b:69:86:b5:
fe:39:53:f3:d7:0f:7e:3d:6d:9b:b9:c3:8f:2c:ee:
c4:50:26:d6:eb:38:43:b2:69:5b:0f:1e:00:ca:57:
1e:7e:2a:72:69:67:94:49:33:3c:a9:41:40:78:b4:
08:89:30:27:f5:64:58:e4:1f:7d:12:14:27:cd:4c:
ad:58:da:8f:20:92:60:27:a9:b6:30:de:e2:6a:e0:
25:bb:4d:a5:da:7d:43:45:fc:b2:86:39:40:c1:49:
6d:0b:0f:4b:bd:51:89:ed:62:59:62:32:54:e0:36:
12:93:cb:0a:84:eb:e3:13:7e:a2:38:ab:11:62:bb:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:58:73:C0:5A:E8:91:62:79:02:DB:D6:0E:C5:A2:2F:59:7C:E3:2B
X509v3 Authority Key Identifier:
keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/x1hzwFrokWJ5AtvWDsWiL1l84ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.10.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b6:f7:d3:9b:bd:cc:e8:82:e7:e8:06:f1:9c:1f:ef:7d:5a:
90:5e:e5:fe:09:20:b6:c8:5a:21:a5:b6:fa:b3:e3:a7:21:df:
14:ad:57:1e:ee:cc:0c:4b:c1:6e:a6:f9:4d:17:ff:9f:ff:b8:
c7:18:55:86:2a:aa:88:9a:93:f4:14:61:e2:80:7e:3c:67:24:
8d:9b:cf:ee:55:9f:f1:33:f2:ba:b0:4c:68:23:0a:18:21:f8:
75:b1:31:4b:df:9d:34:e9:9e:3f:4d:af:e7:aa:02:de:c6:f7:
1a:e4:07:a5:6d:02:e3:63:a5:5e:d3:f3:d4:d0:38:75:50:a5:
55:a6:8b:2c:85:42:aa:a6:de:12:f8:37:53:c3:5c:16:69:fa:
f1:c9:8c:7d:a8:93:3b:40:ed:f8:a5:51:a3:a8:03:d5:73:a5:
1e:23:3c:2f:36:07:8f:50:ab:a9:58:16:3f:79:cd:cb:b1:cf:
45:c9:1a:10:28:6a:5a:c7:f9:cf:41:db:5b:99:1d:8e:ad:c3:
7f:05:5b:90:0c:21:fa:fe:14:61:d7:17:1a:f9:50:1f:d2:1c:
14:aa:2c:29:b7:88:85:94:33:b1:0f:11:39:4c:79:55:f4:36:
8f:66:bf:56:3a:55:75:6e:6e:e1:c6:50:67:e5:37:11:ab:57:
47:0a:e2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:59:27 2024 by rpki-client on console-fra.rpki-client.org