Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/2VuTE2uTlaUUJtZWoi6Mb2cnn0o.roa
File: 2VuTE2uTlaUUJtZWoi6Mb2cnn0o.roa (raw, json)
Hash identifier: zBMt3UxX2Ux+Iw2b5XkeotOpfMpPn9y26Gm/NzpgsvQ=
Subject key identifier: D9:5B:93:13:6B:93:95:A5:14:26:D6:56:A2:2E:8C:6F:67:27:9F:4A
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 018CC2DAF7FA4168C36F945FBAFEF1A28BBB
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/2VuTE2uTlaUUJtZWoi6Mb2cnn0o.roa
Signing time: Mon 01 Jan 2024 02:29:39 +0000
ROA not before: Mon 01 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 193.178.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f7:fa:41:68:c3:6f:94:5f:ba:fe:f1:a2:8b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d95b93136b9395a51426d656a22e8c6f67279f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:1a:e3:86:c7:63:a3:90:85:8f:92:2e:46:
bb:76:0c:03:c8:7d:f1:fb:3d:41:99:89:42:38:89:
9c:04:90:22:49:5e:2f:4e:a4:11:d9:21:89:25:f9:
e3:94:77:c4:98:2f:25:63:10:a1:ba:ea:69:8c:58:
4c:be:b6:8b:50:01:3d:ae:ee:7b:1c:43:95:b4:ee:
ae:3d:5f:59:ff:77:8a:ec:20:ce:55:02:8e:c0:e4:
82:41:bf:17:47:a8:41:8c:15:45:1a:d8:03:51:bb:
a3:d6:1e:5e:08:db:0e:fe:61:e5:a0:51:c7:e9:67:
c0:fe:8f:06:a1:9f:f3:fc:65:d4:f7:6f:f8:6e:6f:
d0:2a:f8:4f:89:d8:5e:c5:41:d6:a2:01:a5:61:c7:
3c:af:29:48:bb:f6:82:2c:d6:31:c8:20:51:33:1e:
b9:3b:d5:f3:24:9a:03:be:22:4d:44:da:a4:b4:db:
22:2c:29:d9:c1:ba:30:78:a9:c9:bc:93:97:81:f4:
2c:4a:22:ef:ca:56:51:f2:b8:cb:b5:55:8e:a8:51:
a8:61:ee:88:21:be:72:08:31:ab:d0:b4:b8:52:a1:
4a:d4:85:49:5d:f7:81:d4:da:86:7c:f2:70:b5:6e:
ae:52:b3:9e:94:c9:2b:47:58:17:8f:35:af:55:a1:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5B:93:13:6B:93:95:A5:14:26:D6:56:A2:2E:8C:6F:67:27:9F:4A
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/2VuTE2uTlaUUJtZWoi6Mb2cnn0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.166.0/24
Signature Algorithm: sha256WithRSAEncryption
38:35:51:03:ef:a0:fb:9f:42:00:c5:dc:75:12:f3:9e:67:59:
a0:50:00:b6:1f:99:b5:d7:8f:02:fa:46:c0:2e:5c:6d:30:97:
58:94:9a:ed:b0:e5:c5:f7:9d:dd:c9:ec:40:dc:52:80:d4:a5:
9a:64:57:81:99:06:9f:a8:9b:23:65:b3:70:c0:89:1d:1e:40:
be:9a:74:21:69:29:49:3a:1f:19:02:18:14:21:71:11:08:63:
fc:60:52:68:bf:19:e0:e5:6a:16:30:f0:4c:30:aa:54:63:53:
f3:16:3f:97:5c:ef:11:19:a3:64:85:5f:d4:8f:94:83:d5:c1:
e9:89:43:6a:98:52:f1:01:ae:bb:e9:05:b1:e1:fb:65:95:45:
0d:73:0a:46:f2:78:24:97:d2:ca:21:45:40:7f:31:eb:34:f8:
40:a8:2d:c1:03:53:c1:0b:85:dd:2e:ad:d4:9f:c3:48:91:10:
17:e8:51:59:10:30:64:e5:39:37:b9:7e:d2:fa:7f:b3:76:d7:
93:09:e1:22:a4:3a:c4:80:8b:e1:99:78:5a:27:52:8b:c2:3f:
df:de:6c:e9:5d:cb:59:4f:af:13:b6:97:1c:c9:b1:f8:d0:9a:
42:c7:34:6b:cf:25:10:cd:d1:e7:43:d2:17:76:1e:cd:08:f6:
04:5b:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:28:45 2024 by rpki-client on console-ams.rpki-client.org