Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/1-qs0w0OM6I564xtUhq55k0cj2u4.roa
File: 1-qs0w0OM6I564xtUhq55k0cj2u4.roa (raw, json)
Hash identifier: 7m1CdkcJizYMK27woK1DXnugjwitbUw+7PzWAbj8e/s=
Subject key identifier: FA:AB:34:C3:43:8C:E8:8E:7A:E3:1B:54:86:AE:79:93:47:23:DA:EE
Certificate issuer: /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Certificate serial: 018CC86F08201A5AC281593E857C83B31F18
Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/1-qs0w0OM6I564xtUhq55k0cj2u4.roa
Signing time: Tue 02 Jan 2024 04:29:28 +0000
ROA not before: Tue 02 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29063
IP address blocks: 193.221.85.0/24 maxlen: 24
193.221.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:08:20:1a:5a:c2:81:59:3e:85:7c:83:b3:1f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Validity
Not Before: Jan 2 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faab34c3438ce88e7ae31b5486ae79934723daee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:74:ab:96:18:c2:91:c0:33:ed:dd:91:82:01:
44:2a:d7:74:8a:f8:23:b9:23:c0:a1:e0:5b:2e:49:
6c:4c:aa:74:be:b1:ad:6d:cb:9f:91:a5:11:de:c1:
11:0a:9d:3c:49:0a:8b:1f:03:f2:62:4a:9f:25:43:
5b:cd:0b:0b:db:51:1b:0f:a0:bb:93:a1:1a:61:83:
14:5a:92:8a:d3:f9:65:dd:de:e5:a4:c4:79:8b:b2:
58:fd:d6:72:34:fe:46:ce:1a:cf:9f:9f:8b:a0:a0:
ec:9f:af:40:ca:bc:34:b4:e3:39:f0:5d:8a:fe:e1:
8d:ed:9f:87:13:8d:12:04:33:2f:bf:10:49:db:42:
a8:16:7e:99:e6:74:d3:79:64:81:a8:9b:e2:8c:42:
f4:45:39:e2:36:78:b9:96:9d:a2:0d:e4:f7:52:7a:
96:41:96:b9:cb:52:30:2b:d7:d2:36:a4:86:8f:82:
a8:65:3d:a8:37:82:53:5e:dd:f8:6a:bf:03:74:5c:
62:40:b9:b9:6f:ba:4c:a8:ca:8e:05:b5:e1:31:0e:
cb:97:fe:e0:85:b2:ce:cb:f3:7b:66:b3:5a:36:6a:
2a:af:84:d7:9f:18:17:dd:f7:d1:38:d9:b9:c3:d1:
f8:fe:04:29:33:9c:34:aa:26:a2:db:7f:40:5c:32:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AB:34:C3:43:8C:E8:8E:7A:E3:1B:54:86:AE:79:93:47:23:DA:EE
X509v3 Authority Key Identifier:
keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/1-qs0w0OM6I564xtUhq55k0cj2u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.84.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:50:ac:8f:db:39:c6:e9:da:9b:d3:f5:cb:a7:e0:d2:e2:6c:
7f:a0:b1:f7:9a:de:87:25:17:88:81:96:88:f0:25:14:ef:84:
34:9b:c5:69:32:52:d0:5b:35:6d:fa:7d:9d:c8:7a:e2:59:d3:
de:a7:0d:a9:f2:81:01:b8:b7:7b:0f:22:e3:38:18:70:d2:5b:
64:02:d9:6c:cc:47:44:b9:7e:9e:7f:82:d8:12:3a:75:37:ec:
36:5c:4a:e8:4e:cf:de:6e:87:08:b8:fe:88:b1:dc:d6:4a:7c:
90:46:a9:a5:0f:aa:04:49:80:52:74:2a:45:59:04:87:17:4c:
5a:04:45:ef:81:97:de:f9:9f:60:5a:b7:b9:52:19:f0:e0:21:
8a:3d:2c:96:3d:56:8b:60:7b:05:02:a5:cc:f0:52:67:0d:c9:
28:cb:83:f3:17:ac:30:e0:cf:cd:6e:8c:06:8a:a8:da:7e:d1:
fc:eb:22:a2:3d:48:6e:85:c5:7c:5a:04:14:5e:14:be:1f:24:
21:fa:2e:28:59:61:43:6e:4a:d0:81:a5:35:b9:d4:69:cb:6d:
ec:0c:6a:4c:56:a7:db:13:2e:5a:43:8b:17:38:27:5f:c2:a4:
46:07:f7:67:4f:1c:df:4b:42:7e:8c:04:ef:b6:5d:97:f4:21:
bc:93:33:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:09:38 2024 by rpki-client on console-ams.rpki-client.org