Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/wuQ87vmo7QYBAU1MhhzDPeYx9VQ.roa
File: wuQ87vmo7QYBAU1MhhzDPeYx9VQ.roa (raw, json)
Hash identifier: e7NfJf5g8+my0XAZksaKPtinFgJH4DUn90+YMDhe0p0=
Subject key identifier: C2:E4:3C:EE:F9:A8:ED:06:01:01:4D:4C:86:1C:C3:3D:E6:31:F5:54
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 018CC8011D688FACF9CB7D9653DB4DEA0440
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/wuQ87vmo7QYBAU1MhhzDPeYx9VQ.roa
Signing time: Tue 02 Jan 2024 02:29:25 +0000
ROA not before: Tue 02 Jan 2024 02:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208814
IP address blocks: 193.138.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1d:68:8f:ac:f9:cb:7d:96:53:db:4d:ea:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jan 2 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2e43ceef9a8ed0601014d4c861cc33de631f554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:99:b2:02:39:d1:38:e2:51:aa:94:fa:73:4f:
68:9f:d3:8e:75:12:fc:85:7b:79:e4:7c:2e:69:1b:
7c:84:63:61:70:a7:9b:0b:4e:73:46:47:59:0f:5e:
45:24:86:26:42:6e:86:99:fe:5d:92:32:df:60:36:
c4:71:6f:ed:5f:5f:ff:bd:a1:14:89:55:3a:e5:99:
ab:3d:7e:9a:5a:61:4d:ff:04:17:dc:b1:a5:1f:ca:
19:f5:78:c2:d4:53:dd:02:4b:09:f6:0e:7e:b1:8e:
1b:a5:a4:75:2d:01:52:8a:90:60:e2:01:4a:59:53:
aa:74:01:c0:57:b9:81:6a:b2:91:82:17:01:b5:d4:
61:87:b6:f2:ae:1b:49:5f:e3:51:7d:6f:9f:cc:d2:
f5:33:5e:59:4b:59:24:91:ae:df:4a:80:1d:a6:28:
38:d9:fc:fe:08:c0:70:c0:cd:8a:0c:65:ee:71:b3:
fd:14:d9:02:8c:dd:f0:18:a9:16:5f:47:d4:13:24:
9d:01:6b:41:42:01:94:7c:c0:3c:24:81:1f:32:bb:
df:a7:b0:99:28:46:89:50:fd:de:f7:5c:2c:fe:c5:
b3:65:2b:c7:f0:c2:e1:ad:7f:20:b8:e5:0f:9e:02:
28:6e:dc:1c:91:a2:54:27:2a:bc:20:d8:f8:69:50:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E4:3C:EE:F9:A8:ED:06:01:01:4D:4C:86:1C:C3:3D:E6:31:F5:54
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/wuQ87vmo7QYBAU1MhhzDPeYx9VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.81.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e3:57:8b:80:fa:28:cf:f2:ff:bb:50:84:1f:de:da:10:44:
c7:4d:4b:d1:04:e2:86:af:79:01:79:d2:30:7d:54:f1:e7:4f:
60:fa:9e:6e:c1:62:01:95:e3:2a:7d:ab:74:20:7c:51:c2:35:
69:af:d5:ce:2d:8c:be:1a:44:cd:7f:03:c3:33:38:4b:35:11:
f9:dc:7a:92:a5:cb:97:61:69:67:b6:e0:f4:fc:35:14:5c:a0:
e1:60:7a:2f:02:23:1a:14:c6:64:e2:f4:81:e0:62:c7:d9:e7:
4f:42:09:1a:75:2e:af:4c:46:bb:86:0d:e8:27:70:6b:84:b0:
b6:61:5a:15:db:af:6b:d3:57:5d:3d:92:61:8a:c8:59:7c:7e:
98:65:4c:19:32:e3:68:98:42:60:cc:6c:4e:be:59:5b:34:9e:
eb:76:1b:52:6a:3b:17:31:96:67:46:7a:a9:0a:fd:f8:7c:3f:
d6:14:fc:a8:ba:7c:7e:f5:72:77:95:4b:02:32:6d:72:e6:df:
db:9e:5d:6d:76:4c:f1:c0:5b:cf:00:6a:07:05:a2:e8:66:83:
6c:95:b6:16:0c:59:e1:21:0e:11:ae:db:4d:2f:b6:d6:20:be:
a7:29:69:05:c6:8c:49:9d:94:15:c8:cf:85:93:8b:25:4d:38:
17:2a:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 13:35:46 2024 by rpki-client on console-fra.rpki-client.org