Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/8AJQIDTBuUAL15BCsKy8zMXALGQ.roa
File: 8AJQIDTBuUAL15BCsKy8zMXALGQ.roa (raw, json)
Hash identifier: LJQ5pExzBSTJ6uv1dQXnTQOLVXbdMyZmoPzjuaARMkk=
Subject key identifier: F0:02:50:20:34:C1:B9:40:0B:D7:90:42:B0:AC:BC:CC:C5:C0:2C:64
Certificate issuer: /CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Certificate serial: 018CC26D13A4F1D0D9886406E4B867F72BB7
Authority key identifier: 9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/8AJQIDTBuUAL15BCsKy8zMXALGQ.roa
Signing time: Mon 01 Jan 2024 00:29:37 +0000
ROA not before: Mon 01 Jan 2024 00:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210196
IP address blocks: 193.148.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:13:a4:f1:d0:d9:88:64:06:e4:b8:67:f7:2b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Validity
Not Before: Jan 1 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f002502034c1b9400bd79042b0acbcccc5c02c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:1e:8d:ba:4d:50:8e:33:21:8c:85:66:b9:
de:b0:d6:74:28:bb:41:c4:49:ad:6a:d7:05:5a:1a:
2e:a7:42:a8:b6:ad:54:a0:8a:af:11:3c:24:4b:00:
fa:9b:e4:29:b9:a7:ad:13:b6:2e:62:73:a0:a7:c2:
d2:de:ff:b1:a3:a3:09:ab:7b:dc:3e:4a:b5:19:10:
07:22:e8:ae:33:21:fc:ef:ab:55:d6:88:59:a0:e2:
38:22:0b:c9:0d:27:57:03:cf:cb:5a:19:c7:b6:84:
3f:ed:2d:e5:24:18:e6:a6:bd:60:5f:e1:5b:9f:9d:
ea:ee:36:ad:94:7a:81:3e:ff:1b:8c:54:fe:e6:4a:
80:c4:f5:db:f7:f9:bc:28:10:ad:58:95:14:f6:31:
44:0e:6a:b1:20:69:5a:9e:a4:54:76:53:77:f9:ea:
69:81:39:64:27:9c:f9:4e:ef:4f:6f:02:3b:77:ae:
77:43:2f:09:e1:bc:8d:4f:ee:7a:c1:2d:e0:ca:20:
5c:df:49:1f:9e:e7:9a:4a:5b:e9:f2:f1:be:1d:0f:
72:de:ea:b8:60:da:dc:be:b0:50:35:32:e9:df:3d:
0c:05:c8:ae:a3:f4:7b:ed:53:17:07:47:17:07:20:
0c:c0:cc:39:6b:f7:a9:d5:e1:a7:5c:a4:1c:85:6b:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:02:50:20:34:C1:B9:40:0B:D7:90:42:B0:AC:BC:CC:C5:C0:2C:64
X509v3 Authority Key Identifier:
keyid:9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/8AJQIDTBuUAL15BCsKy8zMXALGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9e:a5:90:80:bf:12:81:8c:83:74:cc:d3:63:ae:05:28:69:
a9:70:de:f1:f2:88:03:40:0b:ba:1d:39:e4:6c:3e:32:0c:4d:
4a:43:55:dd:f6:68:bc:37:fc:9b:2d:e6:f6:fe:24:e5:b8:ce:
b9:2e:8d:cc:ec:01:ed:57:99:c8:b0:9f:8c:c5:62:76:a9:7c:
70:1e:94:e0:38:55:76:57:88:4e:7b:45:e1:1b:84:1f:09:b1:
53:80:b9:1e:10:8c:58:ac:2c:01:26:14:c0:cd:e3:ea:dd:6d:
fc:0c:da:99:04:eb:38:cd:34:78:6f:c8:57:68:15:ae:49:c3:
ea:e9:ce:39:09:e1:11:15:a6:ea:6b:c9:98:49:e3:7e:a5:38:
8a:ac:08:93:76:83:e9:72:65:3a:9f:a1:a9:bc:8c:75:3c:67:
88:7f:38:9c:15:7a:80:d7:4b:61:ca:79:59:8b:a8:60:f0:ae:
25:92:e0:88:ff:20:b6:f8:16:20:bb:4b:e2:ec:c3:03:0a:5d:
9f:e0:a0:64:d8:e4:89:6e:16:ad:fa:29:79:80:b6:59:2b:66:
f0:90:7f:8c:54:f6:28:03:e0:d7:ad:e8:16:c1:17:1b:82:48:
a9:30:18:a3:62:98:e8:18:41:f1:03:6a:c9:ce:0e:d5:51:67:
41:ec:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:49 2024 by rpki-client on console-ams.rpki-client.org