Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/xjlvGVJLbh-pvMFZWPDJhCh2598.roa
File: xjlvGVJLbh-pvMFZWPDJhCh2598.roa (raw, json)
Hash identifier: djVtZ5WxrEshsM4bxYIIPqQuSqG78TxDVF0bYMpVX2Q=
Subject key identifier: C6:39:6F:19:52:4B:6E:1F:A9:BC:C1:59:58:F0:C9:84:28:76:E7:DF
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 018CC8DEEF8F8615AE44A39BDD0ECBD6C153
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/xjlvGVJLbh-pvMFZWPDJhCh2598.roa
Signing time: Tue 02 Jan 2024 06:31:42 +0000
ROA not before: Tue 02 Jan 2024 06:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6798
IP address blocks: 193.243.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ef:8f:86:15:ae:44:a3:9b:dd:0e:cb:d6:c1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Jan 2 06:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6396f19524b6e1fa9bcc15958f0c9842876e7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:b6:dd:1a:29:dd:ca:95:56:b1:bd:29:cb:
44:89:06:9c:5d:ab:7c:cb:02:e7:df:dc:d4:6b:49:
e4:e3:7b:68:b6:3b:aa:32:59:04:bb:33:cf:f0:98:
90:f8:63:7e:f5:ba:7b:fc:41:c1:cd:70:3b:10:11:
59:a3:f7:7e:88:97:dd:87:22:7b:87:53:77:ad:04:
94:80:88:1a:ac:77:0f:ff:27:47:0a:7b:20:a9:a2:
45:08:7d:14:6c:16:b4:d5:16:c6:d4:9b:e6:40:f4:
3f:b5:aa:80:5d:2f:17:4f:5b:b0:1b:85:db:64:7b:
45:7e:73:d7:30:f5:11:50:5e:48:1b:f4:17:59:b4:
17:85:cf:6e:2a:7c:54:97:e3:b7:9d:11:ce:74:34:
7d:56:4c:c5:11:b5:4f:fc:b8:3d:7c:3e:f8:c6:71:
c1:7f:5b:74:e4:af:0e:d8:e6:63:78:ff:37:08:13:
67:5d:35:f8:ec:ef:0c:22:8f:57:8a:db:26:5a:d6:
e9:f1:1e:fb:97:72:e1:46:bd:03:68:91:13:ee:56:
b5:b6:89:b5:77:c2:d5:b9:0f:87:f7:4d:ee:c9:83:
99:8f:da:5c:c0:20:8c:34:b1:56:02:58:2b:2a:8e:
1e:16:1a:43:24:a1:2f:d8:4c:6d:89:ad:37:67:27:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:39:6F:19:52:4B:6E:1F:A9:BC:C1:59:58:F0:C9:84:28:76:E7:DF
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/xjlvGVJLbh-pvMFZWPDJhCh2598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.162.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:16:e3:f0:95:8f:1a:cf:01:97:53:ec:de:40:5b:bd:e2:2d:
56:91:bb:a7:7e:a7:d6:63:88:3c:c3:22:36:0c:c5:30:c6:b0:
7f:e7:53:b2:c0:12:03:a9:5f:23:ff:d3:75:64:37:ed:92:e6:
ce:ba:5b:c8:f3:ca:c1:d9:28:c7:8e:73:2a:b7:2b:01:36:41:
a9:e4:fa:19:1d:36:b2:5a:86:71:55:91:ca:64:47:7d:a6:71:
85:14:a7:a2:44:b7:9a:61:bd:9b:68:71:e4:20:c2:ca:2c:09:
aa:82:50:70:94:46:bc:8d:da:ab:b5:37:45:15:1f:87:b2:e9:
65:20:c5:dd:66:f2:73:37:94:e2:82:11:23:74:c3:7d:5c:99:
5b:f3:2a:58:57:70:e8:39:81:e4:f8:a2:1b:d1:58:19:10:e1:
0b:37:39:a0:f9:53:fa:1e:11:76:1d:3a:c7:bf:c2:3a:d4:31:
0a:71:17:7a:ea:78:d7:00:f5:0c:2a:95:a3:f4:cc:37:7d:01:
90:e7:fb:74:65:79:8e:a6:2f:2c:7b:dc:3f:be:92:ce:1a:38:
c3:29:a7:96:9f:0a:f0:a5:5b:f2:d7:4e:ea:7c:4c:8d:a7:a8:
ad:94:53:48:a1:2e:3c:65:74:b7:ef:c9:ec:7a:dc:27:58:2e:
11:e3:2a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:50:12 2024 by rpki-client on console-ams.rpki-client.org