Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/PGlVdZ5eHY25saQVvHwfh71h_NA.roa
File: PGlVdZ5eHY25saQVvHwfh71h_NA.roa (raw, json)
Hash identifier: 5xnObb+st1EQWkXj8cKAqbXhnQYhWh79M88C+smxCnQ=
Subject key identifier: 3C:69:55:75:9E:5E:1D:8D:B9:B1:A4:15:BC:7C:1F:87:BD:61:FC:D0
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 018CC801F6D5EED1FEE6FB384C1DFBF12060
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/PGlVdZ5eHY25saQVvHwfh71h_NA.roa
Signing time: Tue 02 Jan 2024 02:30:21 +0000
ROA not before: Tue 02 Jan 2024 02:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2107
IP address blocks: 193.138.1.0/24 maxlen: 24
193.138.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:f6:d5:ee:d1:fe:e6:fb:38:4c:1d:fb:f1:20:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Jan 2 02:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c6955759e5e1d8db9b1a415bc7c1f87bd61fcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:f9:71:9a:2a:26:69:60:01:db:74:f5:46:
97:d5:1d:f9:87:19:39:94:d3:b2:3f:9b:83:1e:b1:
08:ff:c6:fd:c9:04:88:98:2f:38:56:fc:1e:18:0a:
42:e9:58:2c:1e:40:6c:23:42:5a:fe:1c:21:26:52:
be:fb:e5:f8:50:a8:2d:58:a1:ee:3e:e0:5a:57:29:
19:0d:01:78:ff:67:40:ea:30:ca:2f:99:be:8e:61:
d4:22:95:3a:db:e0:66:85:bb:01:a8:69:48:04:60:
f7:e9:0d:bb:06:a8:3a:32:e2:c7:62:74:c6:ae:77:
72:b8:6d:cd:33:75:69:08:5e:51:ba:c9:a3:68:5b:
79:f1:79:1d:58:a8:34:98:43:71:e1:8c:ee:fd:02:
63:29:ef:ba:84:ad:05:8b:46:87:5f:d0:66:68:ad:
aa:5d:81:99:a3:20:70:b5:97:57:96:c6:ff:2c:47:
da:b8:ec:f6:b1:c3:f6:1d:f6:03:a7:0d:f8:86:f3:
5c:28:7a:cf:1f:ad:72:27:b8:00:29:ea:95:ce:40:
8f:3a:28:15:b7:97:f1:5d:48:cf:0a:bd:af:61:00:
0c:6f:0a:fe:65:14:e1:50:b8:e1:87:14:bc:d8:24:
4e:23:b7:84:32:6b:8a:0d:94:c2:0c:a7:79:7b:b0:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:69:55:75:9E:5E:1D:8D:B9:B1:A4:15:BC:7C:1F:87:BD:61:FC:D0
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/PGlVdZ5eHY25saQVvHwfh71h_NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.1.0-193.138.2.255
Signature Algorithm: sha256WithRSAEncryption
9d:08:b0:38:cd:02:34:45:5a:96:79:41:f2:5c:53:0a:ac:d1:
67:a7:16:5f:34:2d:86:61:30:79:c2:58:fd:02:5d:f8:0c:92:
76:81:24:73:04:a8:a6:bd:5d:a8:8c:b1:4c:35:5e:74:6d:52:
48:07:51:b9:d1:9d:91:eb:52:87:c5:c8:2d:e1:0c:c5:38:2b:
12:a8:5f:9b:7a:e4:83:b9:f4:bd:b7:ed:dc:c0:80:35:e5:8b:
c4:b0:1a:5d:80:22:9b:44:39:b7:c9:c6:08:cd:fa:d6:15:59:
44:e9:a6:9d:ab:7b:82:10:d2:20:ca:6d:d4:f1:18:31:85:82:
39:7f:64:8a:67:d8:b9:90:cf:5f:20:09:b3:75:19:62:3e:93:
0e:c0:67:99:ed:ec:c8:24:4f:2d:a0:7d:1d:a9:42:52:f1:1f:
20:8e:19:80:43:a4:09:fb:a1:f5:58:15:ad:96:21:94:a7:c5:
fd:94:af:f7:32:1b:76:d5:5a:42:7f:f4:c5:77:42:2a:34:2c:
fc:2c:42:61:e5:4b:cf:8b:5e:52:97:45:ba:c2:b8:7a:7d:db:
7a:3e:9c:ab:3e:e8:16:cd:e2:34:34:bc:7f:d7:52:4d:d7:8e:
ba:e2:02:d6:af:23:f3:5f:7d:35:aa:e1:d0:71:4b:5a:28:f9:
7f:10:8a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:06 2024 by rpki-client on console-ams.rpki-client.org