Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/98mtNwI3M-wfm5_0YxUji1ykTT8.roa
File: 98mtNwI3M-wfm5_0YxUji1ykTT8.roa (raw, json)
Hash identifier: wHTnYnkTf8L64YY49Idt44l1/Byi9EK03NihMi5S36U=
Subject key identifier: F7:C9:AD:37:02:37:33:EC:1F:9B:9F:F4:63:15:23:8B:5C:A4:4D:3F
Certificate issuer: /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial: 018CC72742B607286E943B234452E605616D
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/98mtNwI3M-wfm5_0YxUji1ykTT8.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 193.5.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:42:b6:07:28:6e:94:3b:23:44:52:e6:05:61:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7c9ad37023733ec1f9b9ff46315238b5ca44d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:0b:a2:7e:95:7f:2c:c4:01:0e:8d:75:68:
f0:f8:4b:ca:3c:fa:5f:b4:fb:c0:48:d2:18:2d:49:
42:7f:c3:dd:2e:db:6c:43:44:fe:c5:73:f6:57:c3:
17:c3:3b:e4:12:0f:47:fe:a9:06:fe:af:0b:bb:19:
f2:7c:a7:22:c1:1e:96:81:1d:59:fc:03:2f:03:81:
7c:70:45:4c:02:b8:f9:fe:ee:77:e0:6e:cf:ad:9e:
72:17:52:a2:16:59:08:82:a1:47:45:e5:4f:1d:53:
3d:2f:c4:f7:b7:23:69:fe:79:10:6c:74:cc:a5:4c:
c5:43:7c:0c:f7:70:d0:e3:5b:34:ca:d3:95:9a:71:
3e:8c:f4:a5:7b:f0:fb:82:31:20:a2:bf:8f:29:6a:
48:b7:fa:62:9d:75:7f:64:01:39:58:f7:69:22:0b:
81:33:48:36:07:f4:c0:86:4f:bc:fc:d0:c6:bb:bd:
40:9c:90:bc:02:79:0f:de:5f:77:07:8a:67:40:61:
c0:d2:8e:f3:b0:1a:67:eb:4c:d7:6e:a1:55:39:57:
3b:9a:67:32:38:ea:ce:d0:f0:1b:06:b5:e6:33:94:
6c:f4:df:7f:ab:fb:8c:14:d0:0a:e7:82:c7:b6:42:
98:b3:a6:47:a7:c4:b5:0c:aa:0a:07:54:06:84:3b:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C9:AD:37:02:37:33:EC:1F:9B:9F:F4:63:15:23:8B:5C:A4:4D:3F
X509v3 Authority Key Identifier:
keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/98mtNwI3M-wfm5_0YxUji1ykTT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:84:6a:77:91:8d:62:1d:08:0c:9a:4a:d4:0b:90:15:19:7e:
7c:cf:cb:b5:30:0e:c8:3d:09:9b:d0:fc:a6:e2:e8:32:b3:32:
3d:b2:3f:82:ee:71:d3:1f:9a:b7:83:84:58:8d:f9:47:32:0c:
67:2b:de:17:35:3a:c9:32:99:ec:35:6d:44:2d:d2:58:4d:5b:
1e:17:e4:cd:84:9e:62:d7:28:83:ee:e2:07:5d:ae:67:ad:45:
76:07:5a:dd:1e:24:61:da:52:d0:3e:20:4c:74:4c:ab:2c:76:
04:7d:97:a7:3b:6c:f4:dc:94:73:04:48:25:21:a7:10:8a:4c:
dc:df:13:c8:61:e5:f3:ff:b9:c5:38:c4:40:f1:e6:4c:67:e8:
2d:16:d6:f7:cf:c4:6e:5d:eb:47:37:50:63:f9:31:1d:6f:e5:
94:17:63:6d:c3:3a:da:e4:06:b7:3b:fb:f1:c4:3b:3d:59:8a:
21:d4:76:76:fc:fc:16:6a:3c:63:2d:b0:13:7b:52:cf:62:d1:
66:3b:17:7f:e3:34:ea:4f:16:0c:39:b0:57:df:57:1e:ae:db:
bb:2d:9c:f3:62:94:33:e8:10:bf:b0:04:c2:98:e4:33:85:7c:
df:18:63:d5:14:10:93:d8:66:85:d8:a6:46:ef:7f:29:e6:07:
73:21:22:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:27:37 2024 by rpki-client on console-ams.rpki-client.org