Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/3UAwUasb8GUCAdSlEJM0oxgfIrA.roa
File: 3UAwUasb8GUCAdSlEJM0oxgfIrA.roa (raw, json)
Hash identifier: prx1pfbTiHL+EdzEk/fdrIiejhT5sgJytsEgTzQQSvU=
Subject key identifier: DD:40:30:51:AB:1B:F0:65:02:01:D4:A5:10:93:34:A3:18:1F:22:B0
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 018CC26D56E867332B6EAA514E2C6BD62E0A
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/3UAwUasb8GUCAdSlEJM0oxgfIrA.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212707
IP address blocks: 193.163.47.0/24 maxlen: 24
2a10:5bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:56:e8:67:33:2b:6e:aa:51:4e:2c:6b:d6:2e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd403051ab1bf0650201d4a5109334a3181f22b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:cb:b4:7d:69:a5:29:12:68:70:6f:f8:8e:
ef:35:3e:14:03:11:1c:35:db:96:0c:e4:b8:0e:f6:
bf:3a:d1:bd:92:d9:60:54:3a:3a:37:f4:d5:26:cc:
a3:fa:1b:81:c5:02:5d:18:35:46:54:82:a2:91:11:
01:e6:67:90:74:2a:08:1e:d6:d1:06:22:dd:46:e9:
9b:5c:ca:58:68:66:d7:36:ff:a2:83:29:fb:c3:30:
a0:2e:6e:0e:30:e9:07:e0:81:09:fc:39:d1:97:a0:
54:cb:2d:55:5f:9f:94:25:d1:62:97:0a:5f:86:e1:
e6:a7:b7:66:99:f4:a2:03:b7:8c:fd:f9:f7:4f:a6:
a0:f8:8e:bd:50:d0:5c:f1:51:b9:0a:33:a5:77:c1:
6c:a9:7e:6d:27:92:0c:77:21:3c:07:94:10:c9:3a:
99:7c:e1:1b:60:45:82:64:e6:51:52:32:d0:76:ae:
50:71:bd:5b:06:d5:49:a2:3d:66:90:9e:a0:7a:6a:
95:15:dc:04:b4:ca:3d:28:12:bd:53:f5:e7:ff:5d:
eb:79:f2:19:e6:63:29:15:4f:9f:e5:30:a2:ae:8a:
10:e2:a1:86:dd:25:a5:6d:eb:5d:f5:62:48:b3:fa:
c2:ff:c9:01:aa:bb:c6:7f:5b:37:f4:a0:72:b6:12:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:40:30:51:AB:1B:F0:65:02:01:D4:A5:10:93:34:A3:18:1F:22:B0
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/3UAwUasb8GUCAdSlEJM0oxgfIrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.47.0/24
IPv6:
2a10:5bc0::/29
Signature Algorithm: sha256WithRSAEncryption
43:ef:fa:20:a8:29:0d:2d:66:70:7f:ad:43:e5:ef:df:35:fe:
4e:e0:50:57:59:58:43:e9:d5:01:b2:e6:22:3c:e7:ff:95:5b:
42:cf:11:47:cb:53:7b:ad:45:a8:aa:92:51:a2:e5:5d:14:dc:
e7:9c:00:12:b4:2a:03:c9:41:b7:3b:6e:23:42:00:2d:7c:f3:
98:d1:83:2b:90:75:6d:ad:78:a3:44:f9:24:5f:36:b5:fc:6e:
2b:e7:fe:c9:4f:48:fa:13:a6:1a:5c:e1:38:07:40:d3:e7:06:
f7:4b:70:11:dd:4e:86:77:18:51:18:85:ed:64:28:ae:4b:7b:
aa:e8:c0:9a:20:84:1c:6f:de:fa:8d:df:c7:58:d3:a4:7b:2b:
d1:f4:63:7c:db:ee:ea:90:e4:ab:62:63:0a:d7:d3:a6:84:7b:
d9:2f:c3:b5:bf:27:05:64:42:be:de:ff:e3:ca:b5:dd:4e:5d:
72:03:8b:c7:20:43:1d:bb:fb:7f:16:5b:40:88:5b:cb:3a:a1:
9e:59:63:cb:3d:a5:fc:03:69:48:27:41:98:9a:e4:df:e2:dc:
ef:45:bf:a5:ce:44:8d:fd:c6:ba:45:9b:47:f9:02:a4:59:fa:
e5:c3:17:aa:cb:a2:5a:bf:43:8f:29:8d:64:26:18:8e:e8:69:
0e:1b:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:20:53 2024 by rpki-client on console-fra.rpki-client.org