Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/9hRDtFQ8Y3OE1bz6_lRKhx2uFDQ.roa
File: 9hRDtFQ8Y3OE1bz6_lRKhx2uFDQ.roa (raw, json)
Hash identifier: 6UZE8i2hz7REkmTSDb52zPlZFIU1H8LzOd+Elu20OII=
Subject key identifier: F6:14:43:B4:54:3C:63:73:84:D5:BC:FA:FE:54:4A:87:1D:AE:14:34
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 018CC56E3CBC5C0738C664F468192215FD24
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/9hRDtFQ8Y3OE1bz6_lRKhx2uFDQ.roa
Signing time: Mon 01 Jan 2024 14:29:45 +0000
ROA not before: Mon 01 Jan 2024 14:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43396
IP address blocks: 193.143.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3c:bc:5c:07:38:c6:64:f4:68:19:22:15:fd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jan 1 14:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f61443b4543c637384d5bcfafe544a871dae1434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:22:ee:df:3b:d4:5d:43:34:8e:bb:6c:b0:
cf:d4:ef:37:4e:6c:13:6d:50:fe:67:6d:a2:2f:0e:
5b:96:2b:c0:c1:aa:fe:cb:29:2f:78:48:92:e9:46:
29:b6:86:a7:c3:d5:d4:bd:12:e2:c7:7e:f1:aa:83:
4f:13:14:9f:94:c5:71:0e:ae:71:54:e3:65:a7:bb:
4c:51:81:6d:65:43:60:29:b5:8b:b6:26:9b:ba:1a:
37:1c:18:ba:6d:eb:be:21:c2:17:b2:d8:35:3b:aa:
cb:59:df:74:26:79:e4:39:71:6a:e6:c5:87:b6:ba:
af:2d:b8:f5:e4:5a:19:d0:33:29:59:fb:dc:f7:86:
a7:68:15:0f:13:fa:95:df:24:6b:64:55:a6:1d:7c:
b2:d3:c8:23:7f:f9:62:23:aa:24:02:7c:72:93:f9:
42:26:ed:16:3a:eb:78:91:f9:0e:e8:4c:3f:72:7e:
70:79:bb:42:75:26:95:1a:9e:bc:73:f8:4f:68:60:
1a:71:cb:6a:a3:48:5d:50:17:80:c4:c6:be:ea:c1:
18:fc:6b:f5:99:e1:40:3a:1e:70:b3:ba:a7:a7:27:
03:8b:86:e1:88:c3:2a:65:ce:1d:42:f0:08:c8:b2:
a5:8e:58:c9:76:4a:38:9b:43:0b:40:36:67:be:00:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:14:43:B4:54:3C:63:73:84:D5:BC:FA:FE:54:4A:87:1D:AE:14:34
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/9hRDtFQ8Y3OE1bz6_lRKhx2uFDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.119.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b8:9a:07:de:f5:5c:fe:a9:d4:b2:7a:ba:46:db:ca:27:07:
6c:ac:36:25:03:18:83:7c:ff:f4:7a:9e:e8:78:0c:08:65:36:
0c:d1:05:59:34:84:dd:e0:bc:5c:51:eb:c6:f2:d9:43:29:02:
2d:00:ef:ab:09:c8:04:c2:ac:79:10:94:15:94:bb:12:e4:35:
a3:a5:02:62:17:e3:f4:0c:64:b5:e3:2e:21:a1:7e:91:ee:67:
47:83:b0:ee:a7:bf:bc:37:db:18:72:15:57:4c:a3:b7:65:b9:
c5:cb:9b:00:92:ff:4c:f1:56:b0:ce:48:46:8d:8d:6f:59:b0:
9e:c3:db:fb:50:34:a7:17:5f:38:d2:34:3a:b9:82:1e:e4:3a:
c9:63:a2:d0:78:3a:74:aa:b7:9e:71:81:29:32:e5:79:90:36:
0a:0d:7b:0a:58:12:aa:fe:64:e2:e6:ce:30:e9:c9:a2:72:d0:
c9:39:5c:0c:75:e7:23:57:67:9f:4c:3c:05:3a:3e:45:77:63:
7e:10:ae:44:a6:ca:51:78:3b:0f:92:65:73:5a:af:7f:af:9e:
1f:6a:b5:a8:de:9d:df:ba:ed:ee:b7:98:69:62:f2:64:08:41:
ff:8e:88:c9:62:6e:02:df:3e:ec:96:8e:00:90:a7:32:24:ea:
2d:24:d2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:59:44 2024 by rpki-client on console-ams.rpki-client.org