Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/1-1b9z8DT3daR0eMRlTELlMk-Whk.roa
File: 1-1b9z8DT3daR0eMRlTELlMk-Whk.roa (raw, json)
Hash identifier: jVKcJRYecAThFUH51GOiYId6xTZNwLswxWG7jKLOQ/c=
Subject key identifier: FB:56:FD:CF:C0:D3:DD:D6:91:D1:E3:11:95:31:0B:94:C9:3E:5A:19
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 018CC26D7762506687825FF5DB9CC8EFA4EB
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/1-1b9z8DT3daR0eMRlTELlMk-Whk.roa
Signing time: Mon 01 Jan 2024 00:30:02 +0000
ROA not before: Mon 01 Jan 2024 00:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51364
IP address blocks: 193.142.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:77:62:50:66:87:82:5f:f5:db:9c:c8:ef:a4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Jan 1 00:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb56fdcfc0d3ddd691d1e31195310b94c93e5a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:17:6c:ac:dc:a8:d4:8e:b6:49:35:4f:d9:
29:e9:e9:c1:5c:13:28:e0:1e:71:0a:3a:bc:e7:1b:
d7:5d:91:74:06:de:64:c4:57:e0:02:e3:b9:89:b3:
b6:3c:dd:4f:d8:0d:77:d4:5f:95:65:df:06:d4:26:
62:6e:b9:99:69:8a:3c:20:27:84:b6:ca:88:df:e9:
b6:4c:ef:20:81:a9:3f:e9:60:3f:95:14:74:d2:20:
83:8e:ed:06:62:8f:b7:f6:1b:54:f6:b7:16:63:cf:
b9:a8:7a:1e:00:dc:a3:a7:59:07:96:77:e2:72:0a:
d5:e0:e2:93:a6:67:d1:44:bd:70:4b:cb:4f:1b:50:
28:e8:95:bd:1c:40:3d:85:08:66:ea:8a:94:cc:a5:
15:18:4c:40:c9:ed:e0:f0:41:9e:b2:0b:8c:8e:e3:
92:4c:37:77:22:bd:78:f3:ed:6f:22:8e:7a:59:18:
73:26:3f:55:7e:92:e7:cf:b1:d6:83:d4:8e:60:f1:
87:71:47:b7:e9:e6:cb:a0:62:04:50:2c:3b:d8:b8:
ed:21:28:1d:3d:bf:71:10:d9:da:12:a1:c3:8e:1b:
c8:13:96:9d:c2:ec:e7:fa:63:c7:73:6a:f3:b1:f4:
cf:06:2b:f3:50:c8:b0:bc:ce:24:cc:f9:87:bf:43:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:56:FD:CF:C0:D3:DD:D6:91:D1:E3:11:95:31:0B:94:C9:3E:5A:19
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/1-1b9z8DT3daR0eMRlTELlMk-Whk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.127.0/24
Signature Algorithm: sha256WithRSAEncryption
58:cf:87:c2:4b:53:d2:d2:88:12:0f:fc:36:58:c7:65:34:3b:
41:d7:b9:e9:8c:27:f8:c3:f6:b4:ba:f5:6e:1c:68:36:eb:db:
76:3f:9c:ff:e3:78:2c:9a:17:2c:d8:f6:04:f4:74:06:9b:4d:
bd:06:29:99:18:11:9e:e9:58:e5:95:22:3a:b6:80:55:9a:e2:
79:d5:83:cb:ec:fc:e8:80:0b:30:fb:37:0d:96:50:79:66:d9:
02:72:e3:e3:11:2e:ef:4e:2e:c9:a0:b9:82:60:65:c6:e0:e8:
1b:51:3d:9e:fc:a2:96:d1:cf:ca:66:db:7c:0c:bb:00:d9:03:
da:22:46:42:ac:84:00:7d:fe:55:48:7c:18:41:64:09:5f:df:
43:b9:37:38:96:bb:50:82:1e:03:0e:18:fe:40:aa:c8:52:a8:
05:d4:a5:3d:00:e5:df:31:56:18:41:db:b0:27:18:a0:1f:a5:
b8:03:73:f2:c1:44:ed:54:15:90:81:6c:96:12:2d:53:fe:a6:
fa:66:3b:9b:be:ff:17:08:f2:c1:fb:32:2b:8e:24:90:bd:f5:
46:61:11:b2:0a:89:a7:35:83:d4:3e:30:14:92:3e:7b:72:c5:
92:6b:07:1e:4c:3a:6d:6c:9b:dd:d7:8c:e6:ae:a1:04:06:44:
67:1b:8d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:56:36 2024 by rpki-client on console-ams.rpki-client.org