Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/V0bC84UZrL-KrmpAYM6t-as_lDc.roa
File: V0bC84UZrL-KrmpAYM6t-as_lDc.roa (raw, json)
Hash identifier: LXF7XW5xRIH8rZd2i3wKcz+h1I/cI2StjwZQhji5JyA=
Subject key identifier: 57:46:C2:F3:85:19:AC:BF:8A:AE:6A:40:60:CE:AD:F9:AB:3F:94:37
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 018CC94D35E54FA211C0FD76D50930CE632E
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/V0bC84UZrL-KrmpAYM6t-as_lDc.roa
Signing time: Tue 02 Jan 2024 08:32:09 +0000
ROA not before: Tue 02 Jan 2024 08:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209111
IP address blocks: 193.92.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:35:e5:4f:a2:11:c0:fd:76:d5:09:30:ce:63:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 2 08:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5746c2f38519acbf8aae6a4060ceadf9ab3f9437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:ad:6b:d9:23:11:34:bb:e6:27:3e:fd:69:
0e:2a:06:f1:5d:91:db:0e:a8:19:a2:d8:68:07:c2:
0e:d6:1d:1e:80:6a:43:e0:c3:a3:e2:1d:04:22:b3:
9f:7e:9e:ea:af:a7:0b:18:bb:a4:4e:c9:78:e8:fd:
1d:a9:fd:eb:c6:d6:7c:dc:0d:50:b8:b9:4c:e9:1c:
39:85:ae:c7:00:b3:ad:96:90:77:39:4a:61:50:44:
0d:39:f2:7c:e4:e2:0e:b7:85:f0:d5:80:33:1b:68:
97:34:91:98:bd:8d:02:93:8a:1d:45:f5:c7:f9:11:
a3:b8:40:c2:64:07:46:f2:cd:ed:98:da:22:73:7d:
d2:fc:a9:a1:ca:29:92:1b:b7:a8:92:de:87:af:d0:
10:0c:f0:91:c6:93:64:df:fb:f3:d0:18:00:cf:19:
31:34:6c:63:58:10:2d:23:9b:af:df:46:e3:89:c3:
d3:1a:7b:00:b1:66:1d:a6:3e:0b:f4:78:78:59:01:
3d:43:9d:15:3e:df:d6:26:54:89:96:b9:e7:f2:78:
6d:49:0d:61:b9:9f:6c:65:59:08:12:5a:d9:09:9a:
36:78:f6:42:c0:a9:5a:a5:22:12:b2:b1:e6:9f:02:
62:1f:1f:7b:22:b2:08:94:cd:5a:a8:99:4f:3b:c0:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:46:C2:F3:85:19:AC:BF:8A:AE:6A:40:60:CE:AD:F9:AB:3F:94:37
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/V0bC84UZrL-KrmpAYM6t-as_lDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.92.5.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f6:80:2b:91:87:84:a1:7f:22:8f:b0:58:87:09:be:96:87:
15:11:ba:0b:f1:7d:78:2f:de:e7:b5:68:b9:d3:e4:78:bf:ae:
dd:25:87:0c:c4:dd:4f:b0:85:59:ea:61:21:b1:e3:63:97:ed:
52:62:8d:14:10:c0:c7:6d:2d:37:fb:44:14:fb:d1:10:d3:73:
45:96:a6:c7:1e:96:3b:d5:10:03:f0:cd:ba:e8:52:5a:94:77:
2a:be:fc:11:b2:f6:ee:65:de:96:1b:f3:ac:8e:ac:a4:57:4f:
51:3a:26:61:55:e1:0f:ae:52:dc:11:32:cc:92:cb:b8:02:09:
37:d2:a0:66:71:c3:43:97:63:b2:50:7a:b3:08:fa:23:6f:f9:
02:1b:41:49:1a:f8:18:e5:c0:b8:bd:63:a4:bc:6c:04:b2:f5:
63:9f:d7:e4:dc:e3:6b:e2:d8:9d:6b:af:c0:28:c8:3e:2f:0f:
db:dd:3e:79:47:35:0d:f8:39:13:0f:a7:00:d2:c3:31:a7:d7:
f4:91:28:5d:f0:6c:95:20:3b:3e:5e:5e:32:bb:59:17:4a:a3:
25:e2:dd:50:70:b8:ab:7d:92:35:e1:ad:0c:33:c2:a8:1c:b1:
55:b1:8c:5a:ce:ad:10:0b:b4:aa:4c:a4:5f:27:b1:d6:0c:df:
53:16:a1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:56:39 2024 by rpki-client on console-ams.rpki-client.org