Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/it77y4ILnJQh3V6XErVsvSMYWQ0.roa
File: it77y4ILnJQh3V6XErVsvSMYWQ0.roa (raw, json)
Hash identifier: tPW+nshvAGhErHDS1u8ALntcpYqzm9kEI72lUF3WHU0=
Subject key identifier: 8A:DE:FB:CB:82:0B:9C:94:21:DD:5E:97:12:B5:6C:BD:23:18:59:0D
Certificate issuer: /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial: 018CC3B6936927273E70D92FF7AB9F24E514
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/it77y4ILnJQh3V6XErVsvSMYWQ0.roa
Signing time: Mon 01 Jan 2024 06:29:31 +0000
ROA not before: Mon 01 Jan 2024 06:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 193.17.53.0/24 maxlen: 24
193.203.110.0/24 maxlen: 24
193.203.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:93:69:27:27:3e:70:d9:2f:f7:ab:9f:24:e5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Validity
Not Before: Jan 1 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8adefbcb820b9c9421dd5e9712b56cbd2318590d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:3e:59:ae:de:7a:8d:d0:c7:c3:71:25:d5:
46:70:a3:0a:77:4d:0f:d3:0f:22:c5:34:44:45:f5:
22:15:44:8e:eb:62:96:b9:c6:66:09:f8:b1:f8:67:
49:65:1c:23:b5:b0:7f:26:1f:fa:af:27:6e:74:45:
8a:a6:ac:eb:5d:52:c0:54:38:de:cd:af:34:db:eb:
7f:99:d6:aa:fa:d2:a0:b1:1f:c7:ea:17:4d:ae:b8:
3d:2c:1b:16:c6:2f:d7:98:84:87:16:ce:5c:bc:db:
c3:58:03:12:cf:f0:eb:d8:21:0c:41:13:8e:d2:76:
16:85:d9:e6:9e:9e:ce:4e:a2:31:22:fd:e5:91:f1:
45:91:5c:99:24:e8:41:2b:4e:45:aa:8f:36:49:51:
f4:a6:f9:79:a8:1a:16:5e:fc:05:cf:f1:97:c9:89:
e2:63:e1:66:b4:94:fe:1f:3b:b2:47:8e:cf:06:e4:
1e:84:b3:c8:43:c4:5f:0c:4c:47:e3:9e:1e:9e:75:
d2:d8:b8:54:93:a2:4e:0e:b6:30:d4:84:f1:fb:0c:
a6:53:17:22:42:a4:be:ae:9e:f2:4e:bf:bf:34:7b:
82:ba:46:b2:01:cf:fa:d0:15:51:ac:af:8c:a1:52:
48:5b:38:7d:31:11:d2:c0:d2:b4:10:d6:88:c7:71:
4b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DE:FB:CB:82:0B:9C:94:21:DD:5E:97:12:B5:6C:BD:23:18:59:0D
X509v3 Authority Key Identifier:
keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/it77y4ILnJQh3V6XErVsvSMYWQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.53.0/24
193.203.24.0/24
193.203.110.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:0b:44:e7:03:5a:1c:93:b1:7a:dc:c6:01:46:4b:9f:b5:3a:
60:57:a3:f5:e9:bf:01:31:7c:a2:4c:d3:9e:6e:94:3d:59:ce:
d3:16:c1:4f:5d:7d:12:28:7f:93:6e:86:59:f7:1a:d6:33:4f:
5c:87:2f:b9:69:8e:39:c4:d5:00:f8:71:85:0e:de:b3:ae:88:
67:19:69:7a:f2:a3:92:ef:f1:17:7f:cd:1f:4f:8e:cc:65:e0:
30:ec:b0:05:37:94:11:f4:46:cb:c7:e3:40:3e:06:ae:7e:31:
fa:f9:36:ab:f8:e0:66:27:fe:8f:62:cc:45:aa:b0:9b:c6:24:
d0:bd:b8:5a:44:ba:f6:15:89:32:25:93:cc:c7:76:47:61:9a:
fe:ec:06:7a:1c:84:79:59:14:d8:ac:1d:8d:78:90:4e:f7:d0:
88:b5:c7:81:70:08:89:83:8b:56:e6:ee:0b:51:58:df:ba:c2:
ed:1b:27:44:3c:9c:ca:c0:84:53:65:58:b6:e7:00:f7:b4:3b:
02:6e:e7:bf:aa:fa:36:3d:81:6b:47:52:96:61:49:16:f3:d3:
56:f3:a8:75:14:ba:32:12:82:0b:39:8f:5b:9f:42:c2:d1:bf:
55:bb:a4:a4:2f:7a:84:25:9e:ca:d8:4f:1b:f7:16:0f:2b:a0:
7a:eb:ca:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:34:44 2024 by rpki-client on console-ams.rpki-client.org