Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w4_73Gr5w9IHJJ4zbHeZLKDU5P4.roa
File: w4_73Gr5w9IHJJ4zbHeZLKDU5P4.roa (raw, json)
Hash identifier: DfMZOLosBuHX2JjScwoeDGx381fM/SBMyCwzy3A7eEw=
Subject key identifier: C3:8F:FB:DC:6A:F9:C3:D2:07:24:9E:33:6C:77:99:2C:A0:D4:E4:FE
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802F76A6C1B076B8572490D07E28DDE
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w4_73Gr5w9IHJJ4zbHeZLKDU5P4.roa
Signing time: Tue 02 Jan 2024 02:31:26 +0000
ROA not before: Tue 02 Jan 2024 02:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58653
IP address blocks: 193.235.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f7:6a:6c:1b:07:6b:85:72:49:0d:07:e2:8d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c38ffbdc6af9c3d207249e336c77992ca0d4e4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:37:14:c1:6b:0c:9f:fb:75:96:82:15:0a:
9b:43:3b:68:6d:f6:d5:be:7b:b1:34:20:d5:47:17:
87:15:4b:01:b4:1b:a4:98:78:f5:57:a8:9c:87:83:
60:03:2c:a6:b2:ae:64:7d:0c:08:7f:51:86:41:fe:
11:07:2b:df:14:d2:db:21:67:98:fa:99:84:5d:d7:
4e:e2:3f:e2:73:73:73:c2:a9:a9:f6:36:77:42:03:
76:00:76:25:06:97:ad:3d:45:08:cb:f3:9c:a4:20:
64:3b:80:01:8c:03:ee:05:1e:66:f5:1d:f4:66:74:
55:d8:6c:8a:e6:aa:db:c7:d0:fa:7e:f3:e5:54:96:
5b:62:8a:a4:f6:09:fa:72:f6:ec:d5:8f:87:d5:aa:
e0:9c:b3:da:d5:4c:58:f1:b8:46:24:2c:9f:3e:63:
54:5e:8d:c9:5d:d7:c6:5d:63:56:21:30:d4:71:e2:
47:7a:0c:11:3c:ce:86:af:ac:63:98:c5:67:ff:95:
f0:61:e3:74:d4:ae:07:fd:7b:d5:6f:72:bb:91:09:
35:59:b0:12:1b:f9:23:2e:09:f3:9e:47:fa:d1:64:
95:8c:b7:9d:41:ca:64:4b:e0:c2:dd:35:f1:97:48:
f6:4c:b4:0b:ed:d4:69:05:68:cb:eb:cc:50:b4:0d:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8F:FB:DC:6A:F9:C3:D2:07:24:9E:33:6C:77:99:2C:A0:D4:E4:FE
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w4_73Gr5w9IHJJ4zbHeZLKDU5P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f3:ae:1e:dd:2a:40:a4:e1:73:27:e7:de:e6:e6:8b:3f:2f:
2e:c9:9d:6d:d8:8f:d9:a8:b2:6a:46:04:a9:f0:33:8e:5b:63:
c9:89:cd:11:26:75:fa:a5:b6:5f:ff:25:65:4c:5c:21:b3:53:
0d:17:5c:ac:ff:28:18:87:0c:40:d0:a8:d6:5f:45:f0:ea:8e:
7c:6e:b4:68:47:44:d0:15:5b:7d:85:11:b8:de:9a:36:e3:f9:
7a:38:8a:2b:34:94:fa:68:f6:50:1c:e1:28:c2:79:46:99:9d:
9f:0e:63:ec:6d:83:4b:e2:88:07:86:4e:26:f5:16:d7:26:bc:
e9:67:32:60:7f:1d:04:69:16:ca:9a:ce:d0:d3:fb:7e:af:99:
77:2e:70:42:74:e8:39:ca:25:2e:45:39:70:d5:0f:d7:13:1c:
fd:02:05:37:71:60:db:73:06:88:01:10:d8:b5:b9:4a:f3:2a:
b4:c7:eb:ea:a8:3d:f9:3b:dd:ad:e8:d9:71:ad:96:c7:28:61:
d6:16:2c:bb:05:11:aa:2d:49:70:05:30:aa:77:5f:01:4c:3f:
07:05:67:2f:69:d2:88:c5:96:10:12:d3:bb:2c:c5:21:39:89:
e2:15:e4:e0:25:41:ab:3f:cd:58:47:2d:7b:11:4c:04:fc:6a:
0f:ce:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:25:40 2024 by rpki-client on console-ams.rpki-client.org