Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/0FmTnBMnuM8CqJKRzbeXAkp0I4o.roa
File: 0FmTnBMnuM8CqJKRzbeXAkp0I4o.roa (raw, json)
Hash identifier: i629uKssaNv3QUt1y581X9Lg1jqct2mganKXsSuOIGA=
Subject key identifier: D0:59:93:9C:13:27:B8:CF:02:A8:92:91:CD:B7:97:02:4A:74:23:8A
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 018CCA2BDD741B3491564065DD5108FCCE08
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/0FmTnBMnuM8CqJKRzbeXAkp0I4o.roa
Signing time: Tue 02 Jan 2024 12:35:21 +0000
ROA not before: Tue 02 Jan 2024 12:35:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35308
IP address blocks: 193.151.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:dd:74:1b:34:91:56:40:65:dd:51:08:fc:ce:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 2 12:35:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d059939c1327b8cf02a89291cdb797024a74238a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:f7:06:ed:84:c7:be:7b:41:72:28:f4:51:
62:06:47:c4:7d:a7:91:71:fa:41:97:57:6a:79:45:
d2:47:f0:4f:83:ef:82:98:3b:c7:a1:91:c6:53:97:
e1:40:c0:77:92:e3:bf:a5:80:c5:ae:c9:bd:23:11:
57:80:7d:af:84:25:c3:0b:59:e6:ca:5c:e1:ce:19:
c4:dd:a9:bb:33:44:42:51:9f:e4:2e:e2:56:35:7a:
80:06:a9:3b:85:97:fa:2a:43:3d:0c:f8:85:55:d4:
cf:ad:9a:49:11:47:92:07:ff:73:8d:61:4f:0b:31:
54:d0:d8:dd:fc:4f:8b:a6:c6:1d:7c:a6:0a:14:70:
da:08:12:dc:d4:2e:14:c8:57:67:40:0c:9e:64:b4:
be:f7:d5:fc:80:48:50:93:68:63:65:fd:14:1b:ba:
d8:e7:0d:02:f1:d2:80:29:dd:4d:79:4a:52:a4:7a:
84:f0:dd:09:2f:fc:f9:07:de:de:bc:d3:2a:82:e5:
a1:1e:0a:6d:fd:6c:7d:d5:4a:46:48:bd:a3:51:38:
8b:68:b9:35:8c:69:a2:6d:42:99:0a:cc:7f:53:28:
cc:96:da:c8:09:4f:f2:34:96:17:ab:cb:ea:5d:d8:
59:1f:4d:9b:05:bb:80:3a:cb:04:44:03:88:a1:0a:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:59:93:9C:13:27:B8:CF:02:A8:92:91:CD:B7:97:02:4A:74:23:8A
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/0FmTnBMnuM8CqJKRzbeXAkp0I4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.167.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c5:69:52:34:3a:df:24:b2:47:58:40:f8:03:ae:e9:32:1a:
8c:2d:32:1a:ba:4b:ed:66:a2:2c:20:25:56:7c:d9:50:b4:e6:
05:86:20:ad:7d:e1:7d:1d:cd:7b:b7:9c:ff:8c:bd:b9:26:47:
05:92:d5:ac:fb:24:28:68:b1:23:0b:a5:7f:96:a8:a5:9e:a2:
f3:0f:5c:ea:6f:8b:5f:f6:cd:e4:96:de:18:b8:d8:7c:05:d8:
b8:03:3e:ba:6c:72:e2:ba:b0:ee:35:fb:92:2e:5f:a2:3e:2e:
f2:3d:b1:6d:1f:43:66:81:f0:50:4d:27:37:f1:66:cd:2e:e1:
fa:d9:4c:f6:2d:d6:4d:00:ed:7a:e1:8c:4d:0d:53:ea:b5:ed:
f9:d5:b3:f0:22:21:32:06:90:0b:5d:89:76:63:27:9b:c2:1f:
bf:b0:f9:19:9e:4c:ee:3c:6f:d4:cd:73:4f:06:e4:8e:52:a6:
ba:1d:62:01:63:45:18:7f:f7:01:53:ac:ab:4e:bf:4f:48:3e:
95:ee:d1:f8:c6:6a:b0:59:c7:48:0f:ac:f3:3d:46:62:7d:9a:
38:e9:7a:c3:b8:d6:72:6d:ec:a3:95:79:9d:af:9f:e1:d6:68:
a8:59:83:45:60:67:f6:74:16:e5:7c:c3:4c:42:28:c7:7b:c9:
10:29:3a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:15:21 2024 by rpki-client on console-fra.rpki-client.org