Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/rOzu6vCcdfq32Zg3Oi-x3Bp5M6M.roa
File: rOzu6vCcdfq32Zg3Oi-x3Bp5M6M.roa (raw, json)
Hash identifier: rpHpMwLqX4C6bvXhlqKRizVrfpj51/Duzu29qbZAEhE=
Subject key identifier: AC:EC:EE:EA:F0:9C:75:FA:B7:D9:98:37:3A:2F:B1:DC:1A:79:33:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 018CC42545DE5AB4F838CA3409117CE29EC2
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/rOzu6vCcdfq32Zg3Oi-x3Bp5M6M.roa
Signing time: Mon 01 Jan 2024 08:30:26 +0000
ROA not before: Mon 01 Jan 2024 08:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53667
IP address blocks: 194.50.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 13:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:45:de:5a:b4:f8:38:ca:34:09:11:7c:e2:9e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aceceeeaf09c75fab7d998373a2fb1dc1a7933a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:80:2b:0c:3e:22:43:06:ce:e9:a5:d5:fc:
10:b4:66:06:58:bf:17:15:90:92:32:e0:53:e0:78:
cd:83:c4:c9:2f:cc:e3:a3:c0:fd:ca:f3:39:ae:ef:
bc:5c:10:61:8a:5f:73:ba:a0:e7:8c:98:43:17:bf:
d4:22:0b:f1:f6:37:ae:e7:30:cc:7d:ac:56:fc:97:
42:5f:5c:2e:1f:99:87:bd:bd:a3:ed:03:c8:4e:75:
08:d5:1e:dd:29:b9:80:9d:3c:6c:fe:f3:8e:3e:fb:
14:f5:91:5d:5f:90:02:d3:80:11:b8:44:6d:18:89:
49:d2:43:4a:89:4a:5e:ab:d7:c0:0f:6e:dc:b6:db:
4c:47:af:9f:d9:2c:c7:43:01:ef:5f:35:f3:55:00:
b5:fd:88:22:79:8f:29:c8:36:4c:b0:d0:e6:9b:66:
3b:8e:c9:14:5a:de:75:5e:de:78:b5:58:d9:64:f9:
9a:40:c5:37:ef:3f:3c:a7:94:c8:94:a0:14:78:38:
8e:ce:44:a0:ad:d5:dd:6a:58:61:44:a7:26:fd:63:
0d:cb:1a:b0:21:ca:a5:7e:9d:9d:d5:4e:a1:34:12:
21:a6:5b:17:9e:78:87:4e:9e:27:39:9b:56:3b:cd:
cf:57:a7:bf:a0:4d:1a:5a:db:7a:ab:30:47:8b:17:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EC:EE:EA:F0:9C:75:FA:B7:D9:98:37:3A:2F:B1:DC:1A:79:33:A3
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/rOzu6vCcdfq32Zg3Oi-x3Bp5M6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.197.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f8:fb:f1:9f:d4:3e:47:c1:87:ff:e3:73:ab:e9:41:d6:ee:
d4:ab:6c:87:7d:58:90:92:11:b1:0b:df:59:12:9e:9f:ab:3e:
44:44:41:72:dc:20:3d:b3:c1:11:83:ea:54:93:1f:b3:73:80:
02:2b:74:07:cb:f5:df:54:18:64:ce:01:0d:33:cf:60:39:e3:
db:ba:c4:70:99:68:9e:5a:5d:83:e6:cf:1a:9c:10:48:7e:d4:
5a:29:14:94:63:82:2d:97:71:e0:84:da:6c:74:4f:cf:29:50:
e2:63:f8:b3:b6:cc:e3:ec:69:df:cd:07:eb:2a:a8:c0:3f:3d:
0f:49:32:0e:9c:f3:af:82:cc:bd:e6:d1:d9:a2:9b:09:5a:c9:
ac:a9:45:e2:3b:23:0e:44:26:c3:1e:62:b6:38:c2:19:e6:ef:
a4:1d:b6:c5:f7:54:76:d2:1c:b7:97:f8:86:3c:37:a9:8f:b7:
a9:44:b2:ba:c1:f1:29:9e:f2:66:64:7e:a0:b8:5b:6a:78:38:
c3:ae:95:32:4d:0b:70:58:37:b4:1a:0a:cd:d6:c8:af:38:a6:
23:4b:73:29:a0:83:2c:1a:5c:f5:1c:63:59:51:24:59:3c:d8:
cb:44:4d:76:f7:0b:29:3b:e9:39:ac:34:7a:ae:58:44:d4:af:
57:58:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 00:09:15 2024 by rpki-client on console-ams.rpki-client.org