Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/IUyBMkTl3BQPVdmmQF5scS70jTE.roa
File: IUyBMkTl3BQPVdmmQF5scS70jTE.roa (raw, json)
Hash identifier: xsmNPC52fE+UNLDRmVFPVUrtv+GSYBUMf/bIbjXW1nU=
Subject key identifier: 21:4C:81:32:44:E5:DC:14:0F:55:D9:A6:40:5E:6C:71:2E:F4:8D:31
Certificate issuer: /CN=26f55db66c509a9c0a6dfeb023770d5b2ac860b9
Certificate serial: 01905E333ABC1A819FF34CB53151CCFD6151
Authority key identifier: 26:F5:5D:B6:6C:50:9A:9C:0A:6D:FE:B0:23:77:0D:5B:2A:C8:60:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvVdtmxQmpwKbf6wI3cNWyrIYLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/IUyBMkTl3BQPVdmmQF5scS70jTE.roa
Signing time: Fri 28 Jun 2024 09:35:33 +0000
ROA not before: Fri 28 Jun 2024 09:35:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48753
IP address blocks: 193.84.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/JvVdtmxQmpwKbf6wI3cNWyrIYLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/JvVdtmxQmpwKbf6wI3cNWyrIYLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvVdtmxQmpwKbf6wI3cNWyrIYLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:33:3a:bc:1a:81:9f:f3:4c:b5:31:51:cc:fd:61:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f55db66c509a9c0a6dfeb023770d5b2ac860b9
Validity
Not Before: Jun 28 09:35:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=214c813244e5dc140f55d9a6405e6c712ef48d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:2e:93:0a:39:0d:a3:27:27:68:28:e9:dd:
27:d1:cf:5d:39:99:1c:1e:32:3d:d2:ee:53:90:21:
ff:2d:2d:61:b4:5a:e2:03:54:38:2b:f3:6c:07:1a:
5b:2f:b8:d4:a3:c3:dd:4f:5e:26:c7:49:80:e3:31:
bd:98:a1:75:ae:a9:39:75:c6:c1:b3:6b:21:b6:00:
92:03:8f:75:50:78:03:5b:c0:12:e7:ba:e9:a7:01:
e8:9d:aa:88:a2:bd:02:e1:7c:64:2c:65:a4:ed:51:
f7:db:2e:23:8d:30:68:26:1f:94:ea:9c:c4:7f:64:
ff:af:24:15:08:e2:a1:db:9c:96:e4:30:01:bd:fd:
da:7b:ab:f4:b0:1b:52:a9:e8:3c:7a:3c:27:ad:18:
bb:4e:9d:03:a4:1d:02:b2:ec:1f:50:86:0d:dd:56:
4a:dd:30:89:70:01:18:6f:7f:e7:df:ad:d4:db:77:
27:4c:8b:4b:6c:cc:97:07:de:a7:cf:0b:ac:88:41:
67:ae:3c:63:ea:71:1a:71:28:6d:1e:23:61:6f:34:
ec:15:5c:30:d1:5b:f1:75:a9:09:21:b4:b4:92:93:
eb:b3:97:52:9b:f8:b5:20:52:6a:c5:07:06:63:db:
06:17:3b:fc:df:71:96:fc:ec:3f:32:54:08:ee:1b:
3f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:81:32:44:E5:DC:14:0F:55:D9:A6:40:5E:6C:71:2E:F4:8D:31
X509v3 Authority Key Identifier:
keyid:26:F5:5D:B6:6C:50:9A:9C:0A:6D:FE:B0:23:77:0D:5B:2A:C8:60:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvVdtmxQmpwKbf6wI3cNWyrIYLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/IUyBMkTl3BQPVdmmQF5scS70jTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/JvVdtmxQmpwKbf6wI3cNWyrIYLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.71.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:56:c2:2d:ab:ac:bd:e1:56:29:28:de:98:9c:e7:69:b4:55:
db:86:a0:02:7c:af:4d:58:df:82:38:52:1b:e1:4b:a3:2e:88:
fb:6d:67:a4:21:ed:8b:fa:9c:2a:90:9e:b9:24:01:19:79:20:
9c:b3:ca:4c:1e:43:97:a5:fc:43:88:40:59:56:8d:32:16:dc:
5a:c0:53:4b:c3:4a:5d:e4:98:d4:b2:24:e5:7e:4c:f6:08:1d:
db:8e:08:33:44:d3:6b:ce:ba:3d:66:f5:f3:79:e1:db:42:f5:
cc:60:62:38:df:b2:2a:f3:b6:b2:e3:fb:22:5a:73:0b:4c:2b:
f3:15:79:20:d2:ba:52:a9:de:3e:66:51:ba:e8:fc:08:82:39:
2a:3c:2b:59:11:ea:1a:0a:57:33:5f:ff:f4:03:fc:ec:0c:3a:
31:53:2d:ee:b1:86:62:6e:36:92:cd:d1:4a:e4:d5:b7:d4:28:
35:50:b0:10:42:8f:23:78:91:f0:b2:88:0e:be:8f:cc:26:16:
e3:81:a3:e1:25:a5:23:5d:8f:e2:3f:95:50:90:73:aa:a8:04:
ae:9b:4c:24:3c:7b:d3:1a:d0:6a:de:b2:85:06:ac:71:c1:8f:
01:1b:83:9f:f1:aa:b0:3f:2a:13:b5:22:10:1a:56:31:b4:94:
48:43:c9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:30:53 2024 by rpki-client on console-fra.rpki-client.org