Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/mKl3AWTjae80mbhiq_gpq5M51PY.roa
File: mKl3AWTjae80mbhiq_gpq5M51PY.roa (raw, json)
Hash identifier: GDYGvUGzhRKfpsiQH+NI4irS4GEZtLiAUePq28Cc8Ak=
Subject key identifier: 98:A9:77:01:64:E3:69:EF:34:99:B8:62:AB:F8:29:AB:93:39:D4:F6
Certificate issuer: /CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Certificate serial: 018CC6B8D7570E3F2DC5F6D4C3BC100CD2FC
Authority key identifier: 3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/mKl3AWTjae80mbhiq_gpq5M51PY.roa
Signing time: Mon 01 Jan 2024 20:30:51 +0000
ROA not before: Mon 01 Jan 2024 20:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2852
IP address blocks: 193.84.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:d7:57:0e:3f:2d:c5:f6:d4:c3:bc:10:0c:d2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Validity
Not Before: Jan 1 20:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98a9770164e369ef3499b862abf829ab9339d4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:49:d3:dd:ed:8c:1a:21:19:d5:df:37:3f:
82:30:c2:bb:9f:b7:0f:7e:14:bd:ab:70:e4:28:e8:
37:c3:e7:4f:25:f5:ae:25:64:87:13:78:61:6c:30:
ae:f5:ed:6b:3d:4d:53:dc:91:3d:19:67:21:d2:5e:
f5:c0:2e:c3:9e:9e:35:d6:b8:a8:90:87:86:8b:1b:
a8:1d:9b:0c:26:89:b3:50:55:d0:b8:73:dd:16:e5:
26:e4:20:12:e9:e7:22:91:f9:0a:c8:13:5d:4a:42:
3f:64:2c:c9:18:0d:62:87:3f:be:66:2d:c5:60:5a:
58:ba:a2:08:bf:09:08:aa:ba:b4:d4:78:6c:e8:d3:
5c:a7:29:d1:4b:b5:b8:2a:fc:e5:bd:cb:e2:c0:25:
5d:d0:ab:85:2d:a8:da:0d:2f:fe:e9:96:57:f0:0a:
49:bb:13:34:72:9d:f0:f3:61:67:40:c6:4d:6c:a8:
ac:3d:ed:37:dc:82:d1:98:ef:21:0a:bd:b3:e7:59:
fc:6b:9f:99:0e:6e:77:70:78:f5:6d:91:03:0d:d0:
1b:47:c3:e2:f9:ae:8a:07:d1:31:40:5b:71:94:03:
7c:e8:28:48:ab:41:62:6f:df:54:39:fe:33:f5:06:
87:f8:87:b5:04:a1:2d:3b:d5:d5:92:ff:8a:6e:78:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A9:77:01:64:E3:69:EF:34:99:B8:62:AB:F8:29:AB:93:39:D4:F6
X509v3 Authority Key Identifier:
keyid:3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/mKl3AWTjae80mbhiq_gpq5M51PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.160.0/20
Signature Algorithm: sha256WithRSAEncryption
04:a3:57:42:da:13:a9:51:c3:16:38:10:45:f9:41:e9:3b:af:
ff:88:54:8d:e7:63:12:d2:9f:c5:ce:c8:0d:bf:fd:89:e3:fb:
46:7c:f1:8f:47:92:5c:13:6f:d5:cc:78:34:97:86:cb:34:3a:
c2:ec:f3:d5:d9:6f:53:44:29:0d:c6:37:79:80:1b:4f:4e:1a:
f0:d1:bc:dd:43:a9:47:6b:c7:91:91:6e:79:fd:ae:e1:f7:2f:
a5:16:29:b0:7e:31:85:da:de:10:cf:e6:eb:47:c5:07:b7:71:
43:29:33:b1:68:b2:f4:95:7f:0c:13:28:6e:bd:83:c8:9b:ee:
d7:b7:e1:d2:06:4b:d4:22:3a:eb:79:30:9f:56:1d:35:28:d6:
ab:bb:a5:7d:46:e7:2a:4a:f2:51:5e:9e:a9:db:69:40:08:49:
93:26:4c:24:44:a0:c1:16:b0:ca:85:25:5b:6c:c9:d1:26:8f:
63:91:4b:10:e8:ba:1f:8b:70:45:8c:19:41:10:71:1d:fd:cc:
ab:a9:2f:e9:87:b7:ae:42:31:14:4f:0a:c3:8c:9a:14:73:c2:
3d:18:94:86:d4:5c:7a:37:3c:1a:b3:96:62:36:f1:c4:77:dc:
38:2f:c3:80:68:ce:78:46:bc:32:43:63:5c:5c:e8:34:d0:a4:
b0:e4:30:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:29:54 2024 by rpki-client on console-ams.rpki-client.org