Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/1-C13rJoh_2AG3349xoorPIufciI.roa
File: 1-C13rJoh_2AG3349xoorPIufciI.roa (raw, json)
Hash identifier: jYnBANgVl9Odqh9yLErT/DVhNquN6U8W1KyVQOLPgcU=
Subject key identifier: F8:2D:77:AC:9A:21:FF:60:06:DF:7E:3D:C6:8A:2B:3C:8B:9F:72:22
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 018CC2DB2010C08DD40FADC6158BE7B72131
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/1-C13rJoh_2AG3349xoorPIufciI.roa
Signing time: Mon 01 Jan 2024 02:29:49 +0000
ROA not before: Mon 01 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43455
IP address blocks: 193.46.82.0/24 maxlen: 24
2001:67c:1498::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:20:10:c0:8d:d4:0f:ad:c6:15:8b:e7:b7:21:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Jan 1 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f82d77ac9a21ff6006df7e3dc68a2b3c8b9f7222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:af:a4:58:aa:96:4a:a0:a6:ee:0f:ba:fb:
8f:61:4d:77:e1:79:4e:3a:09:e8:26:42:de:62:42:
f7:fd:1d:b3:b3:37:ae:a3:8a:ec:0f:c8:7b:7d:02:
8e:bc:9c:26:74:52:99:0e:b6:e3:87:2f:5a:91:72:
03:0a:a0:ea:45:b4:a4:09:32:b9:eb:1c:a1:b9:a9:
1f:35:96:2c:40:a0:83:29:fe:5b:34:14:f1:8c:80:
a4:89:69:41:9a:e6:0b:4e:de:e4:a4:93:3a:3c:02:
4c:70:5a:0b:f8:df:24:0a:a3:7e:71:6a:1b:5e:9b:
33:ea:60:b7:a0:02:6e:35:74:95:1f:fd:dc:fb:4e:
e0:0d:d3:00:e1:e4:56:ce:5d:9e:ed:04:46:cb:37:
e6:98:80:76:84:55:5f:e4:08:26:aa:4f:56:23:e7:
86:46:eb:99:04:29:e5:29:76:d5:cd:c6:46:75:67:
a7:9e:71:5e:fe:7f:96:00:14:2f:63:79:cc:84:dc:
92:b3:e1:6a:0e:10:65:ea:25:c7:e1:30:13:11:3c:
9c:d4:ca:fe:ce:63:c9:97:a8:4a:0c:06:de:af:15:
2b:e5:cb:2f:ac:49:a9:63:aa:7d:76:9c:e2:39:82:
d4:94:ca:7c:4a:e8:48:d8:2c:fa:4c:34:8f:cb:77:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2D:77:AC:9A:21:FF:60:06:DF:7E:3D:C6:8A:2B:3C:8B:9F:72:22
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/1-C13rJoh_2AG3349xoorPIufciI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.82.0/24
IPv6:
2001:67c:1498::/48
Signature Algorithm: sha256WithRSAEncryption
85:c0:85:35:97:62:f1:8f:2d:b3:27:de:6b:59:35:14:4d:34:
8d:8d:b8:3f:c3:28:f8:ae:37:6a:c2:ee:d2:9b:77:63:da:73:
f1:61:e7:00:f5:d0:16:aa:43:6d:c4:1a:66:aa:92:76:42:8c:
b0:c6:cb:78:37:f8:e5:e2:5b:f7:52:f3:39:f1:c2:1c:5e:fb:
3c:8e:ef:51:13:22:4b:d2:6b:08:29:ce:e4:22:96:24:93:ee:
b5:f3:cc:de:15:ab:7a:ca:92:60:c0:f8:48:d7:59:98:87:3b:
3b:b1:34:f5:7e:93:64:9b:b9:49:01:ff:8d:f1:bc:07:bb:db:
9c:e6:79:09:1a:d0:0b:eb:a6:e3:98:f6:cd:98:c9:26:b0:13:
7f:c9:6e:03:14:37:cb:bb:cc:35:e3:92:9f:4c:8f:18:2e:ea:
a8:17:d7:80:31:03:9d:f6:75:f3:8c:65:b7:9b:d3:8d:95:20:
a4:a4:da:fd:6c:64:67:27:29:87:32:8d:3e:de:9c:f1:1d:ec:
6f:62:b0:6f:59:de:09:16:fa:1b:f4:f5:5d:ce:16:f6:e4:15:
2a:a3:bb:62:13:c1:c5:b7:2f:b1:01:47:fa:1a:d9:49:4a:cb:
d3:0d:2c:c0:35:27:de:4d:7b:13:b0:63:dd:24:01:1c:26:f9:
d5:5b:08:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:01:07 2024 by rpki-client on console-ams.rpki-client.org