Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/_0Rv1f9h8r8OwxSy1z8RY5obItQ.roa
File: _0Rv1f9h8r8OwxSy1z8RY5obItQ.roa (raw, json)
Hash identifier: AyKRjYj235bM3BLiGhnLGJ3uJwKw5q0gKqMLq0RZDkk=
Subject key identifier: FF:44:6F:D5:FF:61:F2:BF:0E:C3:14:B2:D7:3F:11:63:9A:1B:22:D4
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 018CC86F85858F662C1552F79F5B3DEBE521
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/_0Rv1f9h8r8OwxSy1z8RY5obItQ.roa
Signing time: Tue 02 Jan 2024 04:30:00 +0000
ROA not before: Tue 02 Jan 2024 04:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49559
IP address blocks: 193.57.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:85:85:8f:66:2c:15:52:f7:9f:5b:3d:eb:e5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Jan 2 04:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff446fd5ff61f2bf0ec314b2d73f11639a1b22d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:24:48:96:67:dd:ca:04:7b:29:ed:39:a4:
e8:3b:d0:5f:ab:c7:94:5c:15:72:73:34:28:d8:7f:
11:c1:86:e5:98:88:cc:c4:b1:f6:32:45:37:ad:c7:
f9:18:39:e3:87:3f:56:75:0c:d8:63:5a:14:f2:62:
8d:38:43:9a:24:5e:f2:ff:bc:89:f1:d9:af:25:a8:
e6:1e:f2:b3:2f:b3:d5:44:33:1e:3e:88:bc:ac:f1:
aa:7d:38:9b:9f:cc:51:c4:fc:a8:fe:fe:ac:60:4f:
8d:13:de:81:5c:62:6c:ce:ee:3c:0b:a9:0b:23:a1:
85:79:a3:47:a6:fb:c6:4d:7c:ec:c1:48:99:0c:e9:
e0:f9:e4:c5:94:58:06:36:b0:84:a9:fc:a7:fb:e0:
b7:11:7c:2a:1d:90:56:8e:b8:ae:12:70:50:6e:bb:
cc:88:d5:ff:97:32:bb:80:60:fc:db:8c:62:33:f5:
cf:cb:9a:2f:2e:71:a1:83:c1:77:77:b3:03:c3:11:
23:56:31:2a:f9:41:c5:e9:74:ff:4b:40:ac:f6:b9:
04:fd:b8:16:d6:58:15:73:11:30:57:a1:64:f6:91:
c7:c2:27:2a:93:74:fe:81:74:76:f9:96:98:79:a6:
76:d7:44:34:f7:29:52:f6:b3:c5:da:0d:4a:aa:c9:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:44:6F:D5:FF:61:F2:BF:0E:C3:14:B2:D7:3F:11:63:9A:1B:22:D4
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/_0Rv1f9h8r8OwxSy1z8RY5obItQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.46.0/24
Signature Algorithm: sha256WithRSAEncryption
41:cb:27:83:da:f7:aa:02:35:23:7f:8a:e7:3e:df:80:06:90:
f2:61:d4:bb:9a:89:66:18:c3:6d:d4:aa:53:76:e1:4c:2d:c2:
11:c2:6a:66:a4:11:a8:d2:68:47:91:32:e4:c0:1c:ca:29:6f:
85:0f:d3:7a:c5:58:9b:50:1d:7d:cb:ac:12:21:d9:12:df:d2:
5f:1f:5c:55:74:bf:3f:76:c8:ab:c4:07:7d:f3:89:c5:59:4a:
f3:27:86:86:ff:c7:15:60:26:9e:4c:ae:89:85:f9:ca:53:6d:
43:60:a6:de:0c:4d:7b:9c:02:69:93:27:85:b7:bb:ec:86:8a:
49:c5:ee:12:96:76:20:ed:3d:dd:96:88:e3:f5:2b:d0:b7:8c:
86:a0:32:a0:13:de:18:da:21:f8:b9:09:d3:9e:05:3e:99:93:
3c:c0:40:2d:bd:83:75:3c:fd:30:d0:33:e6:54:be:ba:ba:c7:
11:1a:35:a5:cd:77:a2:01:77:14:07:12:15:da:34:0e:27:6b:
36:a5:16:36:95:a2:2e:39:18:11:ba:02:46:97:7a:a3:7b:43:
4e:b0:fd:65:ed:34:31:74:26:d3:1e:21:fb:b1:08:f6:29:43:
60:11:8d:05:3f:ad:e3:1b:5f:ec:29:a3:50:01:a5:d9:9d:e6:
59:1b:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 14:46:16 2024 by rpki-client on console-fra.rpki-client.org