Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c9ed9a-9922-4318-b0aa-10e71e5692f9/1/T1gtWMJEUD7caRiEtBODjmtEb6w.roa
File: T1gtWMJEUD7caRiEtBODjmtEb6w.roa (raw, json)
Hash identifier: LAllxPO1yYG08pgL5F6wlo6+nTzU0LeY7CLKxN1B9E8=
Subject key identifier: 4F:58:2D:58:C2:44:50:3E:DC:69:18:84:B4:13:83:8E:6B:44:6F:AC
Certificate issuer: /CN=7d9d49964bba9e8b04040e2dc27009f755d1a0ee
Certificate serial: 018DE057D38BBEE9889301856DE53777F235
Authority key identifier: 7D:9D:49:96:4B:BA:9E:8B:04:04:0E:2D:C2:70:09:F7:55:D1:A0:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ1Jlku6nosEBA4twnAJ91XRoO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c9ed9a-9922-4318-b0aa-10e71e5692f9/1/T1gtWMJEUD7caRiEtBODjmtEb6w.roa
Signing time: Sun 25 Feb 2024 12:57:48 +0000
ROA not before: Sun 25 Feb 2024 12:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51020
IP address blocks: 193.5.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c9ed9a-9922-4318-b0aa-10e71e5692f9/1/fZ1Jlku6nosEBA4twnAJ91XRoO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c9ed9a-9922-4318-b0aa-10e71e5692f9/1/fZ1Jlku6nosEBA4twnAJ91XRoO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ1Jlku6nosEBA4twnAJ91XRoO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e0:57:d3:8b:be:e9:88:93:01:85:6d:e5:37:77:f2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9d49964bba9e8b04040e2dc27009f755d1a0ee
Validity
Not Before: Feb 25 12:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f582d58c244503edc691884b413838e6b446fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:d7:c4:60:72:61:a1:84:75:4e:b2:ba:37:
17:15:92:d6:7b:3b:1d:ef:fb:23:47:c8:1b:9d:18:
25:7e:36:03:de:09:9c:6c:cb:84:8c:10:d0:95:dd:
f7:b6:97:04:f0:2f:e8:fe:f4:78:15:c6:8f:fb:91:
19:a8:de:28:31:e6:0f:e0:4d:82:7e:17:ce:cc:4f:
4b:1d:cf:25:72:bd:85:c1:e6:9e:1f:a4:ee:4b:ab:
c8:83:8b:ff:ee:0d:92:47:71:02:69:93:58:80:f1:
0f:86:9b:39:c8:5f:e6:8c:9a:63:ca:b8:aa:a7:03:
6d:81:ce:a8:04:38:6a:56:5f:90:ac:5a:6d:cc:46:
82:aa:70:0a:a0:cc:32:2b:75:ae:52:9f:c1:df:d2:
ec:7e:37:ff:11:7b:37:39:7b:a2:05:c1:c7:63:46:
5d:73:6a:f9:9a:6e:cf:4b:4c:a6:ba:d8:93:57:33:
fc:8d:97:b8:f7:49:e2:0f:29:49:0e:99:04:3b:c4:
06:17:dc:68:43:45:0b:3c:88:ad:58:83:c7:57:d9:
1f:3f:1c:1f:26:c0:a0:c1:cf:f4:47:bd:46:41:9f:
86:3e:ab:a4:55:bf:ae:6e:f8:25:a6:d1:95:b3:ea:
e4:08:86:ee:c3:ed:77:bc:1a:a6:07:0f:9b:4a:fc:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:2D:58:C2:44:50:3E:DC:69:18:84:B4:13:83:8E:6B:44:6F:AC
X509v3 Authority Key Identifier:
keyid:7D:9D:49:96:4B:BA:9E:8B:04:04:0E:2D:C2:70:09:F7:55:D1:A0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ1Jlku6nosEBA4twnAJ91XRoO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c9ed9a-9922-4318-b0aa-10e71e5692f9/1/T1gtWMJEUD7caRiEtBODjmtEb6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c9ed9a-9922-4318-b0aa-10e71e5692f9/1/fZ1Jlku6nosEBA4twnAJ91XRoO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.149.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f6:67:1e:47:53:7c:73:61:ca:37:85:ff:f5:7a:ad:7f:2f:
91:a7:28:1d:ef:99:d7:07:66:f8:60:8e:09:fd:1e:e3:f5:a1:
bc:5f:ad:5b:07:52:aa:ce:54:4d:07:f2:66:b5:d1:b3:74:eb:
cf:f1:62:be:a0:71:ae:69:fe:82:96:72:0b:3d:87:86:e8:fc:
5c:5c:be:83:66:6d:85:fd:da:e1:ac:57:57:e3:41:5c:5a:d5:
f1:ff:c3:b0:7d:a7:b3:91:f3:50:c8:fe:25:13:77:85:04:cf:
b8:d2:8a:fc:ec:da:79:c8:fd:bb:d8:52:db:4c:c3:47:6c:e6:
62:9b:f2:5f:0c:80:98:7d:1d:df:8a:ac:97:3a:0a:97:ba:1a:
b4:74:e4:cd:03:85:eb:9e:73:58:4f:f4:f3:cf:7f:79:26:16:
4a:0d:07:30:9d:7b:17:39:67:ab:63:39:74:60:a7:ff:88:83:
1c:9c:ae:34:3e:36:5d:b4:9e:7a:c0:ba:f4:f7:14:d0:c4:38:
ff:d8:e4:18:8f:60:c1:d5:74:fd:2f:01:49:36:2a:f5:0e:f1:
04:f1:cc:ff:82:19:6c:7b:23:f2:e5:05:4b:80:d5:0d:34:d8:
79:6f:ea:4c:74:f2:03:53:96:0b:ac:71:c5:48:1a:20:ee:8a:
83:17:ee:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:25:10 2024 by rpki-client on console-ams.rpki-client.org