Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/hdUTSEkjZswbkGqrHvr81Fx-e0c.roa
File: hdUTSEkjZswbkGqrHvr81Fx-e0c.roa (raw, json)
Hash identifier: HFiIay21/uPBeERad3PJKogz+Dx1UThxDTCobRMLie8=
Subject key identifier: 85:D5:13:48:49:23:66:CC:1B:90:6A:AB:1E:FA:FC:D4:5C:7E:7B:47
Certificate issuer: /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Certificate serial: 018CC3B71D162B2C7618F26F14DFC4A6F846
Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/hdUTSEkjZswbkGqrHvr81Fx-e0c.roa
Signing time: Mon 01 Jan 2024 06:30:06 +0000
ROA not before: Mon 01 Jan 2024 06:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42856
IP address blocks: 193.200.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1d:16:2b:2c:76:18:f2:6f:14:df:c4:a6:f8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Validity
Not Before: Jan 1 06:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85d51348492366cc1b906aab1efafcd45c7e7b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bc:ad:d7:da:d8:6e:17:56:d8:68:2c:df:76:
2f:e5:e7:0d:41:7b:c5:16:71:b5:33:28:9e:97:49:
a6:cf:0f:28:25:97:e9:1e:53:dc:22:df:51:7f:d9:
19:1a:80:fd:b6:a8:87:42:cc:ee:27:37:d4:33:3f:
9e:03:cd:c1:a4:ea:68:55:50:bc:55:a0:42:61:17:
9a:37:8b:04:62:de:52:f3:8c:fe:b8:e4:76:cc:c0:
c8:a4:35:08:10:b5:61:47:45:82:55:23:32:0b:31:
e2:88:2b:e6:88:fe:47:c3:cb:79:e3:3a:86:01:45:
cf:18:9a:e7:4d:30:2f:1e:64:fc:41:32:14:2b:e5:
38:f5:a7:26:83:6d:7d:4f:3b:e3:2b:ee:4c:0c:b2:
e1:c3:cc:dc:19:ab:b5:ef:fb:81:b7:44:34:1a:a0:
e3:21:40:e6:9e:6c:3b:6c:cc:03:39:25:72:e6:08:
5f:61:c5:cf:87:31:7d:eb:49:9c:88:4a:53:fb:9d:
57:bf:a0:f7:8c:84:e5:d5:62:02:c3:f2:8e:02:9d:
c8:29:03:58:23:17:cc:82:77:14:27:12:9e:fc:43:
64:04:84:00:78:d0:73:e9:d7:c0:0b:68:80:56:7c:
80:75:9c:2e:b5:2f:25:03:3e:bc:44:e0:cf:9e:34:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D5:13:48:49:23:66:CC:1B:90:6A:AB:1E:FA:FC:D4:5C:7E:7B:47
X509v3 Authority Key Identifier:
keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/hdUTSEkjZswbkGqrHvr81Fx-e0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.137.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ca:d4:34:06:2a:a6:a9:f8:4c:4a:32:66:96:92:54:cb:b8:
c9:c2:b3:44:5a:c2:ec:85:fc:9c:2a:ea:11:5a:6a:16:9b:1a:
5f:62:00:6a:2f:ab:60:ce:cf:9a:59:f6:7a:cd:fa:42:84:e3:
25:ae:4b:ee:e0:8e:37:8e:a3:e1:03:ac:59:02:bc:25:36:60:
75:23:b4:87:e9:c4:d2:9c:5a:f9:42:42:7b:34:f6:92:f0:2f:
71:df:83:25:7f:9e:6f:dd:03:6e:09:6a:3c:bc:a6:cd:2d:3c:
18:c3:9b:26:1e:ef:30:33:aa:03:4b:32:96:7d:73:18:33:3b:
c7:95:ee:25:e0:c2:3a:24:f4:03:6e:e8:3b:58:d0:9a:c9:3d:
79:eb:05:e9:57:b1:62:5b:d4:67:af:41:a0:a8:86:5a:26:d6:
3e:cd:5a:f0:66:76:ae:8e:d2:6e:94:3a:53:9a:45:99:ad:18:
d9:c3:0c:7c:b1:e3:44:00:a6:31:d3:35:2d:e7:a5:9a:04:e1:
81:80:02:e8:c6:43:ff:55:f4:58:81:7f:be:fb:2f:9b:b5:c2:
78:0f:8a:8d:db:84:ed:0f:7e:f7:ae:4e:15:e3:88:55:fd:52:
c6:e9:d0:89:10:e8:79:91:65:95:29:1a:8e:d2:3f:9d:5c:02:
89:ba:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:02:51 2024 by rpki-client on console-ams.rpki-client.org