Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/RvRWJlb1vfz2aWKvNUO9WlD1_Oo.roa
File: RvRWJlb1vfz2aWKvNUO9WlD1_Oo.roa (raw, json)
Hash identifier: R6w/TluzVo4R60tBlAOUzH2yWQskJ2jaKfNj/YfXDLQ=
Subject key identifier: 46:F4:56:26:56:F5:BD:FC:F6:69:62:AF:35:43:BD:5A:50:F5:FC:EA
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 018CC5DC36F10C95384F361C25F2F806B38D
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/RvRWJlb1vfz2aWKvNUO9WlD1_Oo.roa
Signing time: Mon 01 Jan 2024 16:29:52 +0000
ROA not before: Mon 01 Jan 2024 16:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.100.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:36:f1:0c:95:38:4f:36:1c:25:f2:f8:06:b3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Jan 1 16:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46f4562656f5bdfcf66962af3543bd5a50f5fcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d8:c6:b0:5b:e2:4d:1a:0d:8e:e4:90:1f:a7:
64:0f:3b:83:ae:b5:8c:6e:75:b6:00:dc:7f:6d:4f:
ef:e2:0e:d1:4f:fa:0e:92:24:c7:85:85:01:c9:4d:
aa:a6:11:e2:00:fc:ed:49:70:98:7a:f2:85:20:fe:
8d:08:96:85:51:8c:02:39:c5:dd:34:63:ba:36:1a:
a6:f4:16:93:3d:66:60:a3:7c:a5:38:78:cd:50:50:
4f:2c:21:03:9b:f3:0d:d8:71:ef:da:12:6a:66:43:
bc:dd:0a:bc:a3:ad:90:4c:b7:5c:7d:d6:a1:d1:99:
4e:f2:93:e1:b6:ed:04:b5:37:c5:8e:b8:53:e4:88:
c5:ae:f0:e5:47:ad:6f:61:80:21:db:a0:d5:62:f3:
67:87:21:47:3d:cc:af:ff:a2:24:73:43:0e:45:fe:
1c:ae:9a:44:dc:40:c7:e5:cd:1a:7f:0e:36:31:f2:
ab:35:c1:42:33:49:20:09:84:92:5d:32:28:4c:3e:
e8:26:e3:46:6e:ce:00:44:d5:69:29:4b:1a:ac:6b:
1b:96:6d:92:df:15:47:c2:1b:09:f3:eb:c3:23:89:
dc:0a:7e:95:f7:bf:22:9c:d4:c2:dd:8e:ec:0e:74:
b0:1f:44:98:92:fc:41:17:29:1c:2e:d9:57:93:13:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:56:26:56:F5:BD:FC:F6:69:62:AF:35:43:BD:5A:50:F5:FC:EA
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/RvRWJlb1vfz2aWKvNUO9WlD1_Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.100.64.0/24
Signature Algorithm: sha256WithRSAEncryption
47:04:11:5d:79:09:f5:83:5b:f0:2a:da:ea:f7:d3:13:d4:0d:
17:26:de:b3:c3:cb:d9:d5:4f:93:9e:ea:66:1b:b6:47:18:a3:
a6:94:7d:aa:6a:88:6b:1d:52:b9:04:2c:5f:3b:cd:6e:ba:92:
0d:ca:6a:ba:90:05:3b:33:00:e2:5e:8b:fa:bb:c3:8d:b5:f3:
3d:70:ef:18:ce:6b:50:77:d0:1e:fc:36:d5:bf:1a:06:72:71:
3e:1b:c3:67:a1:01:46:34:79:97:d4:c7:36:9e:5a:8d:ee:37:
4e:c4:f4:fa:65:9d:e2:ea:8e:d6:cd:98:cb:42:25:5a:36:c4:
84:21:f1:97:51:b6:a9:d6:dd:12:33:56:44:74:f7:84:8f:d9:
58:84:94:c4:38:11:dd:0a:89:c4:aa:af:11:b9:ec:b2:7b:29:
0b:b8:ad:67:c2:d9:f3:a2:5e:e0:fc:77:14:bb:7a:00:bc:97:
7d:da:60:ec:3d:57:d2:98:39:c5:66:97:3b:74:d8:bc:82:1f:
6e:98:bf:5a:db:43:4b:19:69:05:a7:70:47:6d:61:46:d2:aa:
3f:36:b5:18:d6:32:8c:7a:bd:b3:aa:2a:cd:bd:3b:3c:90:91:
a1:48:0d:61:cd:f7:a8:22:67:f0:a6:ba:e2:b8:4e:21:40:fc:
21:5e:c4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:32:44 2024 by rpki-client on console-fra.rpki-client.org