Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/xxz1MkH3XZ0uIivPJ0EB3CoBEWc.roa
File: xxz1MkH3XZ0uIivPJ0EB3CoBEWc.roa (raw, json)
Hash identifier: h5XFQ2o+cG2FHlKr+1lhu9nNY/VMXwyKvTp3a8X1JHE=
Subject key identifier: C7:1C:F5:32:41:F7:5D:9D:2E:22:2B:CF:27:41:01:DC:2A:01:11:67
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 018CC8014034768E6E6B0E57B08BC39D69C4
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/xxz1MkH3XZ0uIivPJ0EB3CoBEWc.roa
Signing time: Tue 02 Jan 2024 02:29:34 +0000
ROA not before: Tue 02 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34996
IP address blocks: 193.202.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:40:34:76:8e:6e:6b:0e:57:b0:8b:c3:9d:69:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Jan 2 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c71cf53241f75d9d2e222bcf274101dc2a011167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:06:a5:98:10:e7:d3:67:07:97:c0:82:33:
8e:77:76:d6:06:66:f4:25:bb:e5:2e:bc:13:02:c3:
7a:28:f3:e5:23:75:45:79:c3:86:34:42:af:c5:39:
e5:c8:23:00:e4:c0:f2:cb:e0:40:67:c8:d2:ee:89:
10:31:0b:b6:f9:92:ff:54:27:68:b3:4f:db:1c:25:
ab:8d:91:e1:73:ee:67:86:0f:61:d7:68:ea:4b:ce:
7c:f9:54:a0:e1:47:63:46:27:1f:dc:58:b2:09:66:
e2:ab:78:a8:67:e6:00:f0:8a:04:23:a7:06:ee:b2:
00:f1:87:e0:5d:6d:9d:ef:a4:5a:95:f7:8d:e0:3e:
7b:d1:0a:95:51:9c:ce:ce:6d:36:b0:d4:39:cc:1b:
2d:74:a4:c1:ef:bc:5c:37:67:85:1a:29:5d:b6:0b:
36:b0:c7:17:2f:3c:ad:05:79:ce:02:f4:09:e5:c1:
66:63:c8:ec:65:b3:39:c7:78:7a:e7:4e:ae:96:ec:
c7:16:ab:2d:95:f0:2d:80:59:58:0a:ba:a2:42:92:
95:28:f2:45:e0:97:72:27:f3:ce:30:a4:ab:ca:4e:
87:db:76:8d:92:90:e5:32:2b:cd:49:bd:21:6d:c4:
a1:33:70:0e:46:9b:a5:72:13:8f:f9:85:c0:1e:3a:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1C:F5:32:41:F7:5D:9D:2E:22:2B:CF:27:41:01:DC:2A:01:11:67
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/xxz1MkH3XZ0uIivPJ0EB3CoBEWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:1c:eb:c4:4e:8b:f4:59:11:2c:b1:19:f9:60:f9:c4:bb:b9:
33:1d:1d:53:e5:15:e9:56:55:22:6e:45:0d:34:5b:3e:09:36:
99:94:c1:af:58:dd:a8:0a:1c:94:aa:7d:12:77:5b:21:0d:3f:
13:ca:63:8a:c6:76:69:a2:d6:68:d2:7d:79:3f:d9:8c:01:33:
df:e4:d4:10:fc:1b:25:0e:92:bc:52:03:f9:bc:2d:05:ce:e3:
96:e4:bf:21:c0:da:b4:bd:c4:86:8f:b5:85:fc:9f:0f:bc:09:
49:5f:01:b3:db:f2:e4:5f:67:d3:57:56:27:d6:39:1b:55:57:
51:ea:c7:22:50:bf:25:6c:e3:dc:f7:8d:cc:81:07:06:08:85:
e3:09:3e:94:c0:dd:9c:1d:0c:d2:65:68:61:0f:9c:5e:b5:0f:
59:f0:27:cd:e4:c5:7e:1e:6f:79:2f:ee:97:72:10:68:c7:db:
9e:b7:1f:74:aa:4c:60:21:2b:cf:e7:cf:c3:03:99:e2:d2:bb:
58:af:83:ae:07:fe:80:f6:2e:f4:d6:f3:06:69:f4:0d:26:e4:
1a:45:cf:61:df:b6:54:f0:16:72:aa:19:aa:e3:e6:e4:74:ff:
37:91:68:25:6a:2c:b2:1a:5a:c3:44:80:6f:28:8a:62:7b:c4:
ff:ac:25:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:48:22 2024 by rpki-client on console-ams.rpki-client.org