Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/77uRtuxl9FLWm4R8Va6fYe63UjI.roa
File: 77uRtuxl9FLWm4R8Va6fYe63UjI.roa (raw, json)
Hash identifier: lqcQ5xLdBLe0KFmknuuKVLE0XI9/e8AOA6em/cwVaUM=
Subject key identifier: EF:BB:91:B6:EC:65:F4:52:D6:9B:84:7C:55:AE:9F:61:EE:B7:52:32
Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial: 018CC94AC61C78F116DBCFFBE4F2F3DAF377
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/77uRtuxl9FLWm4R8Va6fYe63UjI.roa
Signing time: Tue 02 Jan 2024 08:29:29 +0000
ROA not before: Tue 02 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30746
IP address blocks: 193.47.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:c6:1c:78:f1:16:db:cf:fb:e4:f2:f3:da:f3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Validity
Not Before: Jan 2 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efbb91b6ec65f452d69b847c55ae9f61eeb75232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:30:07:44:17:f0:2e:62:30:75:5f:d0:57:
7e:a5:92:25:26:b4:a5:41:b1:02:43:44:c9:7b:8a:
20:b3:54:93:8f:13:8e:e1:9a:33:e7:8a:07:b0:42:
b3:d2:75:0e:09:57:27:15:aa:06:33:28:20:a4:02:
5b:dc:f6:24:26:19:11:c2:27:33:ca:53:07:53:58:
2a:20:d1:1a:a8:b7:ad:cf:b5:d0:6d:a8:83:19:4b:
fb:3c:ed:81:51:a2:39:70:d3:32:03:24:7a:ab:71:
02:a6:a7:be:ef:93:22:4b:ce:d3:b7:c7:bc:41:0f:
b4:60:38:9a:39:0d:89:47:b1:0a:c4:66:10:f5:9b:
65:01:a6:f4:b5:38:61:af:38:0b:57:27:1e:a9:6b:
e4:46:c4:47:7a:fc:8b:21:f3:39:ab:27:29:ae:9a:
9f:6e:af:fe:5a:a1:f7:9f:1f:3d:29:e8:2a:9b:cf:
6c:b8:8c:88:65:d9:38:09:14:fa:a1:3d:01:05:c1:
da:91:3d:40:05:ba:ca:30:e1:d6:20:ba:da:8a:84:
da:e3:10:8b:27:76:1b:08:0b:de:eb:95:1b:fa:02:
e2:6f:c5:2f:ca:57:74:b9:54:7c:39:88:f3:ae:ee:
ca:9f:29:29:e1:1e:58:9d:02:29:ec:bc:6d:45:84:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BB:91:B6:EC:65:F4:52:D6:9B:84:7C:55:AE:9F:61:EE:B7:52:32
X509v3 Authority Key Identifier:
keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/77uRtuxl9FLWm4R8Va6fYe63UjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.147.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a1:2a:29:50:58:46:7f:ee:fc:5b:ed:4e:39:29:12:f4:6c:
77:5b:08:ea:46:22:d2:c6:ed:02:fa:ed:d2:e9:9f:79:be:62:
ad:66:5a:04:46:d0:f7:fc:b2:b1:3e:f7:cd:59:fc:db:18:c9:
7a:d1:ec:82:0c:50:62:51:90:54:f8:df:41:b2:cc:a7:d8:d9:
16:c8:49:e3:f3:cc:1a:70:ac:f7:6d:ab:2c:76:a3:77:c8:fe:
65:34:ad:42:49:5d:8d:70:9f:90:92:88:f7:55:a2:01:45:4b:
cf:0a:ff:d9:f1:08:94:b8:d3:a1:ac:bb:5a:42:7e:df:82:d2:
70:61:99:16:12:5f:17:8c:35:48:ea:6b:29:2e:33:ab:03:cf:
2e:c0:d1:de:c5:73:54:61:05:51:af:26:6a:6f:60:b6:4e:ad:
b3:0d:a4:82:3d:b7:9b:5d:58:cb:63:93:68:67:9f:bb:87:65:
ec:e8:2f:3b:1c:91:02:31:c0:7f:8d:d2:90:02:89:45:12:36:
2a:42:c0:39:dd:b8:01:b0:cc:a5:b0:8e:47:38:4a:87:90:44:
a2:7d:55:70:06:d7:80:cb:78:c6:14:32:36:23:5e:f4:92:97:
17:72:28:3a:ee:a0:11:06:f2:6b:ec:18:3b:26:ba:c2:30:42:
db:84:0c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:51:44 2024 by rpki-client on console-ams.rpki-client.org