Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/C47DolZYaoNm5MceVWfJcT5gKto.roa
File: C47DolZYaoNm5MceVWfJcT5gKto.roa (raw, json)
Hash identifier: W3ojKI5jUvmExdk9PsoaMrrm4KjjIVRK1QCWMa9dpi4=
Subject key identifier: 0B:8E:C3:A2:56:58:6A:83:66:E4:C7:1E:55:67:C9:71:3E:60:2A:DA
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F2089671B09E2F97893A615C092A39629
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/C47DolZYaoNm5MceVWfJcT5gKto.roa
Signing time: Sat 27 Apr 2024 17:10:26 +0000
ROA not before: Sat 27 Apr 2024 17:10:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:20:89:67:1b:09:e2:f9:78:93:a6:15:c0:92:a3:96:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 27 17:10:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b8ec3a256586a8366e4c71e5567c9713e602ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:fe:e5:9d:97:cd:95:15:95:e2:b2:ae:1d:
40:6e:95:e9:dd:01:60:5e:ce:2d:3b:8c:e3:bc:b6:
f5:be:86:00:a6:2b:7b:d8:3b:17:7d:c0:27:cd:50:
42:13:7f:71:4d:e9:9c:68:bd:46:4e:1d:7b:96:cf:
f7:45:55:3f:b1:0d:15:5f:bc:b5:ed:84:e0:3f:d2:
79:08:bd:83:9f:7c:00:b0:41:fb:d3:f9:34:a3:e1:
3d:95:f7:02:b2:af:bb:bd:91:a6:1c:35:13:4b:fe:
60:49:ee:d2:9c:a9:fe:87:75:63:1c:c0:85:73:b7:
e0:00:f7:89:9a:1e:3d:b9:07:87:99:08:cb:6c:e6:
0b:7a:bc:3d:61:e6:8d:2d:9f:28:93:9a:f9:1e:94:
aa:2e:8d:48:fa:ec:98:35:6d:12:e6:93:f2:ec:dd:
ba:f9:a9:ec:da:7e:c5:e7:c8:09:2b:87:7e:e6:d9:
8d:28:3a:e5:7e:e5:0d:f9:c3:79:c9:ed:be:e6:28:
59:b1:f2:f5:e7:6b:fd:46:46:3f:ff:e6:8c:be:08:
ac:d9:49:3b:4f:c9:31:fe:a5:b2:2f:43:29:4f:0c:
cf:cd:a7:a8:ac:33:07:a0:04:90:82:37:45:6f:d8:
1e:68:0c:a8:69:7b:90:e9:b7:69:d0:1b:24:93:da:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8E:C3:A2:56:58:6A:83:66:E4:C7:1E:55:67:C9:71:3E:60:2A:DA
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/C47DolZYaoNm5MceVWfJcT5gKto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
b3:ef:00:74:91:ee:67:85:62:e0:69:58:d9:93:fd:4e:32:3c:
ab:b6:59:e0:eb:ab:5f:74:93:2c:82:9e:b2:a9:fe:59:89:af:
31:fc:c4:f7:07:0a:b6:aa:b1:12:dc:9e:ef:ac:d7:a3:87:d3:
30:b8:61:34:41:ca:7c:df:a4:d6:2c:76:fb:fc:3a:e8:52:ac:
a4:90:94:0e:1b:a5:54:1a:f2:3a:0f:e5:8f:da:e8:0c:83:ee:
f9:4c:33:5d:42:4a:b5:09:ff:a2:2f:af:c0:40:5a:ef:6b:59:
fc:ff:de:26:36:9b:bd:e0:52:ba:16:b7:3b:f3:77:ea:07:e3:
2f:7f:d6:b4:3d:e8:f8:a0:e7:a7:fe:52:28:65:4a:ef:49:3f:
a8:78:01:23:a4:72:58:1d:61:a4:b6:4f:e5:b1:67:28:78:58:
f6:00:77:06:08:9e:0f:0d:64:e5:60:ea:3b:4f:86:fe:13:98:
43:3a:02:71:a6:30:9b:0c:83:cb:6c:10:84:26:79:07:a2:65:
49:c6:d4:2c:48:ea:cb:ef:a7:1f:c9:9b:88:56:03:90:f9:d6:
85:8e:ad:5b:4d:b7:4a:24:2d:2b:32:fa:5d:81:ae:db:5a:b5:
4d:84:56:15:43:74:56:b6:d1:98:cc:1a:88:2f:b1:59:13:f4:
16:5b:28:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 19:10:40 2024 by rpki-client on console.sobornost.net