Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/e6OE6Zvhw-LOSbkiz4LaxU-uXaM.roa
File: e6OE6Zvhw-LOSbkiz4LaxU-uXaM.roa (raw, json)
Hash identifier: 14mbHarRkU4OqKS59iqzDazL2Lnm4hboud3BlpunAPE=
Subject key identifier: 7B:A3:84:E9:9B:E1:C3:E2:CE:49:B9:22:CF:82:DA:C5:4F:AE:5D:A3
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 018CC8DF1C2787474E3F8EA536A35990134C
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/e6OE6Zvhw-LOSbkiz4LaxU-uXaM.roa
Signing time: Tue 02 Jan 2024 06:31:53 +0000
ROA not before: Tue 02 Jan 2024 06:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197882
IP address blocks: 193.47.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:1c:27:87:47:4e:3f:8e:a5:36:a3:59:90:13:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Jan 2 06:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ba384e99be1c3e2ce49b922cf82dac54fae5da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:25:8a:ea:3f:82:a0:58:ed:8e:40:75:2e:a0:
d6:89:34:f7:59:88:41:94:4a:35:40:e7:3b:17:fa:
09:12:c8:bc:e7:62:d0:07:72:9e:90:b3:6a:a1:1f:
86:ef:77:13:d8:d2:d0:1d:d1:5f:13:03:a4:6b:dd:
09:a0:79:31:75:9f:98:bf:03:e6:46:09:bc:85:03:
cc:e8:d3:32:9a:e6:fc:f4:ce:66:6a:81:ac:74:20:
1c:f8:70:9a:bb:5e:91:52:0c:ad:31:29:c7:42:9d:
ff:68:4b:67:1b:00:ab:3c:c5:e7:39:51:a7:4d:03:
a8:56:ad:22:fc:12:c5:dc:43:49:b2:a6:76:67:5d:
0c:df:2b:73:65:f4:90:5f:ea:4d:8a:ef:07:17:bb:
72:ba:b7:e6:ae:8f:86:f2:d2:f6:e6:48:a4:4b:11:
9e:8f:b8:28:4f:61:1f:00:61:c1:fe:0c:0a:e7:de:
e8:5b:40:5c:56:ff:71:ed:8e:61:bd:25:44:57:34:
e0:63:e0:62:41:06:91:e2:b7:de:53:f8:a1:c7:2a:
83:e2:87:49:8d:79:72:38:42:a7:9a:ff:8d:f0:9c:
bc:72:81:70:64:4a:dc:12:e6:a8:a5:f2:8b:55:48:
a5:84:e8:08:88:51:52:bf:ad:09:58:37:60:40:1e:
df:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A3:84:E9:9B:E1:C3:E2:CE:49:B9:22:CF:82:DA:C5:4F:AE:5D:A3
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/e6OE6Zvhw-LOSbkiz4LaxU-uXaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.189.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a2:f8:58:ae:be:83:95:09:9a:39:83:18:63:c5:7e:4b:2a:
4a:ed:8e:e6:d3:2d:78:a0:4d:58:e9:df:f7:b8:41:63:9d:e7:
95:15:72:0e:11:f4:d5:44:52:8b:66:dd:53:0f:bb:41:a9:27:
ca:56:87:b7:dd:fc:4c:35:0f:9d:d7:7b:e9:be:2c:8c:8e:be:
81:89:7f:7a:47:be:6b:45:21:6b:52:0c:42:e4:3e:35:70:d5:
51:b7:15:26:01:8b:16:34:7d:70:77:0e:17:89:91:1a:9b:e2:
0b:88:03:af:3f:fc:d7:4c:bf:f9:e8:a6:8f:8f:cd:b0:b2:97:
6a:36:50:ec:e5:f1:c0:ac:d3:44:27:20:71:31:f7:7d:e5:99:
39:e8:ea:e1:62:9a:b8:8d:db:bc:fe:4c:2e:db:ef:69:86:06:
fb:21:64:9b:50:62:42:79:61:ae:f5:ba:9e:4e:2b:2b:44:53:
b7:a5:79:15:64:43:53:b2:bd:f3:95:06:61:38:c1:9c:ca:eb:
62:48:2b:ed:29:70:4a:1e:ae:b1:33:dd:77:9f:93:7e:71:7b:
4d:9f:d1:f1:3d:d7:e3:ee:08:99:18:9d:0b:80:cd:82:7c:ad:
0b:05:ec:11:81:30:75:04:4a:8a:14:7b:3f:c7:d8:f1:17:4b:
e1:72:b8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 16:30:12 2024 by rpki-client on console-fra.rpki-client.org