Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/d7hgQlQQYvjdxFPxW7N64DDsSLA.roa
File: d7hgQlQQYvjdxFPxW7N64DDsSLA.roa (raw, json)
Hash identifier: hMMCmf8IXi/ZR7a7Wns0G31ni8oxu6ufD9Rg139pw14=
Subject key identifier: 77:B8:60:42:54:10:62:F8:DD:C4:53:F1:5B:B3:7A:E0:30:EC:48:B0
Certificate issuer: /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Certificate serial: 018CC493370525B3542F9526B07621508E85
Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/d7hgQlQQYvjdxFPxW7N64DDsSLA.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21373
IP address blocks: 193.53.50.0/24 maxlen: 24
193.53.49.0/24 maxlen: 24
193.53.48.0/24 maxlen: 24
193.53.51.0/24 maxlen: 24
193.53.56.0/23 maxlen: 24
193.53.55.0/24 maxlen: 24
193.53.54.0/24 maxlen: 24
193.53.53.0/24 maxlen: 24
193.53.52.0/24 maxlen: 24
193.53.58.0/23 maxlen: 24
193.53.63.0/24 maxlen: 24
193.53.62.0/24 maxlen: 24
193.53.61.0/24 maxlen: 24
193.53.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:37:05:25:b3:54:2f:95:26:b0:76:21:50:8e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77b86042541062f8ddc453f15bb37ae030ec48b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:59:fd:1c:31:db:48:dc:a3:45:9b:5b:8d:
ae:d1:f7:4c:12:3a:37:80:e2:0d:10:32:bd:a4:bd:
98:19:61:fe:f1:d3:7c:d2:4f:46:ca:02:25:11:c5:
72:d9:02:b0:85:1d:f0:1f:0b:cc:ac:3c:ba:21:22:
46:a6:96:e1:22:f1:52:fb:a8:ca:c3:dc:29:e5:40:
b0:20:a0:79:39:76:66:8b:1c:e2:42:1b:bf:50:18:
f9:02:7d:46:13:43:e4:26:5d:b9:4c:fc:6b:3d:2b:
19:b5:be:dc:8f:20:2d:53:0d:2d:57:79:f0:ac:d9:
c6:01:ab:7c:95:66:07:81:52:42:db:f3:e0:92:7b:
ac:57:b1:46:e2:68:68:62:13:c8:4c:1b:8f:95:9b:
2f:ee:09:57:68:be:10:7a:e3:53:db:cd:de:90:8a:
e8:4a:c0:21:01:db:1e:d7:38:ab:c3:6f:9b:26:91:
70:a5:b7:c3:63:0e:7e:9f:2a:a7:3f:f6:7f:02:50:
0d:30:37:d5:bf:4f:de:6c:4c:72:bd:0c:aa:9f:48:
c4:8b:1e:67:af:7b:a9:68:6c:9f:da:be:12:32:c9:
e7:07:20:bc:07:27:93:ce:1e:8b:b4:7b:0b:d1:95:
50:68:d3:9e:b1:fb:a0:0c:c9:8b:bf:12:38:89:9c:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B8:60:42:54:10:62:F8:DD:C4:53:F1:5B:B3:7A:E0:30:EC:48:B0
X509v3 Authority Key Identifier:
keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/d7hgQlQQYvjdxFPxW7N64DDsSLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.48.0/20
Signature Algorithm: sha256WithRSAEncryption
54:4f:b6:ef:07:75:2f:fd:ef:3d:35:98:55:37:1b:49:3c:48:
a4:82:13:ad:32:69:c5:36:25:b7:59:14:61:21:d3:d0:f4:4e:
18:c5:fb:48:e6:f5:6c:9c:ab:6f:c6:85:cd:fc:49:e3:3c:ea:
92:0b:35:36:dd:1c:ad:1f:a5:79:37:fb:ce:49:db:ba:b4:51:
56:4f:ce:f6:5a:59:0b:5f:e9:52:c5:4e:26:a2:1e:8a:77:60:
cb:d9:17:45:9d:7d:1d:50:c4:87:30:2a:85:b6:e9:52:89:59:
10:af:dc:c9:a3:f4:3c:ff:19:a0:bf:80:b8:ff:59:fc:c3:9c:
42:61:c1:03:20:e1:e5:fe:ff:82:57:0d:2e:8c:f8:e2:e7:17:
fa:8e:7d:c5:e0:19:21:28:67:7a:e4:8a:b2:dc:31:a0:3f:bc:
73:7d:87:d0:f5:d0:41:88:1a:9b:b7:ea:db:05:2e:ff:98:64:
17:51:c4:1f:55:bf:2d:5a:21:ee:35:6d:25:89:56:19:9c:3e:
bc:68:83:7e:77:2b:40:57:82:90:6f:bb:f2:38:5d:98:7c:f0:
ad:c1:29:c2:f4:c1:17:b1:db:6b:33:58:b2:16:78:55:17:2b:
89:95:f8:9c:10:0b:16:18:05:2a:3b:01:20:b2:d0:ca:fd:84:
1e:e4:72:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:07:52 2024 by rpki-client on console-ams.rpki-client.org