Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/sCutgtWvJ6oErXZlNE0veRiJgm0.roa
File: sCutgtWvJ6oErXZlNE0veRiJgm0.roa (raw, json)
Hash identifier: hx6/CfsM9VyzFv+6Q0n+rGTwqCg82nMgVWJsatHKRas=
Subject key identifier: B0:2B:AD:82:D5:AF:27:AA:04:AD:76:65:34:4D:2F:79:18:89:82:6D
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 018CC8016BE27A88386D11E4C131ABEDDBBC
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/sCutgtWvJ6oErXZlNE0veRiJgm0.roa
Signing time: Tue 02 Jan 2024 02:29:45 +0000
ROA not before: Tue 02 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31537
IP address blocks: 194.151.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6b:e2:7a:88:38:6d:11:e4:c1:31:ab:ed:db:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b02bad82d5af27aa04ad7665344d2f791889826d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:fa:c9:d8:78:b0:5a:9e:63:73:e4:22:fc:
63:28:0b:b7:81:b9:7f:07:00:e4:6f:72:f6:45:c8:
c1:05:84:59:2b:69:f5:d8:3f:b1:73:66:af:ba:f1:
86:5d:1c:65:9b:be:19:d2:a3:11:f6:27:ff:14:91:
12:49:fc:e4:ab:0b:cd:61:ff:b6:e6:45:68:21:4e:
b7:15:36:4b:a9:17:3a:fc:b0:5b:0b:3d:47:e3:ff:
d9:20:75:2c:60:79:e6:7f:bb:44:74:7c:c0:0c:c7:
90:b9:54:0e:73:19:15:b8:a0:e8:ab:43:a9:7a:35:
4d:54:4a:6c:66:02:01:e4:da:a2:33:ba:01:0e:68:
55:d6:05:bd:c0:86:12:09:3f:6e:89:a2:ac:f9:43:
32:34:73:79:2b:f6:e3:f1:6d:e1:29:b9:56:11:cd:
ba:5e:80:41:29:ae:40:b3:8c:4b:24:45:36:68:a4:
32:c8:40:02:60:cf:7f:e8:b6:cd:57:f9:90:68:fa:
80:10:60:44:ec:4b:7f:28:0c:9b:01:81:fe:ed:da:
a4:0d:a4:11:d3:97:c2:93:87:94:38:1e:71:22:19:
87:e9:a0:25:d1:84:a1:cf:a9:36:6f:03:7f:85:5c:
e3:5c:e4:3a:d0:f8:11:a2:b0:14:08:26:1d:ba:e7:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2B:AD:82:D5:AF:27:AA:04:AD:76:65:34:4D:2F:79:18:89:82:6D
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/sCutgtWvJ6oErXZlNE0veRiJgm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.151.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:62:d9:f0:9d:9d:7d:ee:ce:e7:f5:5f:76:87:8b:cc:3a:75:
47:3a:d8:cf:0f:de:92:72:86:13:1e:0f:71:99:d5:fe:9d:70:
be:38:d6:f4:d7:3e:0a:2c:bf:ee:e1:e3:f3:55:62:0b:3e:47:
96:8c:39:b1:86:dc:3a:9c:d0:34:31:c3:60:c9:c1:fc:85:17:
9b:3c:65:a1:16:14:64:6e:77:39:33:32:ee:3f:de:77:a7:19:
b3:64:3a:4f:88:b8:e5:50:fc:87:5d:f2:7f:c2:b5:18:2c:3d:
d7:e7:ac:07:00:b0:14:c3:bf:f1:5d:27:c1:ed:89:5c:67:46:
1d:02:3d:4a:0a:0f:71:4e:32:d8:99:49:1d:fd:26:31:3f:f2:
d4:4c:44:04:65:5f:3a:f8:c3:94:c0:fd:f5:74:b3:6d:a7:06:
d6:f0:2d:66:88:3b:06:f6:6b:7e:13:3e:0c:86:bb:03:ae:b7:
47:8c:21:00:f9:3c:50:06:61:db:91:dd:38:96:4f:fb:4b:d2:
b1:14:41:59:91:77:b3:e1:44:d9:bd:86:7b:04:8f:48:b0:52:
e8:c8:48:75:7f:0b:40:d0:d5:79:28:df:35:57:4e:a8:31:ec:
82:ec:41:0f:05:58:10:44:71:ae:fc:93:9e:ac:04:da:15:87:
06:e6:a6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:19:38 2024 by rpki-client on console-ams.rpki-client.org