Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/ruk1mu19cKFh4_js5tunBVf4zug.roa
File: ruk1mu19cKFh4_js5tunBVf4zug.roa (raw, json)
Hash identifier: QvkJroAbxxn3LSWH9WUUTTshNCqrEZ/x6uMn2UqQqj0=
Subject key identifier: AE:E9:35:9A:ED:7D:70:A1:61:E3:F8:EC:E6:DB:A7:05:57:F8:CE:E8
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 018EC1D1BF21C84CEE393BEAB6CBCCB05470
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/ruk1mu19cKFh4_js5tunBVf4zug.roa
Signing time: Tue 09 Apr 2024 07:45:32 +0000
ROA not before: Tue 09 Apr 2024 07:45:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 193.3.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:d1:bf:21:c8:4c:ee:39:3b:ea:b6:cb:cc:b0:54:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Apr 9 07:45:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aee9359aed7d70a161e3f8ece6dba70557f8cee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a4:8a:48:85:29:41:9a:73:42:80:ef:5d:12:
85:6a:6f:27:f8:51:44:c7:c2:03:ad:1a:09:cd:05:
a2:ec:f2:00:08:89:c8:38:37:d3:04:19:c5:4c:3b:
21:e3:e2:24:88:69:01:8c:f9:5a:52:5a:d1:53:c6:
5a:74:07:d7:e7:5f:8a:a3:4e:17:9e:36:bd:29:fd:
f6:f3:99:3e:32:94:3e:18:da:a7:f6:24:4b:9d:f7:
3e:29:cd:62:4b:7c:b8:1c:9e:6d:d0:c9:8f:10:eb:
e0:ad:04:7c:cd:20:95:96:8c:56:48:76:00:9f:c3:
77:27:dc:03:d2:59:b4:cd:33:5a:d6:73:23:a2:44:
f5:19:cf:03:32:fc:2c:92:3e:ab:aa:0c:6e:2e:17:
5f:d4:fb:0c:d4:34:a5:6f:e1:e6:de:11:ab:81:9c:
45:14:17:98:1b:5d:3f:b4:6c:c0:eb:0c:81:ab:bc:
4d:fe:8c:8b:6d:96:8d:12:e7:32:96:fc:59:3e:b7:
cb:94:09:72:4d:4d:d5:6f:ac:b2:94:9e:f3:69:d8:
14:4b:c5:fb:aa:05:14:d8:a7:bd:90:cb:36:cf:17:
b9:25:08:49:77:24:1f:df:bb:a8:f4:7d:0b:9f:d2:
6e:ca:20:41:15:5a:82:13:eb:60:84:1c:55:f3:8b:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:35:9A:ED:7D:70:A1:61:E3:F8:EC:E6:DB:A7:05:57:F8:CE:E8
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/ruk1mu19cKFh4_js5tunBVf4zug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.183.0/24
Signature Algorithm: sha256WithRSAEncryption
38:41:8f:e7:62:fd:5e:26:5d:76:00:b7:04:c8:03:9b:6c:63:
13:03:d4:d5:4e:ef:bb:18:d8:dc:19:d8:21:ea:18:57:96:ee:
2c:b5:fc:61:c6:9d:51:f0:05:0a:20:f4:b6:23:69:b5:95:86:
82:57:07:85:7b:17:79:73:4c:41:2a:bd:07:7b:a2:85:07:42:
81:4c:66:d5:17:e0:2a:cb:64:1d:bc:f6:9a:21:f7:ae:3d:86:
a5:d9:0a:f6:65:ae:1c:a8:63:0f:79:db:e5:56:ac:93:72:6e:
7c:3e:d0:25:b5:d1:03:3e:1b:8e:e1:87:c5:10:db:23:4c:3b:
8a:b8:38:97:c0:4b:3e:c5:82:f2:e9:cb:e6:79:06:ab:1d:d1:
c1:54:fd:27:9f:64:5d:78:bd:04:53:7f:8a:40:58:4e:f4:71:
86:fa:69:4b:06:1b:82:ef:99:bc:09:61:30:fe:ef:4b:7c:be:
b4:14:eb:b7:5f:fa:67:ba:8c:34:88:33:07:b3:53:d6:08:7a:
71:9c:b1:11:34:80:9e:91:08:5a:36:55:45:86:49:8b:59:c9:
29:4a:65:5d:b5:77:b7:0e:0e:83:f2:19:49:a4:7d:89:2f:7c:
b3:44:bb:ba:79:d9:22:f2:1d:f7:d4:42:9f:81:d7:11:ef:13:
f7:10:b3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:02:15 2024 by rpki-client on console-ams.rpki-client.org