Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/SUZKJc9IxHZv_3PNjXtbodGaVlQ.roa
File: SUZKJc9IxHZv_3PNjXtbodGaVlQ.roa (raw, json)
Hash identifier: E63GDJLKZxD0xzqDcb8rT6M/PS+RuIvKLC4iAoOE05Q=
Subject key identifier: 49:46:4A:25:CF:48:C4:76:6F:FF:73:CD:8D:7B:5B:A1:D1:9A:56:54
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018CC3B679598C64E7D4218490A191151FD1
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/SUZKJc9IxHZv_3PNjXtbodGaVlQ.roa
Signing time: Mon 01 Jan 2024 06:29:24 +0000
ROA not before: Mon 01 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52053
IP address blocks: 193.38.250.0/24 maxlen: 24
185.255.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:79:59:8c:64:e7:d4:21:84:90:a1:91:15:1f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49464a25cf48c4766fff73cd8d7b5ba1d19a5654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:ef:29:65:c2:30:8e:69:2c:67:af:88:de:
ec:68:72:9f:53:07:eb:f6:58:4b:60:be:45:20:09:
4b:d9:4d:72:2d:d5:a1:9e:6f:b7:9b:19:17:8c:83:
61:40:c8:c9:fc:15:61:3c:6c:30:58:78:c1:f3:f1:
e8:52:80:76:57:e4:b0:8b:9e:d2:0b:98:e9:7c:a3:
88:26:fa:f5:f9:92:48:75:a2:32:b3:e1:ad:4a:7b:
c4:fd:a0:31:99:36:70:a9:86:29:4a:d0:ca:b5:ff:
72:3a:fc:22:90:4d:b9:ca:98:ac:7c:6b:b8:6c:69:
26:e9:96:fd:ce:b0:13:fa:75:fe:00:c3:c1:bb:49:
cf:93:d0:02:fa:43:f7:3d:b5:35:fd:fd:90:b8:32:
90:d5:bb:c9:c6:61:07:36:48:f9:76:db:78:55:4c:
ef:78:0b:28:85:7b:94:28:7a:ed:b7:41:5c:f5:f0:
fc:ab:7e:ba:47:85:9a:78:76:51:99:1e:64:7a:9f:
8f:1d:6a:3e:f8:a1:97:d7:f0:aa:57:5d:6b:56:a7:
12:5e:c8:87:3a:36:ac:11:22:07:d0:33:fe:e3:5e:
a2:d3:2a:51:51:9d:dc:8e:fa:35:98:2c:73:70:83:
0d:6c:75:2c:1d:e4:41:39:f0:a1:18:a4:36:56:75:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:46:4A:25:CF:48:C4:76:6F:FF:73:CD:8D:7B:5B:A1:D1:9A:56:54
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/SUZKJc9IxHZv_3PNjXtbodGaVlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.112.0/24
193.38.250.0/24
Signature Algorithm: sha256WithRSAEncryption
00:75:63:31:d3:be:85:09:fe:4d:f1:4b:67:0f:47:72:f5:3c:
a7:71:63:bc:94:84:34:00:7f:85:c3:bc:26:59:76:01:5b:35:
d0:ad:22:2e:72:47:25:b7:6a:27:ec:33:8b:4f:91:ef:53:da:
95:d8:4a:3b:c6:87:f6:b9:55:18:5d:5b:5a:16:1a:e8:05:14:
62:26:f8:e9:09:98:36:1a:af:6f:3f:25:15:5d:ac:d5:01:6f:
31:1a:b5:75:12:4d:06:8c:a6:58:be:fa:43:6b:ef:4b:f1:9f:
b0:e0:74:01:59:bd:4b:62:32:34:b9:29:b7:a7:e8:47:a7:7a:
77:fd:7b:8f:c9:9a:4b:66:a9:63:1a:c0:2c:1b:29:a5:6c:ca:
56:6d:42:9d:b7:3e:61:6b:6d:84:24:af:41:16:5c:b7:17:15:
b1:07:e2:93:00:85:5e:10:32:a7:95:94:b8:ee:24:c6:da:7c:
b2:aa:35:e7:f2:6a:9a:dd:69:b2:17:14:5f:f4:9c:43:22:30:
07:b9:3d:21:3b:fb:17:c3:f4:3f:cf:59:7e:03:eb:b4:b9:97:
32:42:93:f2:4c:fd:81:5e:ad:aa:22:b5:5a:75:41:d6:d7:b2:
fa:29:a1:30:62:e1:89:67:97:af:de:25:30:78:93:b8:2f:55:
3f:3a:b3:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDtnlZjGTn1CGEkKGRFR/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjQwMTAxMDYyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTQ2NGEyNWNmNDhjNDc2NmZmZjczY2Q4ZDdiNWJhMWQxOWE1NjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUHvKWXCMI5pLGeviN7saHKfUwfr
9lhLYL5FIAlL2U1yLdWhnm+3mxkXjINhQMjJ/BVhPGwwWHjB8/HoUoB2V+Swi57S
C5jpfKOIJvr1+ZJIdaIys+GtSnvE/aAxmTZwqYYpStDKtf9yOvwikE25ypisfGu4
bGkm6Zb9zrAT+nX+AMPBu0nPk9AC+kP3PbU1/f2QuDKQ1bvJxmEHNkj5dtt4VUzv
eAsohXuUKHrtt0Fc9fD8q366R4WaeHZRmR5kep+PHWo++KGX1/CqV11rVqcSXsiH
OjasESIH0DP+416i0ypRUZ3cjvo1mCxzcIMNbHUsHeRBOfChGKQ2VnVAqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFElGSiXPSMR2b/9zzY17W6HRmlZUMB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvU1VaS0pjOUl4SFp2XzNQTmpYdGJvZEdhVmxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuf9wAwQA
wSb6MA0GCSqGSIb3DQEBCwUAA4IBAQAAdWMx076FCf5N8UtnD0dy9TyncWO8lIQ0
AH+Fw7wmWXYBWzXQrSIuckclt2on7DOLT5HvU9qV2Eo7xof2uVUYXVtaFhroBRRi
JvjpCZg2Gq9vPyUVXazVAW8xGrV1Ek0GjKZYvvpDa+9L8Z+w4HQBWb1LYjI0uSm3
p+hHp3p3/XuPyZpLZqljGsAsGymlbMpWbUKdtz5ha22EJK9BFly3FxWxB+KTAIVe
EDKnlZS47iTG2nyyqjXn8mqa3WmyFxRf9JxDIjAHuT0hO/sXw/Q/z1l+A+u0uZcy
QpPyTP2BXq2qIrVadUHW17L6KaEwYuGJZ5ev3iUweJO4L1U/OrMe
-----END CERTIFICATE-----
Generated at Thu Apr 25 15:27:15 2024 by rpki-client on console-fra.rpki-client.org