Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/SuvoEvdib4Sqzdy6rq590z3Eo7c.roa
File: SuvoEvdib4Sqzdy6rq590z3Eo7c.roa (raw, json)
Hash identifier: ff9fLuTDvsHNfIKIIwtZDUR7y3rPJUnNlgiWg4oFvng=
Subject key identifier: 4A:EB:E8:12:F7:62:6F:84:AA:CD:DC:BA:AE:AE:7D:D3:3D:C4:A3:B7
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018CC7275EB013F9D5C6BB7AF165E7FB2E83
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/SuvoEvdib4Sqzdy6rq590z3Eo7c.roa
Signing time: Mon 01 Jan 2024 22:31:35 +0000
ROA not before: Mon 01 Jan 2024 22:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48030
IP address blocks: 195.210.9.0/24 maxlen: 24
195.128.246.0/23 maxlen: 23
193.93.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5e:b0:13:f9:d5:c6:bb:7a:f1:65:e7:fb:2e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4aebe812f7626f84aacddcbaaeae7dd33dc4a3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:1b:b7:b3:47:4c:9c:88:d8:b7:f1:31:e7:
fe:5a:39:cd:ba:22:e0:3b:e5:6e:59:29:48:8a:ba:
53:4d:75:de:a2:73:d3:39:49:84:0f:91:bf:07:01:
b9:93:42:8c:45:5a:25:06:37:d9:ce:f6:c0:c9:03:
6a:ad:9f:d4:15:ee:37:ad:1a:19:5f:b7:a1:15:ed:
57:41:29:04:6f:97:79:6e:b0:20:1d:29:59:88:6f:
62:c6:be:f2:e0:c2:ff:1e:ea:63:94:10:68:13:e4:
43:04:70:0b:85:ba:4e:d9:1d:81:46:6e:40:76:37:
94:2a:2f:84:8d:c3:1c:5e:bd:62:a1:a7:86:c4:47:
e9:ab:11:5f:93:a3:3f:f1:34:e9:ed:25:a9:fb:22:
1b:f6:f1:21:4b:b1:cd:83:2d:59:70:81:b3:f4:16:
45:65:0d:34:6f:3c:fb:f7:3f:e4:bb:45:79:f5:55:
af:3e:66:74:8f:bf:02:58:7f:c6:71:ae:1f:df:1f:
21:b2:3a:8d:3b:94:28:83:a4:9c:a2:2f:12:f8:46:
b2:fc:7f:4b:8d:88:73:c5:ac:0b:32:35:d0:f9:c4:
82:77:a8:3e:25:b0:94:5b:4b:f8:fa:61:2b:3d:d0:
e7:8f:d3:bb:8e:f1:1d:6a:99:ea:48:ec:fd:c8:05:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EB:E8:12:F7:62:6F:84:AA:CD:DC:BA:AE:AE:7D:D3:3D:C4:A3:B7
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/SuvoEvdib4Sqzdy6rq590z3Eo7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.61.0/24
195.128.246.0/23
195.210.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:38:37:99:9d:74:6a:75:12:ee:35:b7:e7:af:62:3c:5a:c6:
85:99:1e:85:f5:65:1d:df:a7:33:c8:85:d3:54:f2:f7:13:b1:
12:79:c8:d4:80:5e:06:50:0c:a6:11:4d:3b:18:d8:b5:cd:ec:
19:72:18:bd:cc:56:94:0b:07:93:b2:48:bd:1e:f5:a9:dc:e8:
4a:55:22:53:20:5e:91:be:c4:85:32:05:3e:9a:5e:48:a3:c5:
34:8a:a5:66:17:06:fd:0b:54:46:f7:5b:42:f4:b8:eb:9c:9b:
a1:af:8c:62:7b:3d:0c:aa:da:85:48:ff:bb:0d:be:f6:f5:05:
89:8c:87:e3:ca:72:d9:41:a1:f8:78:78:22:68:ab:08:3a:69:
e0:fd:ec:b0:28:b7:57:7a:48:2b:35:86:4f:86:92:eb:da:a5:
48:e6:cb:b2:42:51:23:da:e3:f3:10:ee:16:09:4e:54:90:80:
e3:98:1b:f8:41:e9:8c:18:bb:4c:fd:c1:10:59:43:ac:61:5f:
8e:c3:2a:de:da:d4:d8:7e:5a:35:e2:0f:59:97:eb:bc:c9:52:
f5:f5:5b:98:08:ed:23:d3:33:27:66:fc:79:01:96:97:1e:6f:
81:5c:b8:4e:c7:3d:84:f4:ac:9d:0e:ee:b2:c1:8f:63:2d:60:
19:da:62:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:37:36 2024 by rpki-client on console-ams.rpki-client.org