Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/41mXRQL_6c_u-zlWsKLyMX__SQM.roa
File: 41mXRQL_6c_u-zlWsKLyMX__SQM.roa (raw, json)
Hash identifier: MiGT/6lvO3Sx8T6nIqn7eZojy/zlrSL7Zejo6XeOp+A=
Subject key identifier: E3:59:97:45:02:FF:E9:CF:EE:FB:39:56:B0:A2:F2:31:7F:FF:49:03
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A8AC4CDE1ED0F997F8D8C8F973E22
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/41mXRQL_6c_u-zlWsKLyMX__SQM.roa
Signing time: Tue 02 Jan 2024 12:33:54 +0000
ROA not before: Tue 02 Jan 2024 12:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208226
IP address blocks: 194.87.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:8a:c4:cd:e1:ed:0f:99:7f:8d:8c:8f:97:3e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e359974502ffe9cfeefb3956b0a2f2317fff4903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2f:4f:6e:70:7d:b5:c0:2d:70:35:d2:0f:14:
7a:21:54:07:0f:95:07:63:64:88:2b:62:e7:4c:8a:
14:16:11:7c:9d:8a:d2:af:55:17:98:5d:de:d4:21:
7d:ff:a7:96:55:fd:9d:00:d5:ff:f2:f8:89:42:eb:
47:99:0b:4f:91:2f:ef:3b:b7:d7:7d:84:0b:70:89:
fb:f6:f0:15:82:7c:3e:a1:3a:19:9d:97:44:cf:ad:
22:da:12:93:75:b4:18:41:08:40:f8:b1:37:d9:e2:
56:f9:84:9d:0a:0b:ac:43:2d:aa:ef:d6:c8:0c:40:
ca:89:bd:90:b8:43:7e:2b:3a:25:4a:32:59:09:b1:
1d:4e:6b:59:4a:5e:c5:98:7a:10:80:65:b6:4e:fb:
e5:ef:e0:b9:15:fc:42:4a:19:c1:16:08:66:64:2f:
54:1e:cc:51:ba:4f:3f:9a:02:44:6d:ad:a5:d9:8f:
88:30:76:be:b8:95:5c:fa:b9:ef:66:c1:8b:42:9d:
3c:80:f9:eb:b7:5a:33:09:a6:e6:1c:91:0b:49:69:
97:c6:70:53:b7:77:ce:3d:6a:ed:84:41:b1:63:cf:
31:24:f1:24:bc:9c:db:09:96:5d:6a:93:68:c7:d9:
fd:f7:17:7d:09:cc:f4:96:9c:40:70:2d:5b:ef:9c:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:97:45:02:FF:E9:CF:EE:FB:39:56:B0:A2:F2:31:7F:FF:49:03
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/41mXRQL_6c_u-zlWsKLyMX__SQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.217.0/24
Signature Algorithm: sha256WithRSAEncryption
34:36:74:f8:a8:9b:9f:fe:78:c4:ec:62:37:e9:fa:44:07:44:
ae:34:a0:6e:34:11:3b:f8:38:1f:3e:33:40:d1:64:65:ea:21:
78:4c:a6:0e:85:c1:87:bc:2a:08:8d:7d:de:a2:39:6b:50:9c:
d9:8c:ba:04:9d:1e:de:f4:5f:b4:53:31:0e:40:d3:ae:da:3a:
5d:96:82:c4:d8:b5:ef:f7:f7:f4:64:3f:c0:f0:54:01:2f:09:
16:6d:cd:6c:98:bf:44:a3:60:4a:8c:39:33:dd:23:3f:6d:1b:
30:98:77:a9:65:e1:43:64:ca:bc:1b:7d:89:c3:3a:4a:63:ba:
19:f9:42:30:d1:a1:b2:3d:76:4a:ce:73:4b:75:36:a3:35:f5:
c9:1c:1e:6b:f6:44:a6:70:40:37:b4:dc:ad:51:c2:c8:91:51:
d0:56:04:ee:c1:b5:50:39:96:5f:5c:83:c0:86:1c:be:b7:bb:
8e:f7:6e:ff:48:de:54:c4:29:dc:23:3c:da:62:8a:ab:e0:75:
2f:88:de:07:0b:08:9c:64:4a:a8:49:14:c0:aa:b9:37:3e:2c:
a5:5b:a8:94:f0:4b:e0:cd:d2:8f:57:93:5a:a0:5d:4e:47:14:
84:6a:4d:09:5a:41:60:95:8e:59:2b:74:89:8f:60:69:51:18:
62:2d:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:34:10 2024 by rpki-client on console-fra.rpki-client.org