Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Su--GPLaUniDxjLlmuXqyIzrOEI.roa
File: Su--GPLaUniDxjLlmuXqyIzrOEI.roa (raw, json)
Hash identifier: czvxQKdYALYRhLrjAh1rVw2bfg2hhFqg/sKxKlA4AJk=
Subject key identifier: 4A:EF:BE:18:F2:DA:52:78:83:C6:32:E5:9A:E5:EA:C8:8C:EB:38:42
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A7B8435D53C21EC2025AE1355B4E5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Su--GPLaUniDxjLlmuXqyIzrOEI.roa
Signing time: Tue 02 Jan 2024 12:33:50 +0000
ROA not before: Tue 02 Jan 2024 12:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52000
IP address blocks: 194.87.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:7b:84:35:d5:3c:21:ec:20:25:ae:13:55:b4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4aefbe18f2da527883c632e59ae5eac88ceb3842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:61:4c:0d:6e:f4:39:d2:fa:91:a3:07:4d:
87:f8:50:c1:26:7e:c8:03:7c:b3:cd:b9:b1:2d:d0:
65:c9:5f:83:b3:a0:c8:3d:30:0c:09:81:04:2c:9b:
46:19:72:0a:cd:ed:90:69:5f:64:3e:2f:dd:5e:cd:
d1:1d:0a:49:04:ca:93:4a:1d:f6:ba:32:2d:82:a8:
28:8c:67:2c:a0:51:25:b0:86:15:00:b8:7c:e5:ff:
07:e1:1d:1d:5b:5a:2b:36:d3:1c:ef:e5:d9:85:1d:
fd:74:c4:07:e2:c0:d9:ce:fc:1b:12:27:01:eb:b2:
6f:58:53:21:15:a4:1a:39:bd:c4:aa:0e:de:bf:6d:
2d:69:36:8b:80:df:8e:c3:d5:a2:70:81:68:b7:eb:
8c:71:b1:e4:3e:15:58:10:d6:80:81:6a:89:cc:81:
be:4a:3d:31:bb:af:ff:79:a1:b6:b1:07:26:52:41:
f5:43:b6:02:4a:ae:f9:0b:94:fc:c1:1c:c5:e6:7f:
30:e7:10:2f:e4:fc:d2:ae:54:42:60:2c:ed:88:6a:
95:f8:c8:9d:be:88:da:79:7b:f5:94:e7:04:4d:7c:
d3:e9:22:22:ac:9d:d2:82:01:6d:35:3a:f9:52:51:
98:04:b1:20:f8:bc:9b:bc:21:1e:ee:93:c4:f8:2d:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EF:BE:18:F2:DA:52:78:83:C6:32:E5:9A:E5:EA:C8:8C:EB:38:42
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Su--GPLaUniDxjLlmuXqyIzrOEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.148.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e4:21:5d:46:0d:c3:5b:fa:d2:8e:29:e8:ab:1f:1c:0c:4e:
f6:a0:21:78:94:55:00:b1:16:c7:65:dc:6d:e9:20:82:b9:52:
24:d7:14:1a:4e:a2:b0:8a:95:68:3a:d8:21:47:c2:36:3a:45:
84:2d:bd:64:2a:97:17:dc:5a:b6:3a:58:fd:b5:17:97:56:b2:
6e:64:7b:80:21:36:25:aa:54:56:96:35:42:6d:85:31:99:f8:
5b:b0:cd:10:7b:5e:58:f6:1f:1a:4f:a9:ea:d2:15:d1:55:8d:
0b:bd:43:9b:63:c6:d5:2e:2e:4f:b1:50:b9:e9:38:ea:c7:82:
9d:ec:e4:fa:55:40:57:d7:9d:c3:9f:f2:2a:f4:50:14:0b:f5:
2e:3e:fc:30:85:7a:a6:ad:50:c6:50:fa:a2:b9:34:3e:eb:bd:
b0:50:af:dd:8b:f6:e1:de:8c:c9:d1:d1:bd:97:cb:ab:49:26:
bb:74:b3:57:f5:b6:0a:66:56:e6:be:8d:ca:5e:95:76:07:c2:
93:c5:26:b3:c7:6e:61:86:ca:10:2e:c2:34:0c:60:91:17:9d:
26:2b:75:14:18:68:ff:88:07:f9:ed:41:65:37:b9:ad:8a:bc:
18:8f:1b:27:82:7c:8e:54:55:40:77:d3:00:be:72:c3:01:ac:
3e:57:b8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:14:51 2024 by rpki-client on console-ams.rpki-client.org