Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/SRyCeSVamOUO_4K9a5ZlOOZRv3Q.roa
File: SRyCeSVamOUO_4K9a5ZlOOZRv3Q.roa (raw, json)
Hash identifier: do5jM4vanPZa+f2bcg5zrxo4bgz/B1xSA9yH9DIhWuA=
Subject key identifier: 49:1C:82:79:25:5A:98:E5:0E:FF:82:BD:6B:96:65:38:E6:51:BF:74
Certificate issuer: /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Certificate serial: 018CC86F0B4ED060F43171363B6116D3AA46
Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/SRyCeSVamOUO_4K9a5ZlOOZRv3Q.roa
Signing time: Tue 02 Jan 2024 04:29:29 +0000
ROA not before: Tue 02 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48748
IP address blocks: 193.107.132.0/22 maxlen: 22
91.214.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0b:4e:d0:60:f4:31:71:36:3b:61:16:d3:aa:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Validity
Not Before: Jan 2 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=491c8279255a98e50eff82bd6b966538e651bf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:49:bc:e0:39:27:c9:f0:2f:92:2a:ce:fa:
b3:f7:c5:27:86:bf:82:b8:f7:fd:a1:41:6c:63:fc:
f0:8a:30:17:35:80:d0:dd:b1:f9:17:84:f3:c0:7a:
dd:14:bb:ac:4e:dc:06:a5:cb:8c:6f:50:7a:2b:39:
d5:ab:60:66:e5:9d:61:4b:f6:49:51:ba:9b:a4:01:
b9:3a:cc:00:f7:cb:fa:40:9b:69:a0:12:50:ce:2e:
7d:cf:5d:3d:46:ce:f3:13:d8:6c:c1:f5:1e:0a:11:
49:df:cd:80:ed:ac:40:b3:c1:e2:9f:e0:09:1c:17:
f5:b6:5f:38:a4:4f:88:d0:1b:1a:41:86:b1:73:ed:
11:2d:fd:3d:db:fa:85:38:ce:24:07:a7:03:6d:20:
b2:f1:27:52:b1:fd:7c:c4:74:04:64:79:be:09:e3:
58:ac:43:20:06:f9:5e:a6:27:7b:0f:d6:ad:09:aa:
ea:e8:46:77:0c:a0:a1:1f:a8:d7:27:28:f2:14:ec:
26:f5:fe:83:39:d1:d3:58:fb:9c:ca:eb:12:ca:b9:
83:f4:28:17:37:69:35:f2:63:ed:ae:28:e6:ad:22:
21:cf:82:fc:07:d2:c9:b3:eb:68:32:28:15:37:b3:
70:a4:04:fa:71:42:7e:fa:22:63:2d:8f:ff:cd:3a:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1C:82:79:25:5A:98:E5:0E:FF:82:BD:6B:96:65:38:E6:51:BF:74
X509v3 Authority Key Identifier:
keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/SRyCeSVamOUO_4K9a5ZlOOZRv3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.132.0/22
193.107.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:95:c9:81:17:59:d4:b0:da:52:32:7a:a7:d2:08:27:59:b8:
48:97:f4:88:e3:eb:aa:8f:2e:0e:c0:00:f7:17:92:91:33:bb:
85:25:bd:15:63:40:2a:9d:d6:90:23:b9:65:31:c3:d4:6e:1b:
7a:9b:63:86:7b:34:c0:16:ac:5e:b8:56:8a:65:c0:bd:28:51:
15:03:53:5a:ef:f2:6b:0e:12:ab:eb:9f:3d:51:2c:b4:7f:e8:
1c:eb:14:a3:1d:ae:76:86:fd:ae:4a:a1:a4:e8:7d:ad:b4:df:
11:b2:01:76:f4:94:be:e0:56:b4:57:62:97:ea:d7:89:4a:e2:
1d:c2:4c:68:21:8d:a5:0c:af:3c:13:30:fb:72:7b:d1:49:66:
a6:41:d9:57:8b:29:61:63:a7:71:40:ca:71:3b:8d:d0:dc:23:
e6:9f:a7:7b:0b:8b:a2:6a:76:fc:81:17:10:fa:0b:3b:cb:27:
69:c9:5f:9e:25:b4:c3:53:5a:bd:8b:a5:6b:b2:b5:1d:d1:80:
5e:8d:c8:d0:50:6f:b2:31:0e:2f:1f:e5:b0:50:dc:58:28:9c:
c8:ba:81:e9:12:f6:73:75:49:8a:e5:7a:1d:c7:7e:77:ec:d0:
40:a7:6f:99:2c:17:f2:2d:bd:41:63:3d:1b:6c:92:e1:9b:89:
5e:93:f2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:42:02 2024 by rpki-client on console-fra.rpki-client.org