Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/juWAiVlr57M8p4pTpksQQxSDgDY.roa
File: juWAiVlr57M8p4pTpksQQxSDgDY.roa (raw, json)
Hash identifier: e6zrFC4DFFbDmWxnOPVCDczMhCo+PQ0lksznJTk7cWY=
Subject key identifier: 8E:E5:80:89:59:6B:E7:B3:3C:A7:8A:53:A6:4B:10:43:14:83:80:36
Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial: 018CC64B6DCE1CF4E4BF288587C7455E3C1F
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/juWAiVlr57M8p4pTpksQQxSDgDY.roa
Signing time: Mon 01 Jan 2024 18:31:21 +0000
ROA not before: Mon 01 Jan 2024 18:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60650
IP address blocks: 193.53.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6d:ce:1c:f4:e4:bf:28:85:87:c7:45:5e:3c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Validity
Not Before: Jan 1 18:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ee58089596be7b33ca78a53a64b104314838036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e4:0d:4d:4f:bb:bd:65:b7:f2:40:48:10:4e:
c8:d1:2b:61:e5:1c:ee:43:a4:99:cf:f0:66:f6:7c:
76:cf:1e:37:8c:1d:3b:c5:5f:d4:54:56:74:2a:32:
63:9c:56:9b:60:a1:eb:15:e9:e6:56:9d:2f:fb:e9:
d1:5c:89:29:8b:68:2d:2e:d3:1f:35:74:b6:6a:77:
b0:16:47:96:af:6a:ce:bd:95:04:b3:ac:6b:7a:b4:
7f:a6:c9:f7:78:2c:c5:71:2a:c9:81:e1:81:66:16:
98:2f:93:02:1e:b7:06:31:7f:e0:a1:03:3c:65:10:
c6:3f:24:b6:d0:f7:be:7f:cf:40:65:ca:ce:be:5a:
1a:8a:f7:05:5a:fc:96:09:12:cb:b5:86:22:4d:a5:
05:35:5a:1a:be:ed:8a:97:66:b7:60:69:3d:3c:2c:
51:de:05:47:03:d6:11:a3:2a:02:56:77:2d:43:83:
65:27:dc:65:c3:5d:e5:a9:e0:53:ca:73:7f:5f:c9:
90:ee:60:f7:d6:77:44:3a:48:ed:ea:44:a2:1f:19:
f8:2e:bc:c9:3b:14:28:66:ef:6d:32:03:ab:ea:84:
9c:1d:9d:7e:3c:7e:ed:7b:6e:50:b1:ec:36:7f:73:
11:dd:b4:cf:28:a8:c3:d2:d1:f1:f7:ca:ef:f3:97:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E5:80:89:59:6B:E7:B3:3C:A7:8A:53:A6:4B:10:43:14:83:80:36
X509v3 Authority Key Identifier:
keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/juWAiVlr57M8p4pTpksQQxSDgDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.8.0/23
Signature Algorithm: sha256WithRSAEncryption
69:6c:5b:f6:04:85:5e:32:40:20:27:65:8a:94:5b:9c:eb:7f:
de:2e:31:d6:04:64:13:89:91:cb:f2:90:bc:2f:a6:da:bd:6e:
f9:bd:13:6f:ba:65:d9:9f:30:e7:30:20:60:f5:9c:1c:78:b7:
19:87:8b:24:b1:ce:b5:55:b4:e6:fd:58:7e:67:80:6c:0c:41:
34:31:16:ca:e0:e6:0d:f1:37:27:fe:b8:f9:86:08:80:68:c3:
30:21:fd:94:42:06:59:3c:fc:26:48:58:e2:31:de:ec:d9:ec:
eb:26:6b:f9:58:35:95:1e:e8:a7:42:76:d5:ae:d0:8f:35:54:
ff:08:f0:9a:26:1b:1b:10:4f:88:e7:e3:29:d8:3f:c3:66:b0:
cc:c5:3f:d6:ef:51:ac:51:b4:fc:85:cc:29:f9:00:70:65:9e:
2c:3f:1c:ff:30:7e:42:3e:37:31:96:31:62:8b:fa:a7:13:bf:
0f:fa:33:77:f4:4b:32:13:93:9d:c4:0a:33:72:4d:c5:06:4d:
ba:7e:42:56:36:a1:58:00:74:b8:97:2d:5b:03:71:a0:73:ae:
ee:14:cc:60:e2:88:b1:28:d4:9a:57:7a:fd:ed:46:8f:55:fa:
37:04:f6:b4:a7:8c:ee:a3:23:49:24:e0:0b:e7:40:a2:55:69:
3f:8f:48:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:12 2024 by rpki-client on console-fra.rpki-client.org