Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/SimeibHjeF3UW4gHBFLSr6G29cw.roa
File: SimeibHjeF3UW4gHBFLSr6G29cw.roa (raw, json)
Hash identifier: JSZhO21UIzWJy+D8wTshkBEHsRJ9CzsCE4zEasxUagQ=
Subject key identifier: 4A:29:9E:89:B1:E3:78:5D:D4:5B:88:07:04:52:D2:AF:A1:B6:F5:CC
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018CC501546F8572A2A9294B90D8680D33A0
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/SimeibHjeF3UW4gHBFLSr6G29cw.roa
Signing time: Mon 01 Jan 2024 12:30:47 +0000
ROA not before: Mon 01 Jan 2024 12:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210512
IP address blocks: 193.3.177.0/24 maxlen: 24
62.3.13.0/24 maxlen: 24
45.130.68.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:54:6f:85:72:a2:a9:29:4b:90:d8:68:0d:33:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a299e89b1e3785dd45b88070452d2afa1b6f5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:cd:f1:b5:3c:f5:ec:50:e5:cd:64:33:eb:
90:73:76:7a:80:30:b5:53:a2:50:bb:f5:9d:d1:57:
91:91:33:43:86:d3:0e:10:1c:61:c6:3a:75:1a:0e:
8e:68:1b:f3:81:ce:3c:b5:7a:8d:b1:35:ca:cd:a0:
ec:26:14:1b:ca:09:ef:7b:36:97:86:6b:5b:1b:d8:
27:1e:8c:71:08:a1:36:05:86:3f:00:9b:f9:75:e3:
33:b8:0b:7d:3e:e2:e7:79:78:18:47:b5:d9:54:2e:
03:20:56:29:03:5b:9d:ae:3e:3f:01:0e:bb:e9:10:
f7:04:66:6f:4c:eb:fb:3a:75:71:01:6e:a8:83:18:
56:14:ed:12:8a:48:56:9c:87:22:42:89:4b:6a:a0:
7a:22:f9:c7:2a:8b:c7:ac:b4:a3:f6:c5:28:1c:d5:
0f:71:e0:a8:97:04:42:1e:88:70:fe:8e:11:63:72:
2f:57:33:4a:eb:62:ff:1b:8e:41:de:19:37:ca:1e:
33:44:fe:00:e6:49:dd:d8:01:9e:da:2b:c6:a3:78:
d3:52:db:40:dc:10:cc:19:34:02:9f:3d:9d:13:b8:
63:87:51:ab:35:50:af:59:e7:ef:52:0d:6c:59:ce:
0a:e8:2f:4a:1a:5b:0d:a6:78:eb:08:4f:38:4f:42:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:29:9E:89:B1:E3:78:5D:D4:5B:88:07:04:52:D2:AF:A1:B6:F5:CC
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/SimeibHjeF3UW4gHBFLSr6G29cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.68.0/22
62.3.13.0/24
193.3.177.0/24
Signature Algorithm: sha256WithRSAEncryption
df:29:bb:a8:18:e6:a5:08:cd:aa:17:31:c4:e2:da:54:22:ca:
ea:c8:0a:77:1b:8b:a8:93:48:ae:20:39:8f:d0:29:0c:ab:ee:
88:d0:e3:35:4a:aa:ea:80:8f:39:cc:07:f0:ae:b8:69:a2:69:
28:59:48:92:be:b7:b4:22:4f:f7:81:cf:55:d6:12:a9:ab:2a:
7f:3f:07:6d:7c:34:14:f5:12:24:6f:9c:6f:7f:e1:f3:e6:04:
09:11:a1:3c:ee:81:4f:ff:90:ac:04:6f:51:5e:5f:ca:ee:f2:
b9:2d:7d:20:c0:70:16:ad:69:1f:df:14:23:f6:0e:3c:af:7d:
ad:de:dd:0f:a1:fd:0b:e1:62:6c:56:1a:cd:85:c8:2b:23:06:
6a:0d:e1:20:11:81:b7:cf:cf:48:d0:01:df:d0:2b:c7:e2:23:
ae:13:b0:d2:f8:4e:be:42:75:61:d5:04:9c:6a:4f:f0:94:1e:
71:d9:e6:5b:d0:e3:e6:38:fe:58:55:15:0d:c0:33:c0:71:da:
83:c0:0f:e1:80:78:d9:2d:78:26:51:20:a0:ef:e5:08:15:ac:
a8:1b:79:fb:cd:cc:60:87:32:3a:0c:bb:11:0a:2c:6f:fe:51:
de:65:e6:e4:0d:6d:1a:7b:57:8b:ef:05:63:4f:a4:67:48:82:
b7:1c:6d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:41:46 2024 by rpki-client on console-fra.rpki-client.org