Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/tBctdcfUyjjmYs10CYzTyXmpUWI.roa
File: tBctdcfUyjjmYs10CYzTyXmpUWI.roa (raw, json)
Hash identifier: br5FLdAbF+6Tn4iN+8Q+Z93ieo9WXS7lM/ByPWRwQbo=
Subject key identifier: B4:17:2D:75:C7:D4:CA:38:E6:62:CD:74:09:8C:D3:C9:79:A9:51:62
Certificate issuer: /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Certificate serial: 018FE2A6686ACA66E4F7AE8705D11365F2A5
Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/tBctdcfUyjjmYs10CYzTyXmpUWI.roa
Signing time: Tue 04 Jun 2024 09:48:27 +0000
ROA not before: Tue 04 Jun 2024 09:48:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200016
IP address blocks: 193.142.35.0/24 maxlen: 24
213.226.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e2:a6:68:6a:ca:66:e4:f7:ae:87:05:d1:13:65:f2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Validity
Not Before: Jun 4 09:48:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4172d75c7d4ca38e662cd74098cd3c979a95162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:89:17:b9:4d:d4:42:66:4a:81:a3:39:95:
44:f0:dd:3b:a4:60:04:fd:5d:d8:71:9a:50:83:12:
b4:cd:05:ec:4e:1b:4e:92:8e:6c:6e:b5:18:7c:14:
46:b6:f7:2e:c4:ad:e0:c7:71:d7:d5:2c:66:96:82:
10:ac:c0:e0:3f:23:5c:b3:54:27:79:8f:6b:1c:90:
fb:c2:7f:12:c4:f0:3e:ae:a5:e5:af:cd:da:d8:b3:
78:02:c6:d2:3c:4f:4d:e8:e7:6f:9a:be:7c:6e:c5:
8c:0d:38:04:38:3c:67:80:57:0c:72:34:60:b4:a3:
c9:44:d7:7f:fc:03:64:b1:c8:51:3c:99:21:e0:14:
19:a4:80:e5:c9:49:4c:e1:74:33:21:4a:fe:b0:65:
c2:61:41:c9:42:c1:4c:b5:cc:da:bf:f4:76:f3:87:
50:b7:2b:40:fc:f8:6f:ec:01:f4:5b:0c:ad:59:88:
2a:d7:ca:88:d7:22:07:f2:96:6a:1f:dd:4c:a8:f7:
24:24:5e:bd:bd:8e:6b:08:86:32:e4:92:43:bb:66:
44:cb:c9:e3:12:7d:34:42:38:74:96:90:24:6f:80:
04:2e:47:d8:ef:89:8d:75:0d:2b:d1:9c:ee:cc:62:
40:e6:53:d2:3a:d8:97:bf:39:10:13:04:6d:75:6d:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:17:2D:75:C7:D4:CA:38:E6:62:CD:74:09:8C:D3:C9:79:A9:51:62
X509v3 Authority Key Identifier:
keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/tBctdcfUyjjmYs10CYzTyXmpUWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.35.0/24
213.226.118.0/24
Signature Algorithm: sha256WithRSAEncryption
77:87:4b:38:59:ed:d8:85:11:b6:99:5d:0a:e6:e3:bc:6c:d9:
3c:ac:d6:ea:65:3f:9f:38:0f:70:f3:3f:de:7d:fa:d2:74:5f:
94:42:06:ab:e9:77:8c:c1:b8:3c:99:49:8b:df:c1:4e:b6:b5:
e4:37:f9:9d:a5:b1:b1:b6:f4:bf:e4:7f:f4:bc:b2:f9:3d:b5:
90:dc:19:6f:f7:41:65:6e:69:e2:94:84:f7:1a:a2:8a:16:3a:
65:6a:99:3f:e0:46:32:07:fe:19:61:72:3d:90:22:b7:b7:2e:
fa:d7:ba:8d:d5:c9:8b:32:bb:c8:47:d3:2a:fc:03:af:b8:43:
ab:8b:32:ce:7a:aa:65:07:81:cd:38:0a:10:96:e4:8e:fb:c4:
16:51:0d:1e:e3:ae:92:76:52:b0:b2:94:16:91:46:a6:18:ad:
93:a3:12:ea:c0:a6:f6:d2:70:e0:00:b4:b5:da:06:fd:df:59:
c0:48:44:ef:82:e6:e7:d4:e2:e5:12:5b:e2:0a:43:94:88:3f:
7c:77:4b:ac:15:79:82:06:13:83:0c:a7:d5:44:4d:18:c0:7b:
15:bd:9e:ee:9c:8e:33:7a:4a:c1:fd:df:3f:9f:10:85:f0:b0:
83:a0:1f:75:8d:ef:e6:c3:a3:e0:e5:96:cd:95:42:05:9b:a4:
18:d6:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:38:23 2024 by rpki-client on console-fra.rpki-client.org