Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/8guKzh-wum6eo80a91EAcpBPOJA.roa
File: 8guKzh-wum6eo80a91EAcpBPOJA.roa (raw, json)
Hash identifier: 59dGwTUNhH6opuqpg92qXM/zBUa6ifHxqF1bns9f3jE=
Subject key identifier: F2:0B:8A:CE:1F:B0:BA:6E:9E:A3:CD:1A:F7:51:00:72:90:4F:38:90
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 018CCA2B8649BDFDA6D3E43F3201405C63F7
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/8guKzh-wum6eo80a91EAcpBPOJA.roa
Signing time: Tue 02 Jan 2024 12:34:59 +0000
ROA not before: Tue 02 Jan 2024 12:34:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15943
IP address blocks: 193.39.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:86:49:bd:fd:a6:d3:e4:3f:32:01:40:5c:63:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Jan 2 12:34:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f20b8ace1fb0ba6e9ea3cd1af7510072904f3890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:75:15:ce:3a:0f:33:bc:1c:89:dd:6e:e2:
64:41:57:48:aa:d7:d5:8f:5b:0e:f3:33:01:c8:f6:
b5:42:38:d3:9f:c6:cc:69:9b:d7:f4:c1:9f:f5:57:
cd:e6:29:68:f0:21:f2:68:48:bf:a2:9e:ef:1a:c2:
b3:57:71:a9:5f:1c:ff:55:d2:2f:2a:b3:ae:f6:84:
ae:01:0d:ff:f8:a7:60:3e:3c:e5:21:42:d6:df:a2:
c2:b8:7d:c1:90:27:38:d0:ec:50:5a:86:af:5a:08:
48:19:fc:aa:df:fa:a8:b9:e4:2f:2d:2c:c9:e3:a1:
6b:de:e4:4a:d2:d2:5b:4f:97:ae:24:f0:55:8b:e2:
bc:36:e5:ec:c5:18:b1:b0:af:13:21:6b:22:b8:73:
46:e6:2d:33:8f:0a:e3:11:e9:01:2f:c3:11:93:e3:
26:f6:39:43:3e:e3:46:6e:7a:ae:be:ee:3a:64:be:
b5:ba:fd:14:72:46:c9:02:55:a3:5e:b3:af:04:c5:
27:0f:2c:51:77:84:df:71:5c:ec:15:91:05:f6:8a:
bc:ef:7c:6b:b2:18:74:66:a2:fe:57:4e:3d:5a:64:
64:7c:09:b6:4e:df:2d:08:b6:a9:8d:ef:ce:c6:fc:
c4:59:22:d6:10:a7:97:ac:a7:9d:43:6c:a7:5e:da:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0B:8A:CE:1F:B0:BA:6E:9E:A3:CD:1A:F7:51:00:72:90:4F:38:90
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/8guKzh-wum6eo80a91EAcpBPOJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.204.0/23
Signature Algorithm: sha256WithRSAEncryption
58:59:c0:3c:95:7c:e0:1c:6b:9a:39:6d:0c:7c:4b:42:01:6d:
78:ed:03:29:b7:aa:06:30:e1:f8:70:f4:a6:ae:87:a3:56:db:
0f:22:9b:d2:b2:3f:8e:c7:af:cf:00:98:4b:ca:d0:01:f7:e9:
d5:5d:11:c2:bd:5f:59:88:8b:07:fb:c4:dc:02:e6:aa:a4:78:
eb:38:47:4e:73:73:94:ea:af:98:f0:8c:f2:b6:22:6d:83:ea:
ff:17:57:34:12:6a:0e:4f:3c:58:ea:2d:cc:bb:f0:d0:15:7c:
8a:77:3b:d8:d9:5e:55:51:b4:5d:6c:b4:e8:dd:b6:77:48:5d:
44:62:ad:c3:0a:9d:7a:45:0b:66:ad:6d:2d:5c:28:21:74:b7:
62:d9:11:3b:4b:31:b0:55:6b:2f:d3:85:c8:e9:11:64:6a:b0:
6e:6c:8a:25:15:4c:eb:c1:7b:e1:5d:60:94:cc:75:6e:5f:ca:
ae:32:64:36:d8:41:6b:00:15:a8:c9:ff:8d:ed:48:c4:c7:26:
83:75:8c:9b:33:f7:c6:8d:56:ea:df:db:3f:2c:13:b5:ef:a5:
e7:f1:e5:3e:ef:c5:c1:27:58:7d:ef:98:4e:83:a1:1e:7f:0a:
d8:6f:01:39:4b:0a:82:38:19:b1:de:a6:ab:ec:ed:ef:eb:48:
b8:73:be:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:03:24 2024 by rpki-client on console-ams.rpki-client.org