Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/h6MuH8LSzeNSY-AGqNBnadou0Zs.roa
File: h6MuH8LSzeNSY-AGqNBnadou0Zs.roa (raw, json)
Hash identifier: 4UKmQi0w17/QyUc6pxD999QmnGTA+xdW4Lh4iKuhLik=
Subject key identifier: 87:A3:2E:1F:C2:D2:CD:E3:52:63:E0:06:A8:D0:67:69:DA:2E:D1:9B
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0190C02FC498C2677358E9C5FCDFDD09658B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/h6MuH8LSzeNSY-AGqNBnadou0Zs.roa
Signing time: Wed 17 Jul 2024 10:14:34 +0000
ROA not before: Wed 17 Jul 2024 10:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 272825
IP address blocks: 193.37.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:2f:c4:98:c2:67:73:58:e9:c5:fc:df:dd:09:65:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 17 10:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87a32e1fc2d2cde35263e006a8d06769da2ed19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:61:39:23:5b:bb:41:64:ed:aa:31:fe:03:
10:13:28:73:b7:61:74:52:b7:b1:2a:9b:b3:11:23:
54:fa:8b:8f:5b:01:8a:53:87:24:43:c3:9a:36:8a:
0e:6f:fb:a4:d9:db:48:e4:17:eb:b0:01:a0:1b:b3:
b5:cb:35:1f:30:28:db:40:41:10:ad:90:15:2e:b5:
5a:0a:12:90:f8:2e:11:96:7f:24:0b:ae:bd:22:64:
c4:8b:65:f1:f3:9a:13:ca:32:1f:b5:b0:ec:6d:d7:
81:35:aa:19:6f:40:4b:ce:b4:7a:a6:b5:d2:98:e3:
bc:67:2a:ec:87:fb:68:68:5e:be:29:87:31:d3:22:
cc:56:af:03:e9:8e:79:48:4a:3b:ff:70:ca:c1:c0:
d8:91:82:e1:94:e9:c6:8c:cc:68:51:87:44:d8:3e:
98:84:f8:03:72:02:13:42:cd:c9:de:b2:7e:5a:f4:
8b:03:f2:3a:dd:f6:23:0d:eb:33:73:8c:ec:0a:f0:
1c:30:73:27:36:c5:94:9d:1a:d1:e8:05:0a:ef:bc:
7b:b1:f1:51:8f:b1:8d:83:9f:78:6e:ba:6b:16:f7:
d3:99:40:9d:b0:97:ba:02:7c:9c:d1:b4:39:11:6c:
04:06:6c:af:6f:d1:d7:62:00:4e:11:6b:95:fa:83:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A3:2E:1F:C2:D2:CD:E3:52:63:E0:06:A8:D0:67:69:DA:2E:D1:9B
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/h6MuH8LSzeNSY-AGqNBnadou0Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.200.0/22
Signature Algorithm: sha256WithRSAEncryption
35:47:2c:2a:94:ab:4e:53:7a:6b:c9:b2:e0:00:9c:34:d2:a8:
d5:ec:80:ce:15:09:62:2e:7e:9d:d5:c5:14:50:a5:da:58:f5:
03:1f:2e:65:5b:ed:77:e9:90:17:3f:81:d0:1b:db:9e:01:a0:
8a:d2:f4:c1:08:9d:68:83:5e:c0:52:33:59:eb:91:8c:95:64:
65:cf:a4:37:33:c8:b4:99:e4:c2:b4:f6:c6:c0:41:e7:c0:92:
9b:aa:ef:65:f8:41:d9:3b:85:ee:45:35:65:4a:59:39:df:4e:
fd:86:45:bd:86:4d:fd:d4:b8:c8:93:87:5b:d2:d4:9f:37:65:
ea:98:50:c2:da:31:67:0d:91:db:3c:24:95:fb:c0:8c:72:7b:
84:16:86:f8:cf:a9:ba:65:24:16:93:f5:30:96:b1:a1:06:f2:
ab:4f:b7:1b:33:51:df:b5:5f:0e:b0:09:56:d2:df:31:88:01:
ce:d6:0d:ec:97:d2:16:9e:90:bf:92:23:30:a4:c6:fa:7d:5c:
ef:5b:04:da:14:9b:a7:25:e3:b0:ca:3f:4b:d2:e2:95:91:23:
08:c8:5c:28:42:cf:b6:8a:68:6e:d6:5c:e1:c1:ce:f6:68:62:
83:90:46:3c:23:2f:c6:b6:5b:5e:5f:77:6f:2a:3e:11:b5:55:
36:63:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:21:12 2024 by rpki-client on console-ams.rpki-client.org