Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/SuFx2I1RoMo_gKADFCZ1j4zrCko.roa
File: SuFx2I1RoMo_gKADFCZ1j4zrCko.roa (raw, json)
Hash identifier: ztuUytWmYAuW/U8QKw/5sjtZ3KJyD0eKiOR4HWFamzM=
Subject key identifier: 4A:E1:71:D8:8D:51:A0:CA:3F:80:A0:03:14:26:75:8F:8C:EB:0A:4A
Certificate issuer: /CN=782668f3ba477de2052acc110b19ed4b611309db
Certificate serial: 01857227FA4764BBBE41125829B6B3C97214
Authority key identifier: 78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/SuFx2I1RoMo_gKADFCZ1j4zrCko.roa
Signing time: Mon 02 Jan 2023 11:05:00 +0000
ROA not before: Mon 02 Jan 2023 11:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29684
IP address blocks: 193.105.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/eCZo87pHfeIFKswRCxntS2ETCds.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/eCZo87pHfeIFKswRCxntS2ETCds.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Jul 2023 14:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:fa:47:64:bb:be:41:12:58:29:b6:b3:c9:72:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782668f3ba477de2052acc110b19ed4b611309db
Validity
Not Before: Jan 2 11:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ae171d88d51a0ca3f80a0031426758f8ceb0a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:7c:13:fe:58:a4:07:c4:67:48:09:0d:39:
7b:89:71:79:c7:04:af:d7:10:46:8f:9c:bb:32:a7:
4c:30:70:d7:bb:19:ed:bf:05:b4:fe:a0:78:af:31:
36:cd:bd:de:dc:0b:af:2f:92:ce:08:de:58:7f:1f:
9c:01:3e:68:11:f8:68:aa:e7:df:d0:f1:58:a2:32:
ca:ee:2f:27:a7:4f:98:ab:f2:8d:2f:ea:ee:c3:a5:
63:5a:8a:d5:3c:e6:a1:8a:31:85:ee:74:b5:59:e4:
4d:89:e9:22:19:a2:8f:83:ab:3d:01:e8:8f:d3:aa:
12:9d:f3:5f:ea:2d:23:a6:9f:79:39:1b:a0:6d:89:
8d:10:5a:e2:a5:00:9c:06:49:91:ab:ce:73:0d:62:
f5:ac:fd:a4:ca:95:8f:a4:82:b2:1d:e1:20:ef:3d:
b6:1c:b5:91:f5:54:3e:b0:3d:30:76:36:4b:c8:39:
51:0e:77:21:39:0f:7b:5c:27:bc:1c:a0:e5:9f:a2:
91:2b:32:7a:34:f8:d3:9d:66:b4:34:2e:9b:27:ba:
7a:d5:9e:ca:70:e5:2b:bb:28:a3:80:11:47:51:a3:
e7:e1:9b:6e:c7:76:29:49:79:4a:a3:50:69:61:f1:
80:bc:cb:1d:6a:1d:a6:f4:40:87:0a:d4:ff:d0:c7:
81:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E1:71:D8:8D:51:A0:CA:3F:80:A0:03:14:26:75:8F:8C:EB:0A:4A
X509v3 Authority Key Identifier:
keyid:78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/SuFx2I1RoMo_gKADFCZ1j4zrCko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/eCZo87pHfeIFKswRCxntS2ETCds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.25.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8e:d9:f4:f8:ba:a9:3f:53:b8:99:a6:67:d9:d5:05:ac:7c:
e3:7c:84:8f:0b:7c:b0:fe:a0:88:49:ea:bc:0f:53:1b:f6:9b:
35:d0:3d:fb:69:15:dd:04:f0:ad:22:c0:95:cd:d7:b3:11:d1:
76:47:59:a8:0f:8d:3c:ca:ba:fa:f4:c9:b9:2a:f0:75:07:0e:
e5:d0:8c:7d:96:64:0d:37:35:b6:c9:fc:e8:5a:4e:61:27:35:
47:4f:3d:17:8d:d0:e3:a7:e4:fa:27:f1:67:6a:f2:1d:ae:a1:
11:bb:5b:57:73:4e:44:35:65:61:dd:fc:ee:40:e2:4d:07:91:
99:de:23:20:b8:91:bb:9f:18:af:91:ed:d3:4e:a6:50:23:3e:
23:79:40:d5:50:f4:81:35:35:cc:fc:21:05:61:ba:dd:b9:d3:
65:91:e5:ce:f9:a5:e5:49:d1:a2:1c:db:4b:4d:eb:0d:50:1d:
7b:01:cb:96:6a:1d:3e:d6:17:d3:56:0b:68:0e:08:88:0f:9a:
f0:e7:03:a2:a3:46:60:4a:2f:91:09:ae:28:ce:aa:82:c4:b9:
ce:a8:b3:68:53:05:93:5a:f2:e2:93:1b:3c:54:1f:44:73:64:
d5:85:19:c7:70:29:b9:36:0d:f9:0b:44:31:9d:79:a8:05:32:
13:a8:24:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 22:47:53 2023 by rpki-client on console-ams.rpki-client.org