Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/TkuoKNoQPuHIex2Ww6e0ymibQRg.roa
File: TkuoKNoQPuHIex2Ww6e0ymibQRg.roa (raw, json)
Hash identifier: 12MNbJ6uSqE09Oeeyu+qgxiZunl/2jWZBB/NhcI1JGg=
Subject key identifier: 4E:4B:A8:28:DA:10:3E:E1:C8:7B:1D:96:C3:A7:B4:CA:68:9B:41:18
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 018CC80116AFFC1449864191CBEED6E27727
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/TkuoKNoQPuHIex2Ww6e0ymibQRg.roa
Signing time: Tue 02 Jan 2024 02:29:23 +0000
ROA not before: Tue 02 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211493
IP address blocks: 193.32.84.0/24 maxlen: 24
2a10:d2c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:16:af:fc:14:49:86:41:91:cb:ee:d6:e2:77:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Jan 2 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e4ba828da103ee1c87b1d96c3a7b4ca689b4118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:53:61:e4:c4:ac:47:da:69:a4:9c:ca:8f:
20:c4:da:cf:51:60:5d:38:05:6b:af:a6:33:19:90:
89:9e:ba:05:8a:f2:e1:76:f7:14:e3:dc:a4:62:5d:
4d:e9:3d:0b:cb:b7:8b:17:90:57:96:21:58:b9:12:
08:98:48:cd:fa:68:d8:63:87:18:0e:6b:40:c9:d6:
b3:2e:16:80:87:f6:28:09:21:4f:55:e3:ef:76:ca:
7e:4d:85:96:49:6c:d1:b7:e1:70:c4:67:69:d5:e2:
38:31:ff:ae:9d:af:eb:30:68:0a:64:9a:ae:cc:79:
61:37:e2:5e:f5:eb:c7:36:a8:1a:ee:4e:b2:ec:bc:
05:a0:5b:0d:b9:d0:34:9c:c2:bb:ed:e4:13:05:45:
b8:19:04:66:5e:8c:de:24:2f:68:dc:9f:75:ea:8b:
09:ad:a3:a0:f7:6d:c0:c4:e0:b4:6c:6b:3f:a0:75:
d9:ae:26:7f:43:8f:8b:fa:bf:c3:e3:39:5f:d9:4d:
bc:4e:a2:66:28:59:99:2f:ca:fe:96:67:39:d7:03:
d2:62:7a:c7:1a:39:f2:37:d1:31:88:96:9a:0e:21:
84:e1:48:9f:82:2f:5e:6b:75:da:45:a8:b3:8b:b2:
99:3f:10:b0:3a:d8:ca:35:21:15:ec:60:95:55:6e:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4B:A8:28:DA:10:3E:E1:C8:7B:1D:96:C3:A7:B4:CA:68:9B:41:18
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/TkuoKNoQPuHIex2Ww6e0ymibQRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.84.0/24
IPv6:
2a10:d2c0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:f8:4b:16:4d:ef:2b:75:65:87:2b:af:80:9f:28:fa:86:51:
7f:64:06:3a:43:6a:f4:36:86:3d:42:bd:0d:76:04:ab:11:04:
ec:c8:8b:72:e9:c1:05:63:22:a5:d0:94:4b:61:97:45:97:0a:
50:5f:8b:4f:69:e1:45:a7:a9:c9:2d:10:b8:08:9f:98:3e:c5:
34:a8:ee:a7:15:bd:e0:1b:0d:66:b2:6d:c3:af:cd:64:30:bd:
a8:ac:23:9c:c4:b0:43:bf:e2:5e:92:bc:a5:8b:c1:14:4b:71:
9d:ed:96:07:02:b0:e7:22:2c:88:13:93:2c:5e:61:ec:6d:f7:
41:61:86:d3:8a:fa:6a:e5:f1:02:c3:b5:da:b6:ba:53:c5:41:
5e:7a:f1:06:b4:73:41:b4:59:98:07:64:31:0d:a7:94:09:3f:
db:68:a7:1f:98:35:e4:80:c3:46:83:a0:ae:24:e3:a9:ca:d6:
95:ed:96:35:8f:a4:72:be:a9:ea:fa:6e:8e:f8:93:0f:b6:4b:
0e:c0:a8:34:ea:43:b3:8c:15:21:bd:7a:0c:5a:5b:05:74:e5:
77:04:89:35:c3:7d:fe:20:a5:88:32:7a:b7:8f:4b:aa:7b:14:
1b:8a:8d:88:47:6f:98:3d:21:9a:31:db:ef:d2:f8:97:44:cf:
a2:85:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:59:16 2024 by rpki-client on console-fra.rpki-client.org