Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/Hj54pUApylrNHTcKfC9e0qpkNno.roa
File: Hj54pUApylrNHTcKfC9e0qpkNno.roa (raw, json)
Hash identifier: GCgaRCHe+ACHFKK/QFpR3uqOQIkNsDqCwzZrP5baRZI=
Subject key identifier: 1E:3E:78:A5:40:29:CA:5A:CD:1D:37:0A:7C:2F:5E:D2:AA:64:36:7A
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 018CC3B6F9043DFFDCE133F2557B815A957B
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/Hj54pUApylrNHTcKfC9e0qpkNno.roa
Signing time: Mon 01 Jan 2024 06:29:57 +0000
ROA not before: Mon 01 Jan 2024 06:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 193.22.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f9:04:3d:ff:dc:e1:33:f2:55:7b:81:5a:95:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jan 1 06:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e3e78a54029ca5acd1d370a7c2f5ed2aa64367a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:8b:e8:75:3e:a1:b3:66:a9:5c:4a:5d:87:
e3:d8:e1:6a:a2:4f:55:30:1e:6c:f3:f3:1c:aa:98:
38:d5:19:a8:e8:88:21:79:d7:76:03:a2:a5:30:27:
c6:4c:c8:67:a9:1f:9e:fa:66:e8:89:5e:9e:56:78:
6f:5b:73:53:14:40:08:ad:f1:70:d6:7e:ba:72:f8:
0c:c9:d4:4a:60:42:02:0c:1f:04:ae:99:51:89:78:
59:a3:5f:98:54:00:d1:51:06:40:43:f0:83:47:d5:
87:56:f7:9d:98:a4:00:26:47:36:92:b9:63:e4:b8:
bd:1f:38:29:a5:a2:91:4b:ed:19:f2:ca:1d:a9:10:
6e:d3:a1:d6:aa:ca:d4:71:27:47:76:33:5e:6a:05:
88:44:66:4c:3b:01:5b:11:45:ff:40:85:c3:ff:77:
e1:f2:af:83:ef:a6:ed:92:87:70:ff:fd:1c:f0:5a:
46:00:8e:10:49:96:2d:a2:5c:56:d3:d6:92:00:d8:
4f:19:49:4e:71:7d:5e:3c:2f:f3:79:9b:0a:02:6c:
cb:07:db:d6:f3:07:61:ce:05:4b:f6:4e:3c:b5:04:
f8:f5:e1:6c:d6:f8:ce:0c:4a:4c:25:33:7d:c0:03:
d2:25:10:a7:6f:04:df:a4:16:b3:27:bb:69:f9:ff:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3E:78:A5:40:29:CA:5A:CD:1D:37:0A:7C:2F:5E:D2:AA:64:36:7A
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/Hj54pUApylrNHTcKfC9e0qpkNno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.12.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:9f:49:d1:46:90:9a:e8:ad:db:f3:89:b0:7e:96:86:70:74:
8c:29:45:25:d2:bc:2a:99:4f:59:d4:95:b9:ca:3d:95:ba:4a:
ca:9f:58:95:b8:8b:51:b6:28:c3:53:bc:13:40:8d:7b:b7:5a:
a3:59:a1:8b:6a:e6:64:53:0d:2b:1d:7b:38:88:8b:31:01:5f:
80:95:90:db:69:fe:63:23:f0:3f:c8:db:11:41:6a:f6:f7:6a:
f6:4f:02:66:dd:d4:61:98:f6:2b:91:94:92:fd:6b:12:69:e8:
7a:5b:f1:24:cc:09:26:d8:31:0f:e2:7b:70:7d:e7:e8:fe:c4:
74:54:5f:0d:79:be:d5:4b:e6:cf:cc:61:e8:04:50:f9:91:72:
f0:1a:37:3b:c6:71:21:7f:0e:f5:e3:03:5d:99:f3:53:54:72:
25:39:ca:27:68:57:05:6c:af:20:2b:b6:92:ec:79:91:6c:c6:
d9:9c:7f:6a:1b:ed:ae:2c:24:f0:1e:78:d0:95:3e:14:2e:0a:
c0:71:6f:e0:80:3e:5c:31:9b:84:5d:56:dd:59:23:a6:a8:2d:
a2:73:2d:7a:cd:e9:c7:9a:aa:18:a6:52:b9:92:66:46:da:98:
f8:e8:58:0e:80:00:fd:52:cb:82:dd:4a:2c:99:94:23:b6:d1:
85:88:56:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:31:32 2024 by rpki-client on console-fra.rpki-client.org