Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/sKepPRIXv2ElpUgS9Wrv1cdjxIU.roa
File: sKepPRIXv2ElpUgS9Wrv1cdjxIU.roa (raw, json)
Hash identifier: 87ewesBXuJaujR/JbSr8Kp7rmEpRCFG4xqYzLYpt3RU=
Subject key identifier: B0:A7:A9:3D:12:17:BF:61:25:A5:48:12:F5:6A:EF:D5:C7:63:C4:85
Certificate issuer: /CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Certificate serial: 018CC726635B0DFF51F057955A1C699DD954
Authority key identifier: 85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/sKepPRIXv2ElpUgS9Wrv1cdjxIU.roa
Signing time: Mon 01 Jan 2024 22:30:30 +0000
ROA not before: Mon 01 Jan 2024 22:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41269
IP address blocks: 193.47.166.0/24 maxlen: 24
193.238.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:63:5b:0d:ff:51:f0:57:95:5a:1c:69:9d:d9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Validity
Not Before: Jan 1 22:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0a7a93d1217bf6125a54812f56aefd5c763c485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:83:93:da:d4:f4:fa:e3:e0:c7:b0:fb:ba:18:
f5:0c:09:d2:30:5e:3e:ef:c2:ce:2d:f8:48:63:5f:
c0:f0:ac:73:75:ec:ac:41:dd:bc:f5:68:b1:78:70:
da:0d:7d:9c:39:45:6e:94:89:7b:9e:5f:7b:69:2b:
d5:a3:ad:dd:09:ce:38:63:a1:e7:3a:1e:d7:47:a6:
3c:73:9a:26:6f:7f:91:78:84:53:ed:6c:99:2a:0d:
fd:be:ab:51:6d:ea:0a:07:3d:7f:7b:34:88:a2:a7:
82:aa:0e:ef:a7:48:7a:ca:6c:47:a4:66:43:f9:08:
d3:29:4d:0b:6d:1d:7d:a4:74:18:43:37:b6:e2:9a:
b7:a9:8f:63:4f:2a:30:28:28:18:3c:f8:f4:71:5e:
bb:e4:16:4b:b2:38:61:a5:ec:e9:5d:5b:c8:3e:fd:
c8:09:b8:7c:56:6b:3c:00:ec:9a:94:33:ec:4a:b2:
55:e4:d5:b3:4b:e0:ac:ae:34:83:ae:59:09:f9:40:
d6:91:8c:99:72:bb:b1:f4:91:7d:81:31:14:a7:6d:
07:3c:7a:59:5b:f0:0f:c2:ab:b8:d1:70:84:2e:52:
e5:da:e0:6e:70:08:14:bf:a5:22:95:4c:b9:f3:07:
f2:3d:d2:15:e7:ee:19:9c:82:ad:7c:9b:30:78:d4:
e0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A7:A9:3D:12:17:BF:61:25:A5:48:12:F5:6A:EF:D5:C7:63:C4:85
X509v3 Authority Key Identifier:
keyid:85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/sKepPRIXv2ElpUgS9Wrv1cdjxIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.166.0/24
193.238.108.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d6:35:db:0f:34:dc:5a:dd:6d:de:25:87:68:06:47:1f:73:
e7:ad:bf:ec:5e:4e:e1:96:19:e8:dd:74:ad:0b:e6:b5:81:20:
b2:7e:e1:5b:23:3d:ba:1d:49:15:ea:c4:7c:8d:01:ba:9e:7c:
5d:89:21:2d:1c:ee:f9:bb:93:ec:24:4a:ea:c3:ca:da:4f:ba:
76:9c:45:4f:4f:cd:6b:7f:84:5f:e6:e8:f6:86:a2:c8:93:b2:
75:1f:e7:b0:fe:87:fb:bf:97:59:40:c2:e3:25:6d:99:ce:30:
3e:b1:c7:42:98:16:b2:19:5d:fa:8f:e5:d1:ef:a5:ca:71:a9:
a7:54:ad:f2:c1:75:b4:94:8d:6c:c3:ce:ef:ef:b5:98:d9:b6:
2a:1d:e1:8d:bf:3a:1b:ec:4f:be:d8:19:9c:c9:c9:9a:2d:82:
14:99:cb:a0:21:a1:c1:eb:3d:3c:81:c7:6a:bf:3d:e7:99:02:
14:13:54:94:77:ae:51:94:c3:39:bc:0d:60:44:c6:97:a1:bd:
56:b9:aa:4c:a0:85:3d:cc:cf:d6:1e:c0:43:d6:3c:41:d1:c6:
1d:49:bb:12:87:bf:9d:ec:d8:bb:75:8a:c8:fb:6f:d2:0d:0f:
b0:ac:e2:35:19:68:d3:21:69:d2:a8:44:53:f8:29:c7:e2:6d:
41:49:13:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:59:51 2024 by rpki-client on console-fra.rpki-client.org