Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/55oFkeRL3iG22GPAdM6Sgx5iSwE.roa
File: 55oFkeRL3iG22GPAdM6Sgx5iSwE.roa (raw, json)
Hash identifier: PfaRieRQR2lewjMk3HTckD6JnlD0cvD4TW7LUiwNvIU=
Subject key identifier: E7:9A:05:91:E4:4B:DE:21:B6:D8:63:C0:74:CE:92:83:1E:62:4B:01
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 018CC7273E402AB4A724F9D9C75161CD4849
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/55oFkeRL3iG22GPAdM6Sgx5iSwE.roa
Signing time: Mon 01 Jan 2024 22:31:27 +0000
ROA not before: Mon 01 Jan 2024 22:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60298
IP address blocks: 194.183.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3e:40:2a:b4:a7:24:f9:d9:c7:51:61:cd:48:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 22:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e79a0591e44bde21b6d863c074ce92831e624b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bd:1e:3d:52:86:f8:2a:9f:88:72:f9:ab:56:
41:f5:6b:ec:f9:17:3e:38:b3:3d:9c:a7:ba:fa:99:
75:c9:ae:bc:f4:56:07:29:ef:9b:cb:65:f0:73:67:
42:cd:a5:7f:9d:b8:98:e3:ac:9e:fa:99:bf:06:f6:
fe:92:44:f1:b8:9b:03:d7:5f:5c:14:2a:40:cf:6a:
b6:c7:98:10:cd:07:8d:5b:1e:6c:ff:c7:f3:6a:89:
d6:5d:5e:c0:73:8f:fe:6f:f7:8a:fa:c2:b2:b6:d4:
e3:0c:a6:91:bd:e7:ad:07:64:a5:79:4a:74:1a:e8:
68:97:ff:6f:50:d1:ad:c1:18:e0:e4:aa:1f:14:75:
e0:25:4d:87:82:e9:ef:bc:90:b7:a1:f5:54:cd:14:
73:c8:54:86:67:0f:df:27:d3:51:e9:c2:fd:69:5c:
9f:a0:bf:4c:65:c1:62:ed:52:f2:8a:d4:b8:18:97:
5a:06:89:b6:d4:38:6b:55:c6:5a:0c:c9:e3:a7:93:
95:c7:49:da:02:de:79:7c:42:d7:8f:c7:49:95:b9:
20:3b:46:81:64:34:81:33:4d:6a:51:44:56:60:06:
63:a1:88:b7:22:b9:0d:c0:36:3e:d6:5a:b4:6c:8f:
53:dc:96:0d:a3:5b:2d:b6:24:7d:fd:97:0c:a6:7b:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9A:05:91:E4:4B:DE:21:B6:D8:63:C0:74:CE:92:83:1E:62:4B:01
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/55oFkeRL3iG22GPAdM6Sgx5iSwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.190.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8a:12:90:06:55:db:cb:82:72:ea:f6:5d:2c:79:dd:af:28:
1e:bc:7b:5e:4e:18:34:75:81:83:7c:b1:c1:39:85:55:d5:f3:
81:5c:ed:ad:38:d6:e4:e3:2f:98:e5:1b:e2:3e:aa:7a:a3:4a:
c4:85:eb:72:f5:ae:9c:55:53:52:53:5a:5f:69:f0:1a:ba:49:
33:2e:36:7a:d9:e6:13:34:07:6b:6f:bd:31:2e:3f:ac:c3:ca:
50:aa:4c:f4:dc:fc:5c:85:cd:0a:cb:e1:f9:96:91:fe:a0:08:
eb:a4:73:80:dc:58:ae:43:d2:0a:b0:93:05:fa:70:c0:13:9c:
fb:07:e3:42:2a:58:78:97:51:99:eb:15:78:07:49:d1:18:c5:
3c:eb:16:2f:d0:e1:dc:3d:1c:29:bb:55:c0:2e:c7:bb:11:44:
04:64:e6:27:82:69:1d:f7:88:21:b3:c5:10:bd:bc:10:b6:c6:
83:7a:02:38:ea:32:1b:49:0c:26:8a:ae:09:6b:35:69:e2:1c:
66:f9:eb:2e:d1:56:4e:40:e8:2a:01:26:d3:25:c9:95:2e:47:
23:01:89:bc:a7:7d:15:07:be:75:fc:04:75:af:04:4a:b4:56:
e4:39:df:96:6b:82:a8:84:73:70:3e:9b:04:bb:fa:6e:03:8d:
ae:64:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:50:06 2024 by rpki-client on console-fra.rpki-client.org