Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/SQpZxKNN1xTp3KUAMTpcsSR1_uU.roa
File: SQpZxKNN1xTp3KUAMTpcsSR1_uU.roa (raw, json)
Hash identifier: Tux3E+ncxVW5OPeYQ+eiErzQTkq8bm9R4lJB3uf9oVE=
Subject key identifier: 49:0A:59:C4:A3:4D:D7:14:E9:DC:A5:00:31:3A:5C:B1:24:75:FE:E5
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 018CC3B6EB6DF4F913857ABDA4E91696A933
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/SQpZxKNN1xTp3KUAMTpcsSR1_uU.roa
Signing time: Mon 01 Jan 2024 06:29:54 +0000
ROA not before: Mon 01 Jan 2024 06:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59441
IP address blocks: 194.33.125.0/24 maxlen: 24
194.33.126.0/24 maxlen: 24
194.33.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:eb:6d:f4:f9:13:85:7a:bd:a4:e9:16:96:a9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Jan 1 06:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=490a59c4a34dd714e9dca500313a5cb12475fee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:12:6e:30:f3:55:50:f6:bc:85:12:17:10:
60:21:5a:0c:51:20:5d:56:0b:73:22:fe:00:d1:d8:
f9:2f:0c:20:70:53:60:0e:ed:4d:18:c7:3b:7b:cd:
1d:7b:07:27:e8:c4:01:81:4b:63:44:94:ab:ac:3c:
4c:f9:a5:5d:79:36:fa:97:44:2d:13:c1:aa:71:02:
d1:d6:87:34:f4:6f:77:ee:d5:10:8b:38:7e:64:79:
07:b5:06:70:22:05:03:3a:d1:73:78:4b:6a:81:a6:
17:d5:dc:b8:4c:87:bb:dd:e2:07:46:c6:d5:3b:21:
4d:c5:c7:91:68:39:35:a8:23:c6:f9:e3:9c:8d:89:
e0:38:eb:cf:ec:80:6b:b5:9f:c0:de:28:68:4e:fe:
e4:ba:cb:5a:a1:49:76:b4:ff:5a:e3:54:ca:ce:af:
f9:5b:fb:a7:ac:4f:5b:82:75:f0:c8:7a:16:71:73:
7c:58:7d:c3:d3:cf:45:f9:79:7b:58:f7:ab:13:c4:
6b:1b:a9:07:1e:7e:32:d0:b7:8c:46:e9:7d:e9:7a:
1f:3e:c3:e8:87:2f:9d:d1:b8:0d:ba:d6:d1:32:f9:
17:65:b5:29:57:7f:4c:5e:d3:2a:fd:b8:a7:cc:f1:
06:01:33:2c:1d:b0:48:ce:c2:0e:cd:e0:d6:64:7c:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0A:59:C4:A3:4D:D7:14:E9:DC:A5:00:31:3A:5C:B1:24:75:FE:E5
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/SQpZxKNN1xTp3KUAMTpcsSR1_uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.125.0-194.33.127.255
Signature Algorithm: sha256WithRSAEncryption
49:91:e3:5d:79:e8:0e:30:b4:bb:ae:1a:b0:16:28:b2:86:dd:
d8:69:f0:41:37:b4:12:1d:0c:0a:64:e9:15:86:8d:0c:cd:34:
ce:bf:8c:5d:9a:4a:fa:1d:4d:9a:a4:d3:7b:3d:15:9e:f4:1b:
d3:7b:56:2e:3b:0c:cc:1d:40:66:72:0b:d0:07:85:16:6c:f2:
b2:bd:96:51:4d:20:6f:0d:94:18:b8:af:8d:b4:30:9b:8d:45:
8c:b7:ae:12:17:39:bc:ec:46:18:29:87:ed:07:14:5f:5b:19:
88:1a:b2:9e:46:59:9d:6d:26:b9:85:eb:1d:33:20:f6:22:5f:
e2:35:34:b6:30:1e:cf:60:00:0d:38:cb:63:a1:14:15:53:74:
28:74:a0:40:08:20:82:ab:da:a3:6a:60:dc:aa:e0:58:99:c5:
42:99:6b:ca:6b:a1:32:95:3c:76:70:a4:11:5b:03:1c:fe:0d:
a8:b7:ec:a5:bb:1d:58:8f:88:3d:96:2c:c0:95:75:cc:1f:b5:
4e:1a:65:b6:0a:f5:ff:5b:53:13:3f:03:31:08:cd:85:b0:aa:
ea:f3:ea:fc:d6:68:cf:3d:c0:c5:63:3d:28:69:87:e6:82:ac:
85:9e:5c:7a:35:85:eb:db:ba:43:fe:87:6b:05:20:6b:2f:fb:
ea:62:a8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:47:06 2024 by rpki-client on console-fra.rpki-client.org