Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/S3I0qAe46RFXPWK1K3r8d1HimPM.roa
File: S3I0qAe46RFXPWK1K3r8d1HimPM.roa (raw, json)
Hash identifier: 5oG42F9TWf3F7gm1E7+97/lYDqulLfqbD8nuokeagHw=
Subject key identifier: 4B:72:34:A8:07:B8:E9:11:57:3D:62:B5:2B:7A:FC:77:51:E2:98:F3
Certificate issuer: /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial: 018CC726F39DD59C6B7462FEB3E87BA6AABD
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/S3I0qAe46RFXPWK1K3r8d1HimPM.roa
Signing time: Mon 01 Jan 2024 22:31:07 +0000
ROA not before: Mon 01 Jan 2024 22:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203310
IP address blocks: 185.51.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:f3:9d:d5:9c:6b:74:62:fe:b3:e8:7b:a6:aa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Validity
Not Before: Jan 1 22:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b7234a807b8e911573d62b52b7afc7751e298f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:e5:47:b0:1f:23:0c:0e:79:ef:52:8b:1f:
08:bf:5a:74:5a:0c:1d:55:2e:31:32:65:b4:78:01:
e4:6a:26:4e:1d:04:bc:c4:98:6a:8c:bc:89:0a:80:
c2:f5:08:2b:3e:e5:68:8e:bd:a2:05:51:33:4e:1c:
44:79:8a:2c:0d:41:48:52:5e:ab:c5:27:04:b1:6a:
cc:e5:ea:b7:1e:6f:b1:31:32:46:94:1a:e0:68:7c:
8f:2d:d4:e6:33:65:4c:da:fb:81:0d:d4:34:f4:a2:
02:1a:f6:b7:e1:28:7b:a1:28:99:fa:c1:01:44:30:
21:ee:eb:c1:ca:fc:9c:84:f9:af:2e:08:dd:d4:76:
fb:15:12:a1:a5:46:79:40:28:04:a4:9b:48:09:4d:
c5:64:44:28:af:83:09:fd:37:74:d1:89:43:8b:79:
fb:a4:ba:41:42:cb:88:d3:d5:bd:95:c1:eb:b5:4d:
6e:9d:f0:36:32:27:9b:27:32:0c:e5:7d:e3:fb:fa:
8c:54:98:5f:a9:ac:6a:ad:41:ef:2e:b0:61:3d:b8:
e3:1a:0d:34:f2:b0:eb:a5:5b:3d:61:5b:ea:08:57:
18:76:65:0a:02:a2:92:58:9a:2a:a6:9e:fb:59:3f:
55:60:04:3f:5c:4b:39:2d:c6:46:cb:cb:40:14:76:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:72:34:A8:07:B8:E9:11:57:3D:62:B5:2B:7A:FC:77:51:E2:98:F3
X509v3 Authority Key Identifier:
keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/S3I0qAe46RFXPWK1K3r8d1HimPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.103.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:49:95:52:eb:8f:08:56:f1:05:ec:c4:8d:f9:76:d4:51:a9:
63:bc:52:34:ef:3a:bd:6d:35:b9:2f:c5:5e:f7:23:37:82:14:
4e:84:fe:ee:f5:ea:b1:b3:38:6f:84:f9:bd:f3:5b:69:e9:f7:
bf:7b:39:86:70:fd:13:ae:b5:1a:dc:ab:00:2a:cf:53:5c:83:
42:be:a8:27:0e:5f:8c:1f:51:eb:c2:37:38:57:6b:0d:34:80:
a4:56:47:24:b5:ce:3d:7b:50:af:92:71:66:4f:df:10:82:c8:
93:3f:96:f9:2b:1b:af:e7:e2:1b:40:83:da:23:65:23:05:83:
3b:87:0a:80:5b:a2:a0:fa:22:fe:07:19:21:0e:94:a2:56:fa:
b1:31:64:d7:52:63:68:6a:7c:f9:c5:07:6c:1c:15:52:cd:af:
fb:dd:42:72:05:b7:88:7f:6a:3b:08:26:5f:3a:89:26:b7:42:
a8:a2:29:31:46:83:fc:01:bb:70:57:e8:5a:89:57:9e:29:24:
bd:ac:5d:bc:25:b9:1f:3f:73:9d:ea:73:f3:1c:de:09:4e:3d:
21:f2:e4:58:2b:5f:eb:e8:03:77:d2:44:ca:b9:2c:3c:4f:35:
2a:86:84:6a:5b:aa:64:58:08:2f:98:08:be:6b:88:22:34:e2:
65:28:b7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:08:29 2024 by rpki-client on console-fra.rpki-client.org