Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/sSpU4OsJ0JP6v-KsLTWyn3wkgzU.roa
File: sSpU4OsJ0JP6v-KsLTWyn3wkgzU.roa (raw, json)
Hash identifier: P3OhH37SSr0XKA5lxGstCRgs9hYtzQO/7M2sPZjPsUo=
Subject key identifier: B1:2A:54:E0:EB:09:D0:93:FA:BF:E2:AC:2D:35:B2:9F:7C:24:83:35
Certificate issuer: /CN=73d31367608564d8783bb242486e93d6506e7f95
Certificate serial: 0194221FB5F41214C7B53F13BEFCC3BAEE10
Authority key identifier: 73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/sSpU4OsJ0JP6v-KsLTWyn3wkgzU.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204288
IP address blocks: 193.33.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b5:f4:12:14:c7:b5:3f:13:be:fc:c3:ba:ee:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d31367608564d8783bb242486e93d6506e7f95
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b12a54e0eb09d093fabfe2ac2d35b29f7c248335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:c3:fb:d2:6e:16:2b:ab:17:5c:2a:62:a0:
28:a8:5d:c7:79:32:15:91:74:98:c9:81:10:69:77:
3a:26:8e:13:e4:9d:27:f0:55:f2:b1:93:e2:f1:aa:
a0:88:d9:56:3d:c1:f9:c6:a2:df:da:54:b8:82:c5:
83:e1:66:2c:dc:34:19:e7:55:4e:0d:84:1c:96:1f:
81:d5:2b:da:55:ef:58:70:59:b1:37:26:f1:29:9e:
43:37:7c:da:5b:b5:bf:30:70:48:3f:be:8c:b2:b7:
29:45:5b:07:57:d2:f2:ab:97:8d:78:5a:20:8e:47:
02:e9:33:8c:77:9c:fa:81:6b:24:f7:50:44:3c:c3:
b5:36:1d:dd:31:0f:85:12:94:5d:72:34:e0:5a:32:
4e:5d:bb:58:85:72:52:0c:81:af:47:e8:39:4c:83:
a9:ff:59:53:82:ca:16:4c:56:9b:82:07:bb:d3:39:
43:f8:91:e5:6d:fa:66:f3:d0:01:1a:b8:b2:c0:11:
40:37:4f:e1:5e:b3:db:3a:d1:bc:cf:c4:3a:c5:c3:
8e:71:af:29:5a:a6:3e:e1:b6:71:c0:ad:8a:39:24:
0d:3d:c3:9e:5d:a1:43:cb:0d:e9:50:7f:4e:bb:98:
dd:59:8a:bd:9b:ef:5e:14:0c:bb:3f:17:14:14:ba:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2A:54:E0:EB:09:D0:93:FA:BF:E2:AC:2D:35:B2:9F:7C:24:83:35
X509v3 Authority Key Identifier:
keyid:73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/sSpU4OsJ0JP6v-KsLTWyn3wkgzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.38.0/23
Signature Algorithm: sha256WithRSAEncryption
55:c5:5a:5c:1f:fc:05:ea:31:e5:3f:ee:c1:9f:f5:f3:ce:8d:
53:f1:39:e1:33:ab:2a:11:ac:46:6a:e7:ea:0b:8d:2b:9c:ab:
89:22:f7:1a:7c:cd:b7:31:fa:ed:16:c7:c4:a2:6e:50:52:18:
1e:66:1d:22:72:22:8d:9f:84:1f:38:63:c7:a2:dc:cc:10:f3:
92:5f:19:dd:9b:4d:87:f7:a6:f6:72:08:d6:48:94:4e:45:85:
89:40:d9:64:f5:71:2d:bd:9f:c8:d3:58:2f:ee:fc:34:68:39:
e0:70:9d:34:5f:fb:9b:c1:8f:19:7a:ce:16:2b:5a:6c:e7:f5:
88:da:8c:67:4d:4f:2b:77:85:09:4c:7b:03:3d:41:a3:08:25:
da:d7:3f:cc:8c:18:8c:45:36:06:c1:34:c6:75:ac:1c:ac:c2:
00:76:56:e6:29:d1:79:a1:24:7b:ac:31:6f:35:32:1b:b7:82:
26:68:7b:ad:cb:15:96:53:c9:15:d0:aa:ac:86:11:51:bb:2d:
89:7c:2d:78:e8:33:24:93:29:d8:67:b7:bd:03:a6:2a:c0:a2:
93:82:ec:7c:49:ca:49:5d:59:69:96:74:b4:f7:03:a5:93:cd:
1f:28:96:4b:1f:f3:b5:6d:1c:67:d1:56:f9:6a:3a:5f:58:f8:
b2:42:aa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:01 2025 by rpki-client