Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/ReAqutNeFnSUg19Yyu7PziQUvAw.roa
File: ReAqutNeFnSUg19Yyu7PziQUvAw.roa (raw, json)
Hash identifier: J1oVtHya/5yjIM9wlZYrFBZdNjdb9UOUgZDfuWhPzYM=
Subject key identifier: 45:E0:2A:BA:D3:5E:16:74:94:83:5F:58:CA:EE:CF:CE:24:14:BC:0C
Certificate issuer: /CN=2802b5b025cf4ea13395fc57b5a4d6898e7332cf
Certificate serial: 018CC2DB50CAC50B2F79D53726E79BB8F168
Authority key identifier: 28:02:B5:B0:25:CF:4E:A1:33:95:FC:57:B5:A4:D6:89:8E:73:32:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/ReAqutNeFnSUg19Yyu7PziQUvAw.roa
Signing time: Mon 01 Jan 2024 02:30:02 +0000
ROA not before: Mon 01 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48152
IP address blocks: 193.200.218.0/24 maxlen: 24
2001:678:878::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:50:ca:c5:0b:2f:79:d5:37:26:e7:9b:b8:f1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2802b5b025cf4ea13395fc57b5a4d6898e7332cf
Validity
Not Before: Jan 1 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45e02abad35e167494835f58caeecfce2414bc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:84:a3:dd:53:b9:f7:37:8e:3f:27:4a:6a:
3c:5a:a6:b2:2f:3b:66:0d:0e:59:fa:26:2f:fb:5c:
86:e7:83:1d:31:97:4a:0a:1d:09:0b:17:8e:a4:8e:
3f:fe:f8:93:39:f5:fc:d9:72:fd:50:a0:9b:1d:89:
b8:ef:43:c8:a1:bb:eb:12:2d:88:78:31:e1:3c:39:
f4:05:89:4f:ae:94:06:3a:ca:21:51:4e:90:71:05:
c4:4d:27:54:e6:ec:15:0c:da:fc:03:f9:39:6c:54:
a1:75:94:4b:a5:15:e8:dd:9f:37:9b:b9:7e:46:2d:
33:fe:87:56:a2:a0:ee:aa:e3:a6:20:5b:e4:38:ae:
5d:00:ae:62:86:e6:e6:ce:34:06:c8:c7:78:79:6f:
ff:ae:9e:6b:61:87:99:ff:2f:9d:38:5b:d6:9f:12:
05:1c:a3:c0:3f:eb:71:49:f6:54:f1:34:0c:b6:26:
0c:33:a1:45:43:90:fe:71:c9:03:32:83:6a:5f:09:
3e:51:98:71:95:85:d7:b2:b6:af:28:5f:83:82:d1:
fe:fa:20:67:2d:50:1f:cc:0c:09:85:a7:1b:80:c0:
40:b7:49:66:64:b0:01:7f:64:37:f2:7b:d6:fc:7d:
9f:08:5b:2e:2f:a7:b6:24:2a:84:60:90:bb:a4:cc:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E0:2A:BA:D3:5E:16:74:94:83:5F:58:CA:EE:CF:CE:24:14:BC:0C
X509v3 Authority Key Identifier:
keyid:28:02:B5:B0:25:CF:4E:A1:33:95:FC:57:B5:A4:D6:89:8E:73:32:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/ReAqutNeFnSUg19Yyu7PziQUvAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.218.0/24
IPv6:
2001:678:878::/48
Signature Algorithm: sha256WithRSAEncryption
83:e4:c4:b2:48:4a:8b:3c:21:dc:35:7b:59:76:6e:ca:2a:5d:
38:c9:c1:2a:ad:f2:c9:7b:a4:42:d1:fc:91:76:11:a5:2a:fa:
71:11:d6:9b:6d:58:c5:b7:4b:2b:c6:44:16:cc:d9:e2:53:ac:
f5:3c:66:32:a0:66:d6:ad:7f:57:57:dc:e4:63:25:18:7d:16:
5a:51:79:ba:ec:91:20:53:5a:5c:ed:c3:63:bf:cf:d3:90:02:
ef:ff:ee:e8:91:98:e7:7b:e0:f4:fc:ff:08:cd:28:2c:28:93:
22:c1:b0:0b:0d:71:a0:61:f5:da:1b:26:42:49:53:5d:56:7d:
00:73:20:bc:3e:bf:4e:69:b0:94:33:91:15:76:75:f8:52:f0:
a9:6a:af:f0:a4:08:af:46:e7:ee:3b:27:cb:7f:df:d4:44:7a:
54:c7:c4:fe:a5:f1:7f:f6:d3:bd:45:43:28:8d:db:e6:ca:2a:
bd:1f:14:77:a8:3a:a0:0e:a0:66:f2:23:53:2a:d3:dc:bc:69:
3a:a3:c8:6c:24:2a:e2:77:54:92:ea:51:12:4b:3b:a9:32:91:
19:0a:8d:71:0b:d7:b8:c3:c9:11:16:52:d7:0f:bc:87:45:41:
e1:70:57:8e:ee:cf:22:87:64:a0:5d:fd:a4:41:c3:f7:69:75:
e4:bc:69:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:00:32 2024 by rpki-client on console-fra.rpki-client.org