Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/SsLuogVbNlRcYb49Q0xufyEGi3w.roa
File: SsLuogVbNlRcYb49Q0xufyEGi3w.roa (raw, json)
Hash identifier: Ua3hhW+33NaW+IUuNyqw8gsPe7pWhztvY1pulOgZVOk=
Subject key identifier: 4A:C2:EE:A2:05:5B:36:54:5C:61:BE:3D:43:4C:6E:7F:21:06:8B:7C
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 018CC9BC2716C122E1F19AB3D0D93A385C01
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/SsLuogVbNlRcYb49Q0xufyEGi3w.roa
Signing time: Tue 02 Jan 2024 10:33:20 +0000
ROA not before: Tue 02 Jan 2024 10:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42714
IP address blocks: 195.211.184.0/22 maxlen: 24
31.170.128.0/20 maxlen: 24
31.170.128.0/19 maxlen: 24
31.170.144.0/21 maxlen: 24
31.170.152.0/21 maxlen: 24
193.200.38.0/24 maxlen: 24
193.200.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:27:16:c1:22:e1:f1:9a:b3:d0:d9:3a:38:5c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Jan 2 10:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ac2eea2055b36545c61be3d434c6e7f21068b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:2f:8f:2b:20:c5:2d:0a:9a:e3:9d:88:75:
be:00:ab:64:51:61:53:30:28:c1:57:f0:86:ec:03:
4d:f3:e9:88:55:90:27:8e:31:1d:75:5d:9b:a8:82:
6a:7b:05:d6:71:b7:f3:4f:e8:15:91:0a:f8:bc:fa:
4f:b9:84:cb:3a:68:6d:29:84:a6:6a:53:15:7f:94:
bc:0f:9c:ec:71:c3:ad:5a:96:4c:b8:2e:cf:85:7e:
93:f7:61:e7:7e:9e:56:5b:0a:6b:2a:f8:8d:c9:da:
f8:82:4f:26:5d:f7:34:66:8e:aa:ec:fd:77:a7:35:
97:24:16:af:c7:ca:cc:0f:26:e2:06:0f:50:23:e6:
8a:da:42:e1:29:b9:0d:19:ac:65:d6:3d:8d:c1:7e:
92:52:72:b1:25:3a:88:c2:d1:3f:0b:a9:91:7d:b7:
fb:6d:c8:2e:31:25:48:a5:1a:5e:f7:3e:9f:0e:65:
3b:c4:11:0c:e9:ce:e3:1f:1c:f9:a7:31:79:87:de:
cd:69:96:8e:6b:83:c2:6c:d2:ad:bf:fd:1a:46:a8:
70:5e:30:aa:7c:88:9b:9d:5e:ae:d8:6b:f7:71:58:
9b:33:e0:e0:81:ec:c5:e4:32:54:e0:19:60:81:75:
af:de:95:11:07:b1:07:fd:01:e2:09:6f:f3:7d:4e:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C2:EE:A2:05:5B:36:54:5C:61:BE:3D:43:4C:6E:7F:21:06:8B:7C
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/SsLuogVbNlRcYb49Q0xufyEGi3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.128.0/19
193.200.38.0/23
195.211.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:1c:bf:83:b1:6c:c9:55:b0:4d:bf:a4:e6:81:a2:6f:f7:a9:
87:9c:77:3a:da:e0:32:1c:09:9a:81:50:1e:0a:bc:c7:af:58:
08:a1:51:04:42:c2:ca:c0:5e:e5:4a:80:45:0c:3f:fd:e3:0f:
14:f7:de:c5:b7:15:39:1c:74:1a:21:30:69:7c:61:8c:2f:5a:
46:f6:d7:d2:86:c5:8c:1d:b1:66:ca:d8:c6:41:5a:f9:00:90:
42:d6:4c:13:4f:50:fc:2f:9c:a7:dc:db:da:43:fc:19:eb:b0:
3f:9a:7e:66:65:85:0d:9f:52:3b:46:53:09:c1:eb:e1:bd:12:
1c:e2:05:04:27:62:82:2f:38:2e:6d:87:a8:46:9e:99:0e:7f:
2b:eb:d6:a9:e7:87:d6:03:c2:91:bb:fc:fc:9b:f5:3a:e2:43:
a6:31:8d:43:e4:eb:e7:d0:2f:6b:7e:dd:4b:6f:a3:ba:94:50:
81:5c:93:d5:a6:23:75:a4:27:ce:3e:52:8d:d6:2a:b9:42:b0:
e4:9b:63:9b:dd:65:99:4d:7a:af:12:e1:51:64:89:46:3a:3f:
d9:93:44:54:e9:60:0e:09:8e:9c:4a:1b:36:ee:4a:b2:d9:0d:
a0:e3:3b:e7:8c:03:d1:25:f1:64:79:d3:c4:cb:9e:9b:ce:51:
97:aa:93:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:53:05 2024 by rpki-client on console-ams.rpki-client.org