Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/SnfHQGbjxqcna_A7JUGs5Cui4lo.roa
File: SnfHQGbjxqcna_A7JUGs5Cui4lo.roa (raw, json)
Hash identifier: 0FRN4FclAQiXqmbmFOt6s+rGKo8UACK+3fjCrjiqhsk=
Subject key identifier: 4A:77:C7:40:66:E3:C6:A7:27:6B:F0:3B:25:41:AC:E4:2B:A2:E2:5A
Certificate issuer: /CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Certificate serial: 018CC726EB953FA919DC4FA233F3EAA3B335
Authority key identifier: 30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/SnfHQGbjxqcna_A7JUGs5Cui4lo.roa
Signing time: Mon 01 Jan 2024 22:31:05 +0000
ROA not before: Mon 01 Jan 2024 22:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31184
IP address blocks: 193.22.253.0/24 maxlen: 24
195.74.40.0/22 maxlen: 24
2a13:6140::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:eb:95:3f:a9:19:dc:4f:a2:33:f3:ea:a3:b3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Validity
Not Before: Jan 1 22:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a77c74066e3c6a7276bf03b2541ace42ba2e25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:9c:e3:08:57:b4:0d:99:f6:1b:a5:06:c1:
d8:8d:d4:94:5e:fe:13:31:f8:e4:a2:44:55:02:e0:
81:90:b9:a8:92:69:06:fa:03:5a:a5:52:df:33:a3:
7c:73:a1:2a:90:60:dc:c7:90:6c:b5:82:98:f8:ec:
5f:75:17:b8:7b:93:11:3d:64:26:86:64:31:88:8b:
90:4b:4d:9f:ab:75:be:7d:58:84:f8:da:2e:89:48:
f0:5c:fa:5f:1c:88:45:51:3d:e8:aa:c4:6e:83:9e:
ee:32:9c:94:93:70:3c:69:b3:a4:87:d3:65:c6:a4:
2d:43:44:61:a2:99:65:7d:30:b7:d5:d7:6e:98:6f:
c1:ed:8c:0e:a7:a4:7b:33:a6:9f:93:b3:f5:b5:48:
bd:44:27:2c:2d:3f:75:cc:fe:d7:3e:82:bb:b1:84:
52:55:ca:57:01:40:14:34:dc:7e:6f:f0:06:f1:7e:
0b:24:df:7b:01:1c:12:3e:0d:0b:32:ef:aa:1f:d9:
68:af:b4:ad:9e:d9:79:15:73:de:67:fc:2c:49:07:
71:cf:6e:ec:2a:9f:2d:0b:42:f3:db:fa:06:16:3c:
43:ee:f9:29:ca:e7:6b:16:13:32:e9:ab:83:1f:cb:
fa:3d:ed:c6:89:3f:c8:9a:23:c5:e6:ed:92:1e:82:
ba:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:77:C7:40:66:E3:C6:A7:27:6B:F0:3B:25:41:AC:E4:2B:A2:E2:5A
X509v3 Authority Key Identifier:
keyid:30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/SnfHQGbjxqcna_A7JUGs5Cui4lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.253.0/24
195.74.40.0/22
IPv6:
2a13:6140::/29
Signature Algorithm: sha256WithRSAEncryption
49:51:c4:a6:79:2c:ed:5d:f1:4e:f8:88:83:ad:20:ba:7d:08:
b6:bc:42:fb:ea:68:33:97:bb:cc:48:4d:e2:27:34:b7:a5:60:
6f:3a:a3:2f:31:10:79:43:2f:6a:e3:dc:6e:b3:5d:be:59:50:
80:86:b8:c4:55:db:e0:00:5f:2b:02:22:de:c2:e0:84:b0:18:
bc:5a:06:dc:00:2b:ad:4c:c8:a5:dd:4d:ea:c4:ae:72:fa:17:
fb:58:99:60:e5:6c:f7:ee:c1:f6:03:c3:0b:0e:4e:30:51:b0:
02:37:b4:ed:2f:c6:3c:e4:04:3a:e2:2a:a3:78:39:7e:06:29:
bd:26:06:80:54:33:d6:07:10:13:1f:13:54:83:5a:c6:24:3d:
f6:31:3c:c5:34:23:c3:cf:68:ba:17:34:a6:7c:d2:23:5e:1d:
9f:7c:11:17:ac:59:a7:b7:50:5c:0a:b5:84:5c:ed:0a:11:cb:
da:90:c2:65:29:85:9d:ee:d8:db:07:b2:6a:63:ae:bf:d2:a8:
2f:df:ac:fb:6e:ae:ce:89:1f:b3:1e:62:a1:ca:10:de:dd:e9:
87:98:93:ff:b0:5c:38:f3:b0:3a:de:33:6b:bb:0a:fb:67:6a:
d5:14:23:03:33:af:a7:20:b2:ea:46:8d:7e:ac:dc:0d:0a:ad:
0b:27:d6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:47:00 2024 by rpki-client on console-fra.rpki-client.org