Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/nX2385KcCQLZXSrlpPPerBCcSMU.roa
File: nX2385KcCQLZXSrlpPPerBCcSMU.roa (raw, json)
Hash identifier: AV4G0N4RXdLiN9fEZjV8s4fnNsK6aIoA3Lwva+2vcck=
Subject key identifier: 9D:7D:B7:F3:92:9C:09:02:D9:5D:2A:E5:A4:F3:DE:AC:10:9C:48:C5
Certificate issuer: /CN=3322a06b46f06af23f81e15888950a36063ebcd9
Certificate serial: 018CC8DF2A5352C249B44D1C073C2114FD43
Authority key identifier: 33:22:A0:6B:46:F0:6A:F2:3F:81:E1:58:88:95:0A:36:06:3E:BC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKga0bwavI_geFYiJUKNgY-vNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/nX2385KcCQLZXSrlpPPerBCcSMU.roa
Signing time: Tue 02 Jan 2024 06:31:57 +0000
ROA not before: Tue 02 Jan 2024 06:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60631
IP address blocks: 193.105.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKga0bwavI_geFYiJUKNgY-vNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:2a:53:52:c2:49:b4:4d:1c:07:3c:21:14:fd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3322a06b46f06af23f81e15888950a36063ebcd9
Validity
Not Before: Jan 2 06:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d7db7f3929c0902d95d2ae5a4f3deac109c48c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:18:83:87:b2:fb:7c:7f:74:96:78:ac:2b:
ff:24:2c:ad:33:82:59:b9:e3:83:3a:01:dc:fa:54:
42:69:88:ca:1e:b4:27:1a:e6:00:06:dc:c9:19:1d:
bb:aa:5b:6d:fe:fb:de:a8:7e:46:bc:25:3d:2f:c0:
b7:5c:c0:92:41:60:2e:19:e8:ac:c0:61:3f:d4:04:
16:4c:85:5a:df:13:ce:94:63:ab:ca:8e:26:a5:bb:
8e:fb:56:44:a5:6e:bc:8c:3c:3a:42:94:33:8c:d1:
57:e2:f3:d2:24:4e:96:0f:a6:b8:af:fe:77:47:5d:
12:c7:46:00:d6:dc:82:6a:68:62:1d:5f:04:b5:69:
cc:f1:1f:41:3e:ac:4a:ee:5c:87:4c:7b:3b:6c:8f:
66:c9:cc:37:0d:c5:d4:53:b4:50:76:83:a5:5a:56:
e8:5c:93:3d:50:ae:ab:1a:c3:a9:09:1a:43:ca:57:
57:fa:b0:aa:00:46:ba:9f:6b:91:01:1e:4c:df:9b:
b2:27:fa:89:e7:77:6a:78:f8:03:4d:98:7b:1f:6e:
1f:8b:ce:e4:6d:04:67:5c:89:8e:48:af:c7:99:a3:
35:59:41:a9:18:e5:2f:65:31:10:fe:71:91:55:ed:
8c:71:e2:51:0f:fa:55:c8:4b:81:c7:d6:0c:e5:b8:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7D:B7:F3:92:9C:09:02:D9:5D:2A:E5:A4:F3:DE:AC:10:9C:48:C5
X509v3 Authority Key Identifier:
keyid:33:22:A0:6B:46:F0:6A:F2:3F:81:E1:58:88:95:0A:36:06:3E:BC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKga0bwavI_geFYiJUKNgY-vNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/nX2385KcCQLZXSrlpPPerBCcSMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.234.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2c:96:7d:cb:72:cf:c8:5a:0a:bd:c6:b0:6b:bc:84:ad:3e:
75:9b:be:ab:bd:56:85:ff:53:b6:f3:80:06:f5:16:98:65:36:
ee:84:d9:e9:c9:ef:e6:d7:1b:c1:cf:7e:50:0d:19:1c:11:71:
79:ba:a6:68:0c:bd:54:b8:7c:91:d1:76:1e:a1:6f:28:c1:c7:
59:6a:ac:00:d4:50:08:90:0d:ab:7f:ed:8a:4e:ea:aa:8e:a6:
5c:db:ca:57:f5:25:76:96:3c:b8:09:e6:ec:3e:28:b7:48:f7:
24:e7:f8:0c:16:d9:36:b5:ea:a3:83:66:98:a2:b6:e9:61:32:
52:b0:83:1d:50:ab:6a:9b:0a:13:dd:42:09:39:b3:fd:8b:23:
e9:39:b3:30:43:cb:0c:46:42:d2:14:fa:ed:92:e2:c4:19:10:
0e:4f:84:42:c9:c9:27:23:65:9c:60:5e:cb:20:b8:7d:68:84:
e6:dc:ec:e3:06:ce:72:f0:a1:be:83:c3:3e:64:bf:41:c6:fd:
a6:b6:52:c7:83:8b:11:15:fc:2d:f1:b8:a5:72:79:06:2f:02:
2e:56:af:0c:8d:31:8a:54:85:4b:0d:23:93:e0:95:d5:47:fd:
63:e0:16:75:1d:08:0f:a7:93:5e:3b:a2:ef:a7:70:81:2d:e0:
0c:a9:3c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 15:23:21 2024 by rpki-client on console-fra.rpki-client.org