Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/7mEjwWEGrPBO3pv5VH9R-nutWi4.roa
File: 7mEjwWEGrPBO3pv5VH9R-nutWi4.roa (raw, json)
Hash identifier: L0BorLf90+5azZg/RGpSopugBH4XQBrUdlgrtEG2or8=
Subject key identifier: EE:61:23:C1:61:06:AC:F0:4E:DE:9B:F9:54:7F:51:FA:7B:AD:5A:2E
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 018CC56EF6700504D892489107F276CD6915
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/7mEjwWEGrPBO3pv5VH9R-nutWi4.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21263
IP address blocks: 193.102.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f6:70:05:04:d8:92:48:91:07:f2:76:cd:69:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee6123c16106acf04ede9bf9547f51fa7bad5a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:df:03:6f:c6:bc:99:15:d8:d6:1f:9b:ec:93:
97:de:15:99:f6:0d:50:21:63:b6:00:f0:0d:86:3f:
64:10:72:1c:71:2b:f0:89:27:8d:d1:87:b4:76:6b:
01:ea:a6:94:96:43:a8:21:ce:7d:09:ac:ed:30:33:
f3:e6:b2:cd:3a:29:75:4f:d3:10:a2:de:9e:1e:9e:
a8:a3:20:25:53:7a:88:51:84:18:d7:c8:b1:be:d5:
df:c8:14:ce:1e:96:f8:12:14:90:18:b7:48:43:31:
0b:41:46:7a:7a:4e:18:c3:bf:61:f8:93:46:0e:b4:
9f:ba:07:a7:86:18:ed:e4:de:7f:30:1c:57:2e:b0:
51:c5:02:68:ef:3d:f1:66:c5:20:a7:e1:89:51:17:
a0:d5:20:c0:00:7a:3f:96:64:68:ba:8f:e4:43:d2:
89:7f:c7:07:be:b6:63:4b:c0:0f:8d:37:01:bd:00:
c9:b3:96:cb:d0:87:24:db:c9:f1:43:47:6c:71:78:
cf:aa:ae:9a:f7:77:d7:00:45:d4:cd:b8:cb:ac:94:
27:a3:71:cf:c1:fd:cf:40:90:20:3f:dc:a2:10:09:
7a:2a:46:90:8c:43:2c:87:f6:e6:0f:c1:da:30:61:
d0:fb:7f:83:17:72:4e:40:74:32:b3:09:28:33:7a:
71:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:61:23:C1:61:06:AC:F0:4E:DE:9B:F9:54:7F:51:FA:7B:AD:5A:2E
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/7mEjwWEGrPBO3pv5VH9R-nutWi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.102.75.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:34:4c:a3:0b:74:52:85:59:e6:90:16:4c:18:66:45:7e:0c:
b3:1c:e7:9e:b4:93:45:33:70:99:6d:51:9a:ef:4a:7e:61:58:
3d:b4:5d:cb:f2:f5:7c:57:36:9e:a3:f6:a9:f3:23:e4:22:10:
a1:25:f1:5c:e7:99:d3:6c:2e:61:33:17:e0:b3:cf:b1:a8:75:
24:f6:95:97:8b:66:5b:30:57:eb:de:3c:07:df:aa:e5:21:ad:
74:82:46:bb:cf:cc:b6:20:b6:d9:94:97:dd:bd:df:9d:27:b4:
0b:0f:a9:d3:93:6a:40:82:f9:a6:e5:22:ec:06:e6:b8:f5:b4:
7a:ca:af:8b:8c:5c:5e:ff:9a:16:f9:f0:10:24:c1:73:02:77:
28:49:24:e7:79:5f:d5:8a:b5:e0:1a:79:68:ee:d6:aa:a4:07:
9f:29:6d:e3:40:1d:63:95:fb:06:0d:9f:15:84:29:30:f4:d2:
10:2d:02:04:fe:01:fb:f9:a9:03:aa:fc:d5:d2:eb:5d:a2:74:
b2:12:e6:06:f6:9b:81:ee:fd:9b:9d:66:31:3b:59:e3:b1:c4:
de:53:30:cf:61:31:72:05:f5:6d:bb:c6:aa:c7:d2:b6:e1:ae:
f6:e1:4b:42:9f:4c:ca:18:1f:97:f5:90:6f:3b:ab:d3:bc:6c:
d6:d3:1b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 07:35:56 2024 by rpki-client on console-fra.rpki-client.org