Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/k-RRhFA37_KYeIfVhP17E0JfKC8.roa
File: k-RRhFA37_KYeIfVhP17E0JfKC8.roa (raw, json)
Hash identifier: AUOQqHIwfRgp+6RTgTFXmIkLMwqyEN0NbpCV7J/DxG0=
Subject key identifier: 93:E4:51:84:50:37:EF:F2:98:78:87:D5:84:FD:7B:13:42:5F:28:2F
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 018CC8015F43E03BC761C378EB7526A2F367
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/k-RRhFA37_KYeIfVhP17E0JfKC8.roa
Signing time: Tue 02 Jan 2024 02:29:42 +0000
ROA not before: Tue 02 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42641
IP address blocks: 193.142.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:5f:43:e0:3b:c7:61:c3:78:eb:75:26:a2:f3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Jan 2 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93e451845037eff2987887d584fd7b13425f282f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:31:e8:de:4c:54:f0:14:a1:f9:23:cc:38:
75:c8:f1:43:d1:ea:58:1c:00:80:66:9a:10:ea:68:
68:34:0a:7c:92:ab:df:a6:21:8e:71:e5:99:a6:9f:
e7:b6:1e:1f:eb:cd:aa:ef:a5:43:05:a1:8a:c5:2a:
e0:35:cd:7e:f5:5c:d2:d6:e6:4e:8f:70:28:45:0b:
a7:93:82:fb:0b:62:24:9a:1d:dc:ba:9b:e7:77:eb:
36:14:55:7e:35:7e:5a:5d:de:48:37:3f:22:aa:a5:
ff:cc:58:92:b1:a0:fe:bb:15:99:88:3e:6d:94:35:
05:db:06:c5:d3:d7:76:d7:52:5c:5a:b4:98:87:d6:
ec:10:13:11:ec:d9:95:99:f9:57:ec:84:90:66:39:
98:f1:ed:8a:67:cb:40:32:df:60:b4:64:74:34:f4:
9b:35:46:23:e9:c0:4a:ef:59:be:5e:6a:fb:54:eb:
4f:61:75:06:bf:1f:39:d8:87:3b:b5:b2:0a:8b:67:
71:32:eb:84:0b:27:d5:5d:7c:5a:cd:3d:0c:ee:96:
47:07:ba:5b:3c:86:7f:cf:d0:b6:6a:d7:01:d5:43:
39:6d:91:5d:27:9a:7c:7e:63:ba:35:53:23:b6:23:
52:6e:d8:75:f5:62:af:50:13:42:7a:1f:7e:31:74:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E4:51:84:50:37:EF:F2:98:78:87:D5:84:FD:7B:13:42:5F:28:2F
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/k-RRhFA37_KYeIfVhP17E0JfKC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.219.0/24
Signature Algorithm: sha256WithRSAEncryption
11:72:8d:be:44:d5:39:12:11:92:5a:44:c4:66:9b:04:b0:d5:
2b:30:84:41:bc:6e:fb:02:f7:d1:1f:a5:93:30:f7:ac:91:de:
9f:78:cd:90:b1:f8:61:68:18:d6:7a:c6:c7:2e:1a:55:46:f3:
85:6e:fe:a4:e1:2c:72:a1:e4:d0:ca:13:a6:cd:a3:89:b2:d7:
a2:bf:2c:cf:f0:4b:56:a3:b0:33:44:36:5e:d8:93:f8:7c:30:
8b:f4:30:d3:d1:8c:ac:56:ef:4b:a9:f8:58:20:7e:22:45:f6:
27:da:6c:ff:fe:da:96:69:58:d5:1a:31:9c:68:f1:09:6b:39:
d2:97:98:f7:d8:5b:e9:df:eb:c1:1a:e3:e9:97:f2:22:15:4a:
81:15:a4:c3:58:2a:df:3d:be:1b:8b:c2:0c:30:f8:52:6f:f2:
3c:7a:d8:e6:79:18:9c:0b:fb:c6:f6:fb:2d:aa:2b:cd:c8:b9:
b2:6e:eb:57:6b:7d:b6:a7:29:64:ad:8f:d2:0a:4f:a9:a1:57:
9b:41:a1:b7:85:a4:57:2e:be:77:08:90:44:15:be:ef:22:b1:
2c:c0:89:3d:fc:1d:d4:11:bb:04:da:85:a5:99:16:f7:4b:a2:
8d:84:d7:59:29:22:09:00:75:c2:93:b2:a5:ec:2b:ec:af:65:
88:0a:a6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:26:58 2024 by rpki-client on console-ams.rpki-client.org