Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/e22eupExYF1pW2b8RCgCB9Ep0uc.roa
File: e22eupExYF1pW2b8RCgCB9Ep0uc.roa (raw, json)
Hash identifier: Yzuo92r/WJ7tYQsMfbO/rPGv2/UoTUolPy2GwCKVaNE=
Subject key identifier: 7B:6D:9E:BA:91:31:60:5D:69:5B:66:FC:44:28:02:07:D1:29:D2:E7
Certificate issuer: /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial: 018D7951BA5357AFB69EB5901E0FF5D512C8
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/e22eupExYF1pW2b8RCgCB9Ep0uc.roa
Signing time: Mon 05 Feb 2024 12:50:15 +0000
ROA not before: Mon 05 Feb 2024 12:50:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41949
IP address blocks: 193.163.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:51:ba:53:57:af:b6:9e:b5:90:1e:0f:f5:d5:12:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Validity
Not Before: Feb 5 12:50:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b6d9eba9131605d695b66fc44280207d129d2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:f3:95:c2:a5:12:e7:6c:be:fb:ae:2b:d7:
3d:65:47:10:0f:3b:a0:c5:cb:69:90:5f:9e:df:2f:
47:54:b9:02:bd:d1:bd:41:c7:c8:63:14:70:a0:a2:
f8:eb:bf:c5:61:94:3a:de:d0:26:46:a8:30:10:52:
22:43:ba:3b:b5:19:e0:f8:6a:a3:56:d0:80:f8:b1:
1a:f7:09:a2:e1:c0:de:fa:d1:73:4c:b3:46:32:db:
f0:a7:00:66:31:e5:a3:2f:c7:23:41:1c:df:65:69:
38:8d:c8:73:6a:a3:68:6c:0f:d1:e8:04:b0:f8:f2:
24:c3:d4:3c:9b:40:40:07:2e:96:4a:c5:31:67:e2:
8f:f8:4c:70:71:23:6f:04:de:0a:db:23:9b:b3:30:
35:36:16:95:1f:9e:97:ae:e2:37:2d:3f:3a:a5:4f:
82:e0:ca:34:f6:39:c9:90:6d:78:b1:00:89:d7:6b:
2d:a0:04:c1:5d:ca:f8:3d:74:fd:ce:87:0e:1d:32:
09:eb:8e:4e:07:b3:29:ed:3b:0d:d5:f5:99:c1:73:
57:02:d8:2e:b8:4e:3d:18:af:89:e7:dc:3c:47:da:
86:9d:0b:ba:df:e1:9f:c9:a7:69:e1:0c:50:95:b0:
01:7d:5f:30:7c:93:9b:da:e8:a2:0f:2a:3b:1e:a4:
8e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6D:9E:BA:91:31:60:5D:69:5B:66:FC:44:28:02:07:D1:29:D2:E7
X509v3 Authority Key Identifier:
keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/e22eupExYF1pW2b8RCgCB9Ep0uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.148.0/24
Signature Algorithm: sha256WithRSAEncryption
06:30:f1:1f:01:b2:55:67:68:67:68:bd:ef:26:a7:4e:25:5d:
04:bc:94:1a:e9:bb:6c:46:c7:0f:73:d0:33:84:ff:44:65:00:
81:b5:27:39:46:75:c8:08:dc:a4:64:f7:08:2d:09:e9:f9:b2:
d1:55:cc:04:72:2d:24:63:12:f9:dd:be:c5:f2:15:30:a4:ca:
82:8f:c3:e6:78:5d:4b:0a:bc:a2:56:44:7f:2f:eb:ad:c4:33:
ea:06:b6:a2:8f:f9:eb:99:0c:b5:47:c5:d3:5b:df:13:05:76:
1a:7c:9e:32:41:f6:78:d3:82:a1:2b:d2:a3:2d:64:7f:5c:72:
62:d1:08:67:85:f0:c1:4a:c9:a7:bd:dd:04:90:1f:15:d9:fd:
9b:cb:d5:b9:66:bc:fa:d9:bf:a8:6f:8a:94:de:17:ed:88:e5:
aa:bc:db:81:5e:26:37:b4:5d:87:c5:8f:25:05:b1:67:d3:20:
36:6d:61:97:ae:3b:83:c4:bd:2d:19:a9:09:21:25:54:83:56:
d2:f6:b4:06:da:43:4b:66:09:8e:b1:7b:b3:ff:76:de:93:4c:
b2:ae:66:62:55:3b:72:2f:0f:41:08:3f:74:79:b7:13:6a:4a:
46:d0:51:54:3c:a5:10:61:46:9b:ab:36:43:a2:2a:10:05:13:
b1:dd:03:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:04:01 2024 by rpki-client on console-fra.rpki-client.org