Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SqNQLzv28teVj2VnT6nh7x0U5o0.roa
File: SqNQLzv28teVj2VnT6nh7x0U5o0.roa (raw, json)
Hash identifier: Dpxwu7+zmpEm4SW45cAKT+zYD+PwSuHBL7hFoMX5hn8=
Subject key identifier: 4A:A3:50:2F:3B:F6:F2:D7:95:8F:65:67:4F:A9:E1:EF:1D:14:E6:8D
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF9421451A3F882872259C71366698
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SqNQLzv28teVj2VnT6nh7x0U5o0.roa
Signing time: Tue 02 Jan 2024 06:32:24 +0000
ROA not before: Tue 02 Jan 2024 06:32:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14576
IP address blocks: 193.0.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:94:21:45:1a:3f:88:28:72:25:9c:71:36:66:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4aa3502f3bf6f2d7958f65674fa9e1ef1d14e68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:3b:8f:4f:4f:79:3e:34:2f:47:f2:bd:49:
8d:ea:bb:27:d6:7f:ed:a1:b6:d6:de:89:ba:65:aa:
ad:bc:b0:00:ee:e9:55:b5:59:56:4f:08:b4:c2:03:
0e:2b:b0:eb:a1:04:2b:22:5f:47:78:d2:8a:73:32:
45:e4:0e:08:d1:26:a7:2d:be:a7:f0:e7:09:50:8c:
94:fd:3d:b0:0b:d5:95:1b:28:e5:2f:e1:12:34:e5:
97:a8:de:b9:67:55:c0:70:12:3d:93:fb:b2:13:eb:
f9:6a:78:97:c3:37:38:09:86:4e:cd:fa:d1:aa:8b:
b5:8c:8b:13:70:ef:50:9f:f5:24:ca:fb:fb:ee:1a:
d0:a3:3e:fc:ba:c0:73:29:5a:34:56:d8:78:13:ed:
6d:92:27:fd:0c:37:8a:1a:45:6f:05:0e:7f:65:44:
83:82:2a:27:0f:25:29:06:eb:09:84:e1:ac:6f:f1:
5e:c0:08:06:34:4a:08:ef:c3:01:40:d1:90:a6:2e:
b8:5c:ab:e4:9b:fe:b7:56:6a:fa:18:56:8b:48:89:
0c:af:6d:be:88:2f:f8:42:86:1d:74:92:9f:6b:64:
d5:62:28:7f:a3:69:62:86:89:56:dc:89:c5:be:68:
f0:3f:95:2e:90:8b:24:8c:4f:35:4a:60:ce:4b:fb:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A3:50:2F:3B:F6:F2:D7:95:8F:65:67:4F:A9:E1:EF:1D:14:E6:8D
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SqNQLzv28teVj2VnT6nh7x0U5o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.201.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3c:48:09:8e:46:8d:e3:78:7a:f7:b5:8f:c1:90:47:9b:09:
a9:d7:ce:6c:ff:2c:36:a7:71:20:8c:1c:5c:77:5d:23:4f:ae:
dc:9a:4d:b3:c7:a7:88:2f:65:8b:ba:63:65:02:80:d6:d1:ca:
f1:53:29:f1:e8:c1:4e:63:72:ea:25:bf:c7:3b:e1:b7:29:db:
bf:4c:8f:5f:00:80:32:af:2e:48:d6:7e:25:ea:07:bf:f4:fa:
05:31:7e:c2:cc:b2:af:f6:dc:67:35:c4:52:0e:50:87:40:20:
50:15:a7:c1:cf:bc:eb:11:8e:a0:59:84:1e:f4:7c:21:89:e8:
32:f4:06:14:c1:13:fa:bc:58:73:ce:2b:a9:a8:1b:f2:b6:27:
07:77:0c:04:33:20:b3:8e:41:aa:25:fa:22:3f:21:5a:3c:84:
ba:f4:36:4d:2d:d8:23:ab:29:61:cc:49:af:ff:5b:7a:a3:45:
6b:2d:08:4d:a3:9b:50:ab:c6:12:24:6a:eb:46:c8:99:79:7e:
e3:d7:77:fa:b2:f9:b7:db:cf:9a:c3:e4:66:3a:ae:16:05:c2:
c2:a9:0c:5f:86:31:33:fd:ba:d8:90:5a:a4:88:7f:62:af:dd:
e9:33:5a:e1:25:9b:70:4f:5b:45:d8:f4:50:1f:5b:b3:7e:34:
d4:46:a7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:29:38 2024 by rpki-client on console-fra.rpki-client.org