Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/sMUdGjfWOqniU_Z9RN-tJKSWzOE.roa
File: sMUdGjfWOqniU_Z9RN-tJKSWzOE.roa (raw, json)
Hash identifier: kUZcwdeBZKJnXlFQvQ4Ja8KYT8BoSFhy1Cn1qDamsjo=
Subject key identifier: B0:C5:1D:1A:37:D6:3A:A9:E2:53:F6:7D:44:DF:AD:24:A4:96:CC:E1
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018F79750FDB80E19E25F269E6DBC1707919
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/sMUdGjfWOqniU_Z9RN-tJKSWzOE.roa
Signing time: Tue 14 May 2024 23:34:25 +0000
ROA not before: Tue 14 May 2024 23:34:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29641
IP address blocks: 193.124.184.0/24 maxlen: 24
193.124.185.0/24 maxlen: 24
193.124.186.0/24 maxlen: 24
193.124.187.0/24 maxlen: 24
193.124.188.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.190.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:79:75:0f:db:80:e1:9e:25:f2:69:e6:db:c1:70:79:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: May 14 23:34:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0c51d1a37d63aa9e253f67d44dfad24a496cce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:df:af:43:66:5f:4c:43:2b:ea:43:1c:d9:
c2:3d:91:4a:82:8e:e7:3c:9d:46:07:d8:07:01:18:
27:b9:9c:e3:f1:73:d9:1b:c5:06:ad:4b:8f:cd:d1:
9a:53:46:26:87:f3:7f:a3:a5:5a:3f:3b:49:6b:53:
f7:1c:fa:00:39:f9:d3:ec:24:2f:90:c0:15:17:7a:
94:24:1e:41:df:49:13:6f:25:1a:af:17:a1:85:d2:
d0:b7:91:b9:7f:89:90:fb:f7:78:58:5d:10:46:ad:
f5:3d:a5:18:49:46:f9:15:1e:3d:ee:78:f3:e0:24:
bc:9f:f9:38:72:c5:b6:4e:44:12:84:0a:d4:2e:3e:
6a:6a:4a:3f:96:10:40:b3:52:c1:ae:54:2e:39:53:
b5:71:9e:2b:0f:68:f8:d6:44:10:a9:81:92:b1:8f:
25:f1:b7:d0:ed:82:78:c5:07:04:24:a5:24:da:87:
33:73:77:64:54:b2:2b:dd:35:25:c3:12:ab:04:b2:
11:7d:42:de:44:de:ae:c0:eb:c6:76:7f:27:21:eb:
31:0d:48:3f:86:4a:a3:10:fc:56:0b:27:ca:8c:f3:
91:36:d7:b5:a4:da:e8:82:06:3d:f4:a9:3d:da:9d:
8e:33:53:4c:f1:85:b5:0e:dd:58:95:94:cc:47:a1:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C5:1D:1A:37:D6:3A:A9:E2:53:F6:7D:44:DF:AD:24:A4:96:CC:E1
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/sMUdGjfWOqniU_Z9RN-tJKSWzOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.184.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:19:fe:53:99:bc:9d:0e:6d:69:cc:5c:34:00:76:a0:28:3b:
ef:f9:26:63:62:56:22:69:42:66:fc:06:ff:df:4b:8f:54:c7:
2a:be:6f:1b:da:a8:5a:c7:18:14:bd:e7:aa:3a:cf:36:9a:e0:
7a:ec:fe:13:ae:c2:3c:fb:5b:a7:1f:c2:c8:16:25:4b:86:e6:
e2:a8:6b:50:ef:f5:d6:09:ea:0f:fc:99:ea:84:81:60:6a:3f:
9a:57:53:9f:1c:29:fe:02:da:33:8e:d4:55:64:67:e4:ac:9f:
9b:63:bd:26:04:16:73:7e:00:c5:c0:cc:5d:45:8c:01:5b:f0:
29:13:9b:f6:49:6c:c5:38:69:ec:73:f6:ee:1a:54:7f:34:e5:
25:45:aa:2c:88:6d:f5:98:24:23:e6:c9:0a:f5:c9:9a:3c:f6:
d6:b2:df:53:62:c1:d1:ce:92:2e:3d:49:36:19:44:d2:df:7b:
36:2b:25:0d:5b:ce:f9:60:ae:ca:29:12:29:0d:91:20:10:c1:
75:a2:c5:8d:7e:dc:50:98:d6:45:2d:a7:6b:03:90:08:2f:67:
a2:e4:d6:d5:a8:8b:28:bf:7a:63:2e:33:e3:e9:3f:df:1d:86:
0c:25:0d:7f:b4:4e:55:67:81:25:68:c4:25:e2:ba:34:03:b4:
64:92:c3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 08:58:09 2024 by rpki-client on console-ams.rpki-client.org