Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/SuFyv_roQ_gKrwyPQszsyNvuv5Y.roa
File: SuFyv_roQ_gKrwyPQszsyNvuv5Y.roa (raw, json)
Hash identifier: yOks+hOfYClyszuOvrQgQlEbi+Dqu43WLZeYasbrx98=
Subject key identifier: 4A:E1:72:BF:FA:E8:43:F8:0A:AF:0C:8F:42:CC:EC:C8:DB:EE:BF:96
Certificate issuer: /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial: 018CC9BC98EB1E2350A8E46F23FE8D0B9762
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/SuFyv_roQ_gKrwyPQszsyNvuv5Y.roa
Signing time: Tue 02 Jan 2024 10:33:49 +0000
ROA not before: Tue 02 Jan 2024 10:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15943
IP address blocks: 193.102.58.0/24 maxlen: 24
193.101.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:98:eb:1e:23:50:a8:e4:6f:23:fe:8d:0b:97:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Validity
Not Before: Jan 2 10:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ae172bffae843f80aaf0c8f42ccecc8dbeebf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:7a:05:e8:27:64:17:0e:c3:e9:5a:c4:42:
79:26:bb:cd:2e:9e:c4:87:ca:ef:5f:18:cc:05:86:
49:cd:aa:e1:fc:f0:e6:5e:af:1b:55:a0:68:7c:9f:
a9:8f:82:9e:b1:ed:19:4d:b5:79:ae:a3:46:14:4d:
ba:3e:1b:c7:7e:e8:f1:87:1b:ee:5b:47:5a:34:af:
87:61:6f:62:d6:8b:e8:e0:21:63:e8:73:e7:85:c8:
52:c1:10:5e:6e:c3:d9:05:8b:ac:9b:2d:3d:43:5e:
60:e2:7d:35:11:55:83:69:d9:84:5e:f9:c4:c4:b4:
33:c9:46:d0:0c:b5:65:b3:52:47:f1:af:3b:08:15:
09:7d:f7:ed:a7:28:43:c6:1a:16:12:ed:bd:79:fa:
fd:ac:73:40:8e:7e:28:ca:7b:12:e6:b7:c0:26:08:
01:eb:64:60:ed:3c:47:a2:78:1c:63:c9:87:10:c0:
49:f7:dc:c1:72:f8:eb:b3:df:ee:61:1e:52:1a:c6:
39:f5:8e:a6:32:82:05:08:44:93:f8:f1:0e:ec:0f:
14:36:fd:ca:a2:e5:25:36:27:a2:81:34:d9:7e:3b:
c3:aa:ba:ad:eb:9d:ac:db:79:46:2e:99:be:a9:2a:
7c:45:7f:56:69:67:0a:9e:34:a8:32:5e:57:a4:30:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E1:72:BF:FA:E8:43:F8:0A:AF:0C:8F:42:CC:EC:C8:DB:EE:BF:96
X509v3 Authority Key Identifier:
keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/SuFyv_roQ_gKrwyPQszsyNvuv5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.120.0/23
193.102.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:45:2c:e5:2d:44:27:68:9d:3c:48:ac:54:bc:53:84:25:a6:
5a:4b:a8:69:ea:08:79:8d:e8:a4:74:01:dc:95:22:99:0a:20:
3b:81:3c:bf:fb:d5:0e:08:c0:1c:f0:54:d9:c5:98:0b:82:94:
f3:14:b4:12:d7:62:10:7c:a2:dc:0f:57:3f:7f:59:f8:bc:9d:
9a:48:b1:b7:b3:37:7c:eb:ab:0d:a4:3d:00:c0:b2:40:9a:2b:
72:76:c1:9e:ba:0f:b8:fc:8d:26:20:e0:b9:36:b8:bb:05:aa:
bd:f6:e1:e9:0f:3b:69:0f:fd:8f:d9:2a:ff:2d:21:55:84:78:
86:8b:fb:4f:26:c3:19:28:0b:19:83:a3:49:11:82:de:6f:8d:
43:70:00:7c:06:64:fd:e2:ba:2e:76:43:e9:fb:53:2f:a4:44:
82:44:95:ed:d5:0b:83:7e:6a:df:dd:ab:d2:48:30:71:89:a9:
31:23:37:c5:7e:ef:d6:f0:94:df:94:cd:2c:c9:21:c9:51:c0:
90:23:ba:e0:c1:a3:85:4c:98:25:fc:96:82:17:a5:c1:ec:66:
51:fb:df:42:a4:16:02:90:cf:cb:56:f4:e5:42:d1:31:c6:bc:
b3:6e:28:fb:67:65:f9:6a:1b:e9:cf:e9:35:2b:ca:c8:4f:40:
e9:4b:a0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:01:56 2024 by rpki-client on console-fra.rpki-client.org