Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/iS999UB4OSq5E_DeUgDgbNecsAI.roa
File: iS999UB4OSq5E_DeUgDgbNecsAI.roa (raw, json)
Hash identifier: EvhYZ0PolpCR8B1DNeinCLiXX1u9rKajWobwWYNu7cs=
Subject key identifier: 89:2F:7D:F5:40:78:39:2A:B9:13:F0:DE:52:00:E0:6C:D7:9C:B0:02
Certificate issuer: /CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Certificate serial: 018CC4932C066FD50E0C5E056CBF0655133E
Authority key identifier: B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/iS999UB4OSq5E_DeUgDgbNecsAI.roa
Signing time: Mon 01 Jan 2024 10:30:28 +0000
ROA not before: Mon 01 Jan 2024 10:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212533
IP address blocks: 193.30.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:2c:06:6f:d5:0e:0c:5e:05:6c:bf:06:55:13:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Validity
Not Before: Jan 1 10:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=892f7df54078392ab913f0de5200e06cd79cb002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f5:2c:bf:ee:51:f8:68:6d:6c:ef:0e:5a:50:
48:51:83:fa:55:17:a2:b3:79:49:01:c4:3f:0d:47:
ab:72:0a:3b:f4:4c:b3:3e:f3:50:e4:8c:3c:1c:e9:
b3:5b:b2:d3:ab:8d:f5:16:ee:c9:c8:d9:5a:f3:29:
42:05:0a:1c:19:c5:84:56:67:6b:ff:2c:1d:42:3e:
37:07:a5:a7:10:c5:d9:a0:45:98:b6:e5:42:6b:97:
cb:74:6f:b4:be:77:de:9c:41:c3:c7:57:65:a1:64:
b0:51:43:18:b3:45:95:fc:82:97:88:65:e3:0c:d9:
35:65:c4:a5:d0:e9:24:19:a9:70:c4:dc:b9:a8:88:
ef:5e:e1:73:33:d9:bc:2d:19:9a:c1:8a:de:da:8e:
9b:5b:bc:e3:51:b7:09:da:cc:b3:f3:0e:57:a7:5a:
52:cb:3c:1c:f4:cd:68:18:99:f7:3c:b7:f1:a7:9f:
0e:07:bd:a7:62:2f:a9:e4:cc:86:f4:21:cb:59:73:
85:81:f8:17:3d:3d:5b:75:26:ad:11:39:d4:69:4d:
93:19:dd:20:f3:4d:bc:8a:97:a8:f8:54:00:2e:4a:
da:96:82:8a:4a:3a:a1:a9:e2:a4:71:aa:cb:d7:7e:
e1:2f:86:de:9d:76:58:16:9d:29:f9:b5:7e:0e:2a:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2F:7D:F5:40:78:39:2A:B9:13:F0:DE:52:00:E0:6C:D7:9C:B0:02
X509v3 Authority Key Identifier:
keyid:B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/iS999UB4OSq5E_DeUgDgbNecsAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.118.0/24
Signature Algorithm: sha256WithRSAEncryption
14:43:7a:d9:d8:df:ed:6f:be:cf:7b:a2:e5:cc:0e:5b:83:2d:
67:be:d0:af:09:1b:f0:d5:01:f5:06:9b:71:8c:2a:5e:45:37:
e5:fa:48:bc:f8:b0:fb:19:d1:97:c8:0b:32:cf:7a:03:71:e7:
08:4e:a3:f4:67:37:78:38:4c:6b:04:ec:4e:5d:ae:84:ca:ee:
56:4b:ea:6e:39:6e:0e:db:91:01:53:e2:59:82:81:84:89:c6:
94:46:b7:0d:af:d9:42:93:b6:e6:e4:74:bc:80:8e:b4:ca:09:
e7:f5:e2:2d:d2:28:1a:eb:5a:5c:10:7c:48:92:b0:0b:bf:19:
c3:57:8d:e5:9a:ca:55:99:20:d6:ee:d9:da:72:f7:3d:0a:12:
cd:e3:c4:b1:cf:ca:7f:61:71:e5:b3:eb:52:70:0e:99:c6:c9:
71:5e:2b:99:40:ce:b8:cf:60:d9:e4:a9:68:3e:cf:71:ce:2d:
dd:ab:9b:cf:5f:6f:7b:ff:b4:9e:c0:ed:23:21:e8:3e:39:ae:
bc:06:94:29:cd:ea:7b:48:83:87:d4:3e:44:3c:f5:fc:ce:fa:
75:d9:b4:d7:18:95:90:bd:f6:e2:5d:63:53:84:ea:31:fa:ae:
7e:84:d6:d6:0b:54:3f:00:38:5e:41:26:5d:05:5b:01:3d:e0:
64:f0:ca:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:48:09 2024 by rpki-client on console-fra.rpki-client.org