Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/SgXsJQ6eL_5WBVaW5Q_IyO-0eCo.roa
File: SgXsJQ6eL_5WBVaW5Q_IyO-0eCo.roa (raw, json)
Hash identifier: dSIedMh3pJj+pMRXANEA2AWi+InM1SBeD6YnfgdWi+A=
Subject key identifier: 4A:05:EC:25:0E:9E:2F:FE:56:05:56:96:E5:0F:C8:C8:EF:B4:78:2A
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 018CC3B714D382A4A6340EB7034B5E6C3C39
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/SgXsJQ6eL_5WBVaW5Q_IyO-0eCo.roa
Signing time: Mon 01 Jan 2024 06:30:04 +0000
ROA not before: Mon 01 Jan 2024 06:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 193.142.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:14:d3:82:a4:a6:34:0e:b7:03:4b:5e:6c:3c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Jan 1 06:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a05ec250e9e2ffe56055696e50fc8c8efb4782a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:69:07:f2:e6:8f:8d:4d:49:11:34:bf:ff:
0c:39:f6:c9:7f:a8:4a:fa:ad:5f:45:cc:4a:db:56:
64:d1:e9:3f:3d:49:e4:c9:34:9d:36:86:9c:d1:bd:
bb:74:cb:3d:82:cf:c6:24:ea:43:ed:49:5f:fa:99:
94:92:88:e6:9a:48:8f:93:b5:b5:5f:83:bb:f6:39:
c5:b7:2c:f4:46:ff:36:ad:f9:f9:cb:a0:3d:6c:92:
b3:db:1e:d9:88:5f:e0:f3:92:e2:ab:22:ae:b0:29:
44:36:eb:8b:cd:fc:e5:b6:4a:4d:91:a1:df:9b:58:
1f:c8:da:21:2b:60:ca:a1:b3:62:59:f5:f9:03:87:
24:c2:c8:7c:79:27:14:ca:f3:2c:09:82:da:8e:78:
f4:58:54:ed:91:fa:d9:b8:b9:42:ae:98:5c:26:e1:
79:44:01:8d:29:9d:95:84:65:30:ee:b3:35:59:f7:
ac:25:d2:7b:f2:78:66:74:ec:6d:3d:b2:7a:73:a1:
1c:b4:bc:92:52:27:38:a4:00:2e:8c:2f:9e:d1:47:
b0:28:8a:64:1c:bd:ab:5d:00:bb:f2:88:34:86:68:
15:5b:ca:97:7b:bd:ef:6a:91:df:b1:31:f9:b8:83:
ee:79:e2:a4:27:52:19:72:a1:16:16:5c:22:37:0b:
9b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:05:EC:25:0E:9E:2F:FE:56:05:56:96:E5:0F:C8:C8:EF:B4:78:2A
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/SgXsJQ6eL_5WBVaW5Q_IyO-0eCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.125.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ae:8c:0a:48:fa:a4:1c:4e:5f:88:56:a3:10:95:9a:5d:0b:
75:c9:38:41:9b:2c:89:c0:c1:30:86:d8:39:3a:14:37:24:b8:
34:9b:16:54:7e:01:51:63:6f:dd:98:56:69:a8:ab:5f:39:c5:
71:c6:86:fc:77:66:f5:a1:98:5f:51:0a:13:19:a5:a0:6e:51:
df:4c:46:31:83:7c:55:98:1a:cf:8d:48:6f:26:e2:15:4d:e8:
db:c3:38:7d:af:21:81:e2:9e:25:f2:58:08:66:17:fa:9b:cd:
b1:91:89:21:05:65:6c:4b:4c:bb:04:f4:63:05:ec:c0:b0:64:
9a:ff:c3:7f:a3:f4:02:d6:04:f5:cb:e8:56:07:13:d0:65:a4:
78:c3:df:d1:2d:bf:5d:e3:8d:7b:c0:c3:4b:bf:8a:53:df:31:
91:26:51:86:f8:88:44:63:7d:99:c6:5b:ac:cf:f1:4b:94:b4:
ef:83:82:ee:45:74:97:ba:1a:61:bb:ac:c5:ab:1e:01:dd:c9:
01:ac:e4:1b:c0:13:de:fc:bd:b7:2f:4e:57:a7:53:c2:a2:d7:
a4:e0:1e:02:00:3b:fd:94:1d:50:a0:59:c0:a1:b0:0a:3d:e2:
71:cd:d0:b5:b6:9d:30:ed:57:b4:c5:4e:aa:86:8e:3b:fe:ad:
bf:c1:1d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 16:23:42 2024 by rpki-client on console-fra.rpki-client.org