Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/RRSrei0daMKFpGD4tjLj10dTj94.roa
File: RRSrei0daMKFpGD4tjLj10dTj94.roa (raw, json)
Hash identifier: bwrqITx1fF/iLkF2SNzXpzhVmx9R2jxpYIoe20tzTKo=
Subject key identifier: 45:14:AB:7A:2D:1D:68:C2:85:A4:60:F8:B6:32:E3:D7:47:53:8F:DE
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 018CC7941E6AEB158FAFCF41A2877F365CEC
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/RRSrei0daMKFpGD4tjLj10dTj94.roa
Signing time: Tue 02 Jan 2024 00:30:22 +0000
ROA not before: Tue 02 Jan 2024 00:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213274
IP address blocks: 193.162.43.0/24 maxlen: 24
2a0f:cb00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:1e:6a:eb:15:8f:af:cf:41:a2:87:7f:36:5c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Jan 2 00:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4514ab7a2d1d68c285a460f8b632e3d747538fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:1c:b2:3b:d6:03:77:74:b1:df:2c:00:ba:
81:d3:30:fb:8d:a7:86:1b:28:c8:a7:4b:9c:ea:f5:
26:96:b2:dd:e2:5e:f0:db:60:68:c4:21:ec:9c:e7:
be:c9:f2:2b:33:92:5c:a3:b8:9b:78:98:aa:fe:e6:
16:c9:7e:29:6b:b4:ba:c8:60:09:c1:e0:47:ea:70:
a7:e7:48:27:b4:58:ca:b0:76:1e:57:ca:93:d1:16:
2e:41:d4:9b:f2:92:10:38:4a:3f:4a:36:81:3c:18:
4a:29:d1:fc:1c:6c:3e:69:92:96:bc:4a:ee:08:85:
ca:3f:aa:3f:a6:fe:74:18:b7:ec:f5:c6:40:00:64:
34:84:7a:dc:c6:44:ad:26:7b:28:64:50:17:89:9b:
bb:c6:a2:20:9a:18:69:6b:6e:cb:5a:14:d0:4c:16:
9c:e3:b8:5f:be:80:9b:79:e1:ce:68:bf:37:4f:0f:
e4:8e:26:fe:0e:7c:44:b3:cd:02:b2:f3:95:7d:c2:
84:57:a0:51:87:06:96:b7:b7:40:23:04:aa:bd:ec:
17:67:eb:f4:e5:f9:7d:4a:e1:0c:a5:f7:86:c9:94:
c8:2a:dc:8c:d5:a6:de:df:87:e3:70:90:a2:cb:d3:
f3:99:db:3d:a6:fa:ef:f4:3e:05:34:54:8b:07:40:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:14:AB:7A:2D:1D:68:C2:85:A4:60:F8:B6:32:E3:D7:47:53:8F:DE
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/RRSrei0daMKFpGD4tjLj10dTj94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.43.0/24
IPv6:
2a0f:cb00::/29
Signature Algorithm: sha256WithRSAEncryption
03:a5:fa:c8:fa:1f:a0:40:e9:37:cf:dd:8e:a5:07:36:f0:03:
c3:78:fa:db:cf:1c:d1:2b:74:18:8d:a6:b5:75:b6:5f:93:2a:
70:18:19:9c:5d:d5:ed:b0:a5:8b:d5:52:1e:09:c9:9d:f9:25:
de:0c:37:4e:8e:b6:ab:c5:b8:ff:01:ae:b8:04:eb:9e:e1:c6:
3f:89:2b:74:a0:2b:3f:68:cf:29:53:c7:a5:27:2d:9f:a1:0b:
52:d2:77:a0:d0:73:9a:21:4d:6a:f7:c1:cd:94:30:ba:21:78:
67:69:2c:cb:f1:0e:b5:fa:53:d8:76:18:0c:69:0b:75:92:7e:
14:84:17:77:8b:d8:31:7f:c1:61:ef:1f:a3:93:33:ff:64:12:
7d:09:b9:6d:f8:bc:dc:e6:01:69:87:31:ab:fd:8a:0c:a6:60:
3f:95:92:18:b4:36:8f:f1:5b:4a:ab:25:59:38:36:85:89:ac:
29:1f:f3:44:40:fb:12:31:a5:10:82:f4:51:db:d3:94:60:fe:
d5:1f:b1:dd:3e:a6:7a:c3:3a:d9:68:19:05:fc:c8:54:a4:e7:
33:e3:97:ad:7d:66:54:a4:16:5c:fa:32:0c:76:3e:57:97:50:
eb:18:49:56:a5:75:ae:42:f2:b7:b4:9c:bb:7b:b0:87:9c:9d:
07:fd:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 03:41:39 2024 by rpki-client on console-fra.rpki-client.org