Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/RGuyH-Acp7bD_N8WRz1KpsAWts0.roa
File: RGuyH-Acp7bD_N8WRz1KpsAWts0.roa (raw, json)
Hash identifier: xySVF9tGbUrbcKd2WSzNpT/H6NQqoOLOFRnOfoc48CA=
Subject key identifier: 44:6B:B2:1F:E0:1C:A7:B6:C3:FC:DF:16:47:3D:4A:A6:C0:16:B6:CD
Certificate issuer: /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial: 018CC492FE48D98CB4086579BB89B8244D3E
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/RGuyH-Acp7bD_N8WRz1KpsAWts0.roa
Signing time: Mon 01 Jan 2024 10:30:16 +0000
ROA not before: Mon 01 Jan 2024 10:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 194.26.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:fe:48:d9:8c:b4:08:65:79:bb:89:b8:24:4d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Validity
Not Before: Jan 1 10:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=446bb21fe01ca7b6c3fcdf16473d4aa6c016b6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:85:46:5c:77:bd:35:7e:2c:bb:5b:53:68:
1d:0b:2f:12:d6:23:de:1f:28:ff:60:11:3e:ae:f1:
50:c1:db:31:db:c2:92:5e:c9:cf:eb:64:17:31:64:
8d:34:08:dd:1c:87:15:42:59:18:e6:c2:c9:7f:03:
19:c3:bc:61:26:b8:f7:06:d5:f3:f9:f4:6b:84:2b:
80:0a:40:44:e2:d1:3d:fa:0a:db:bc:de:68:e5:6c:
25:c1:b3:45:42:3a:b8:0a:7d:3a:57:f5:07:93:10:
f8:88:b9:25:19:2d:67:4c:e3:60:54:7b:2d:e5:8e:
a1:b4:1e:29:1c:26:c2:c1:fd:b6:48:bb:ce:8b:a8:
bf:cc:76:c2:1c:bb:06:34:0a:54:ea:5c:a3:d5:71:
09:16:02:9c:86:eb:f1:17:81:de:c8:1e:a3:54:0d:
e3:3f:74:f4:d0:4e:38:e2:4e:a8:aa:85:d9:8d:0c:
54:2a:74:e5:b8:43:7f:2c:7d:f7:ed:63:43:ea:04:
47:e4:60:57:15:ef:f8:c4:d6:96:3d:ce:7b:77:19:
a6:11:c2:e3:f0:91:c8:e7:66:1c:3f:58:11:97:d0:
5d:c6:a1:b2:e3:17:cb:44:3d:b0:06:24:d3:52:85:
4d:be:92:12:e2:c8:8e:3c:35:ac:29:d5:97:6e:cc:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6B:B2:1F:E0:1C:A7:B6:C3:FC:DF:16:47:3D:4A:A6:C0:16:B6:CD
X509v3 Authority Key Identifier:
keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/RGuyH-Acp7bD_N8WRz1KpsAWts0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.32.0/19
Signature Algorithm: sha256WithRSAEncryption
28:a2:7c:af:67:3f:92:74:12:1e:3a:61:3a:00:21:ed:c5:0f:
19:10:65:11:38:94:49:f5:1f:81:6c:d0:2f:a8:7a:4a:d2:05:
73:45:da:c2:5a:e6:00:61:49:f3:8b:39:cf:3e:b3:21:57:2f:
4d:52:15:90:7c:10:85:7e:92:24:75:2b:28:29:dc:fc:7b:b5:
47:18:7f:3b:6d:5f:5b:72:2b:a0:d9:f5:db:90:0c:11:7f:1a:
26:b1:d1:15:e3:3d:b1:86:d3:81:ad:02:3e:a5:b7:c4:bd:b3:
f6:7b:8c:80:4c:14:0f:59:c1:0f:58:7f:45:1c:70:94:23:4a:
df:ae:99:2f:9d:56:3d:18:a2:d6:93:22:d1:64:77:94:ff:14:
5c:f1:ab:b0:05:2a:15:99:fb:00:b9:53:fa:02:df:b5:f2:1c:
a0:10:98:b0:b6:a8:60:ac:60:c6:b9:68:c8:1f:4f:07:e8:75:
ed:0c:21:69:a6:d0:51:63:87:49:71:23:7f:e3:db:70:50:dd:
61:74:1c:bb:4e:55:e1:0f:82:cc:d1:0d:36:87:c9:9a:1f:02:
6a:a1:f4:dd:ae:3b:3d:87:cf:34:eb:fd:8a:4b:fd:bb:29:3e:
da:b3:9a:e1:bd:61:0a:70:b9:06:e1:0d:be:b8:c7:c4:a0:79:
b3:a0:84:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 15:54:40 2024 by rpki-client on console-fra.rpki-client.org