Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/sZjwSCQ4x7ucKRe7sZXz9nha9vU.roa
File: sZjwSCQ4x7ucKRe7sZXz9nha9vU.roa (raw, json)
Hash identifier: u2DcsMyKqchAbPoYSll+5LB0G9UlRWbM3x3HpzYVUpw=
Subject key identifier: B1:98:F0:48:24:38:C7:BB:9C:29:17:BB:B1:95:F3:F6:78:5A:F6:F5
Certificate issuer: /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial: 019251273E34AFAD355F106C6900505E050C
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/sZjwSCQ4x7ucKRe7sZXz9nha9vU.roa
Signing time: Thu 03 Oct 2024 06:52:59 +0000
ROA not before: Thu 03 Oct 2024 06:52:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31027
IP address blocks: 194.110.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:27:3e:34:af:ad:35:5f:10:6c:69:00:50:5e:05:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Validity
Not Before: Oct 3 06:52:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b198f0482438c7bb9c2917bbb195f3f6785af6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:7e:ed:8c:ad:33:f1:1e:ca:9c:ba:68:e2:
fe:35:4e:2c:73:b4:34:22:37:ad:00:25:e4:e7:cc:
46:fd:99:09:ae:34:9e:ca:12:31:f2:3c:89:61:bf:
7d:14:13:87:34:c7:16:d5:51:96:9d:15:42:be:46:
59:4a:cb:6d:7e:fd:2e:05:3e:aa:4f:7c:10:b8:66:
b3:ab:0a:b9:d9:21:36:28:44:f4:86:92:d7:73:bb:
5d:80:1d:d1:fd:db:45:a0:49:ed:fa:78:c5:0a:61:
ca:51:54:21:55:91:9f:9d:9d:4b:f7:5a:fa:2a:4c:
ce:11:b4:69:47:78:25:54:9e:46:d0:e1:8b:97:4b:
cb:c0:4f:8d:f3:c1:15:cc:7b:bd:a1:99:f2:6e:fb:
7d:77:e5:00:d6:7f:a3:0c:71:cb:e8:75:de:02:37:
c5:c9:df:98:ab:9b:fe:07:1c:8e:0f:d3:b5:99:f5:
fd:19:38:7a:3c:77:86:dc:c9:86:c0:ea:3f:da:d1:
49:89:75:2b:d4:d9:6d:d3:3f:85:1e:ae:96:49:e5:
25:9c:20:85:e9:96:52:42:a8:92:b1:11:e5:fd:f5:
22:e8:c3:51:9b:da:ae:0b:2a:f3:05:4a:05:b2:c8:
6d:f5:d5:10:ba:9f:e2:55:81:00:b2:2a:73:d8:8d:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:98:F0:48:24:38:C7:BB:9C:29:17:BB:B1:95:F3:F6:78:5A:F6:F5
X509v3 Authority Key Identifier:
keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/sZjwSCQ4x7ucKRe7sZXz9nha9vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.206.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7e:5a:73:77:7c:4b:f6:5a:df:06:b9:da:84:83:cd:ff:4e:
b3:ee:bb:e2:31:a0:72:37:66:f4:a2:33:cf:d3:aa:69:db:9d:
7c:cb:46:c9:64:b2:33:6b:f7:4a:38:e2:43:f3:ec:93:72:35:
6b:78:32:f1:f2:16:91:a7:9a:1c:b4:a0:75:11:2d:7d:78:01:
41:ea:58:64:54:ab:44:67:55:ec:24:d4:b0:96:91:b3:85:02:
1b:c6:a4:38:34:37:90:5a:c1:d2:c1:25:3f:b8:60:b5:ee:b4:
2f:e8:af:49:de:ef:f5:6f:88:a0:ec:8b:bc:99:92:60:e8:c6:
72:65:ee:dd:23:7b:c8:26:24:83:7a:ac:77:ba:d6:52:c8:18:
2b:11:97:53:02:2d:b8:f4:d9:7c:4d:73:17:5d:ee:6b:d9:e9:
b0:a4:c0:9b:92:9a:47:66:f7:4e:bb:bf:fd:33:aa:53:bd:22:
c9:e6:42:43:09:0e:2f:a5:42:2c:95:de:1a:93:fb:d2:f6:5d:
24:c3:04:a8:25:22:0c:26:1f:91:a3:39:39:b9:3b:0d:8c:8e:
09:18:bf:56:ee:c6:27:33:4b:73:d4:32:e6:3f:a8:d8:f3:9b:
b9:e5:9f:66:ff:c6:25:9e:dc:31:8d:fc:28:d6:a8:5f:5a:55:
89:63:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:28 2024 by rpki-client on console-fra.rpki-client.org