Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/mew4i3b-tOjKTiYsAtdGSjlsWN8.roa
File: mew4i3b-tOjKTiYsAtdGSjlsWN8.roa (raw, json)
Hash identifier: wiRjoFHiAMhhZol6qv/mfQtdD0LPfV4GPxOT+oGX42c=
Subject key identifier: 99:EC:38:8B:76:FE:B4:E8:CA:4E:26:2C:02:D7:46:4A:39:6C:58:DF
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 018CC7258BFEBDBACB728DEA32108CA1C82B
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/mew4i3b-tOjKTiYsAtdGSjlsWN8.roa
Signing time: Mon 01 Jan 2024 22:29:35 +0000
ROA not before: Mon 01 Jan 2024 22:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 193.8.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:8b:fe:bd:ba:cb:72:8d:ea:32:10:8c:a1:c8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Jan 1 22:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ec388b76feb4e8ca4e262c02d7464a396c58df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9c:55:2d:f3:36:d2:53:12:64:74:07:a8:95:
1c:42:8b:e5:cf:03:6c:f6:c2:95:c9:74:01:e5:9b:
4f:72:07:e0:c7:67:6b:4c:00:71:4c:6f:3e:d9:0c:
8e:da:9d:d4:83:2b:c0:93:e9:d0:98:14:cf:96:ec:
1c:08:76:3a:0a:f3:16:9b:79:94:51:94:8e:d3:89:
9e:7b:48:93:44:40:ba:d9:49:6c:33:62:dc:5c:93:
48:b0:7e:7b:8d:27:75:c6:0c:31:42:0d:d7:e0:8b:
87:82:4b:0a:31:3c:dc:82:42:ad:36:15:27:8a:72:
4d:14:36:e7:1c:1c:a0:44:ed:0e:67:93:1a:4e:4e:
47:91:30:1a:a5:12:71:6c:c9:b5:cb:2c:1d:4c:4d:
a8:ce:63:5d:2d:1b:35:48:9d:85:06:8b:53:77:67:
2a:6a:e4:06:62:b9:3b:7c:95:37:32:77:ce:f4:f7:
1b:bc:5b:1a:a8:b1:d9:17:62:b3:30:2d:4d:bc:40:
6f:08:27:ab:6c:ae:f1:ff:2d:08:c0:88:63:a9:ec:
dc:01:9b:83:49:df:fb:4e:a7:5a:de:9e:55:56:47:
e0:9d:52:a2:9b:5e:ed:19:b8:96:43:f1:34:cc:2c:
ca:ec:ab:e4:7b:11:9d:4c:bf:57:b1:0e:67:4d:1e:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EC:38:8B:76:FE:B4:E8:CA:4E:26:2C:02:D7:46:4A:39:6C:58:DF
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/mew4i3b-tOjKTiYsAtdGSjlsWN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.145.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e5:d4:69:f6:20:37:fb:4a:ac:07:95:1a:71:2c:e5:07:17:
52:e6:4b:d2:49:26:88:9b:46:f3:11:a3:e7:b5:e6:b2:1c:74:
d5:93:c4:40:33:50:31:07:de:bd:0d:2c:fd:e5:86:0f:13:f1:
da:6e:81:d3:e9:5f:72:66:de:6e:87:f2:73:3e:5c:6f:ae:34:
f6:c3:c6:46:ab:e3:2a:6c:cb:3d:a5:17:cb:a9:4f:42:12:f0:
8b:7f:95:7e:29:5c:f7:13:4d:12:eb:ea:fb:1b:cb:6b:51:ff:
6f:21:bf:f8:4c:b6:78:ae:23:dd:8d:fc:9a:20:2e:90:a9:8b:
9a:d9:a4:6f:bd:4a:81:c8:bd:2a:b3:8b:0b:04:9f:e5:a3:99:
68:87:0f:70:39:3b:c2:72:a2:0f:8f:c5:57:30:8c:04:cf:27:
30:1c:1c:ef:d3:90:16:0b:3a:8a:92:3d:6b:44:55:83:93:ee:
99:87:9d:9f:d1:45:0f:72:ae:10:70:f5:bb:a3:1a:2b:2d:23:
1b:c9:be:71:13:b8:67:7f:05:7a:d9:ef:91:1f:59:47:4d:1c:
0a:06:af:67:75:26:7b:df:9c:36:3b:96:49:32:d8:66:30:bf:
18:9f:5e:34:e1:ab:80:ea:0b:ba:ed:d3:80:92:91:7a:ed:ee:
de:9b:95:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 18:38:16 2024 by rpki-client on console-fra.rpki-client.org