Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/JuEh4lpr8rafOT1Q7kg91ORU3E0.roa
File: JuEh4lpr8rafOT1Q7kg91ORU3E0.roa (raw, json)
Hash identifier: Mmztap11snckrc4fTDjMM8S5re/eh9Lju1Bw7h8HDOA=
Subject key identifier: 26:E1:21:E2:5A:6B:F2:B6:9F:39:3D:50:EE:48:3D:D4:E4:54:DC:4D
Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial: 018CC26CF8C8F9DD8A157119BD6949BD7A13
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/JuEh4lpr8rafOT1Q7kg91ORU3E0.roa
Signing time: Mon 01 Jan 2024 00:29:30 +0000
ROA not before: Mon 01 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 193.16.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f8:c8:f9:dd:8a:15:71:19:bd:69:49:bd:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26e121e25a6bf2b69f393d50ee483dd4e454dc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9e:af:d7:a7:e0:66:c2:91:fa:f7:8d:65:c5:
bd:ef:8f:58:2d:7f:42:38:b3:d4:4f:2a:a9:38:b0:
33:46:5c:6a:e9:e9:d1:da:80:84:82:7e:c4:d7:e6:
c5:1a:8e:78:bd:fb:36:8e:5e:2a:0c:74:70:cb:4c:
2c:aa:84:94:ed:77:a1:3c:ba:8f:57:85:75:4b:e3:
c4:df:9c:81:7a:cb:9d:90:ee:f4:c3:57:76:78:91:
97:f0:0f:66:31:a7:e0:87:7a:b0:14:7c:af:8a:93:
ed:44:e1:26:c2:cd:1c:67:7d:4b:6b:34:34:02:28:
6f:61:db:29:a6:91:2a:06:ab:b0:f4:a5:68:b1:29:
60:5a:eb:ab:36:80:05:e5:b8:6e:42:ef:8e:9b:7e:
a9:b4:bc:07:6b:fe:20:c0:54:e5:fc:30:66:5c:f6:
dc:74:33:ab:53:14:1d:63:ed:75:23:b6:35:07:ff:
c8:e3:b6:02:e8:9d:6a:aa:34:ec:81:85:49:f0:93:
64:5d:c4:f9:af:23:91:6b:ea:60:51:29:fa:a9:57:
19:40:88:c7:e6:d8:f5:62:da:5e:df:60:d5:15:4a:
f5:fc:59:dd:e4:a4:d3:aa:2c:eb:45:bf:40:d5:e2:
32:b1:c8:f1:24:80:cc:1c:2e:3a:f2:fb:8b:8c:9a:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E1:21:E2:5A:6B:F2:B6:9F:39:3D:50:EE:48:3D:D4:E4:54:DC:4D
X509v3 Authority Key Identifier:
keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/JuEh4lpr8rafOT1Q7kg91ORU3E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.112.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:22:0b:e1:c0:75:5f:a6:5c:fd:03:00:5e:58:f4:5c:6c:e1:
1d:3e:15:bc:be:14:88:c7:1b:87:49:11:c6:a1:ba:e6:88:51:
ef:ed:a6:27:99:31:7b:95:1e:fe:cc:d7:0e:65:1a:97:56:d0:
fb:fe:6b:e6:3c:39:82:27:eb:c0:a7:9a:11:d2:ac:10:0c:f2:
cd:71:05:66:2b:fc:0d:69:2a:4b:e9:d7:53:db:8e:af:0d:7f:
44:0e:3c:78:33:70:bb:69:40:a2:be:bf:0a:6c:e2:7c:89:bf:
ce:86:14:47:dc:43:62:26:3d:05:51:f6:45:70:eb:11:43:f8:
ee:44:26:a1:12:7f:7b:93:f4:05:ca:c4:8e:4a:f5:7d:4e:a0:
0a:52:90:68:8c:8a:ee:27:06:31:34:81:47:19:e0:c7:6b:30:
0d:a3:e9:ee:ea:f6:5a:48:ce:3f:70:1a:ac:a8:0f:03:40:fa:
3b:1a:6b:63:3a:31:1d:75:fd:e0:0b:0e:f2:9d:a5:47:b4:1f:
97:5f:08:c3:b8:85:70:2f:99:c0:82:8a:5a:db:1b:4a:2b:5b:
bd:88:17:97:f7:c5:af:42:c0:99:e5:b7:a1:de:39:56:aa:e4:
3e:f0:d3:65:f7:13:15:82:4b:66:35:bb:f4:6f:82:f6:c3:2e:
82:f7:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:27:33 2024 by rpki-client on console-fra.rpki-client.org