Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/Mf5fkC3MrLwirxVCy1SlUIh67jE.roa
File: Mf5fkC3MrLwirxVCy1SlUIh67jE.roa (raw, json)
Hash identifier: RXHkSjcP7fVMpwYEGNdbuXsIPTFIjKsZ40o3ohXuMh0=
Subject key identifier: 31:FE:5F:90:2D:CC:AC:BC:22:AF:15:42:CB:54:A5:50:88:7A:EE:31
Certificate issuer: /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial: 018CC9BCE7695507E7327D5CF528C2C1BC76
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/Mf5fkC3MrLwirxVCy1SlUIh67jE.roa
Signing time: Tue 02 Jan 2024 10:34:09 +0000
ROA not before: Tue 02 Jan 2024 10:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2854
IP address blocks: 194.24.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e7:69:55:07:e7:32:7d:5c:f5:28:c2:c1:bc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Validity
Not Before: Jan 2 10:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31fe5f902dccacbc22af1542cb54a550887aee31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:55:3c:9c:16:9c:5e:c6:fb:4c:bd:14:a0:74:
1a:e4:e6:62:e8:30:d4:20:ad:71:c1:61:43:a0:41:
50:f2:47:67:3a:08:77:10:9a:93:39:5b:f7:11:0c:
26:b9:41:6a:80:1e:d2:e5:83:d4:5c:54:73:26:7a:
70:d7:8c:98:c8:e4:54:ed:59:a0:47:4e:65:13:b2:
76:f0:ac:ab:10:2a:3c:23:fc:da:d3:3f:f2:db:ef:
4d:bc:48:d3:cd:d7:be:82:e5:07:80:2f:22:1f:3c:
b9:3a:a4:c2:c3:a7:ec:2e:e8:f8:c6:41:b7:7b:68:
cf:dd:88:9f:c8:42:e2:3c:26:0b:2e:85:62:1e:91:
d8:fe:db:62:fb:6f:29:79:d7:2e:6d:6c:80:11:ed:
1a:29:c4:36:29:c6:3a:7b:8c:6a:a1:3a:cf:63:23:
ab:47:02:f9:53:01:7c:5a:97:4c:f2:40:06:3e:29:
75:68:f7:7a:41:80:f6:07:67:8b:10:28:71:de:36:
78:81:e2:89:f2:2b:f4:37:b8:ec:d2:a3:af:a0:e1:
2f:bf:e8:63:7a:7a:33:81:59:6c:4f:62:b3:7a:de:
61:ac:64:72:11:6b:cf:c2:c9:af:43:4d:60:75:b1:
55:39:67:2c:4a:d7:7f:bd:b5:30:c5:21:70:97:3b:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FE:5F:90:2D:CC:AC:BC:22:AF:15:42:CB:54:A5:50:88:7A:EE:31
X509v3 Authority Key Identifier:
keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/Mf5fkC3MrLwirxVCy1SlUIh67jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.9.0/24
Signature Algorithm: sha256WithRSAEncryption
06:4b:5f:50:ff:42:af:cb:20:05:27:a5:c7:7c:c9:92:ee:cb:
18:a8:fb:f0:92:eb:3f:e3:ae:5b:76:7a:ae:0b:7c:2c:97:1c:
c2:4f:46:0c:56:4e:8c:e1:1a:fa:1f:47:51:b2:fe:56:db:92:
4b:6c:7c:62:f9:49:55:a3:92:0a:0a:eb:63:1c:91:94:19:eb:
42:38:30:dc:25:4c:68:f5:60:24:27:6e:f2:ce:2f:45:49:c7:
03:ef:ac:2f:a7:66:12:ab:73:47:6d:f8:52:4a:27:51:7d:65:
4a:92:50:17:a5:fc:0b:89:1d:dc:dd:5e:2a:44:31:99:1c:bc:
b0:28:e3:35:e7:c7:f7:72:03:62:1b:55:d0:f5:f3:09:88:53:
bb:c8:a8:33:a4:fe:65:7a:50:93:ca:4b:cc:a7:d8:83:5f:e7:
d1:60:9d:f1:b6:06:41:dc:58:58:fb:05:4a:fd:c2:ca:9c:56:
29:67:f6:9a:3b:72:b3:b6:24:49:c5:88:7d:74:45:db:9d:77:
be:e2:fa:82:80:22:14:64:fe:35:3f:10:91:2e:cd:58:38:2f:
c0:6b:21:e4:1f:70:19:01:1b:5d:bf:fb:fa:f6:87:2c:39:fb:
00:8a:53:7e:76:38:5b:4b:68:6e:8b:11:82:26:1f:95:0d:9e:
b2:31:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:56:14 2024 by rpki-client on console-fra.rpki-client.org