Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/9-tURZcOUut5hkUxxTU1kEoOOCM.roa
File: 9-tURZcOUut5hkUxxTU1kEoOOCM.roa (raw, json)
Hash identifier: 4cBkGZgIizxcQ+papKqJFUT3AM5KM5Oi+8iQjr45HJQ=
Subject key identifier: F7:EB:54:45:97:0E:52:EB:79:86:45:31:C5:35:35:90:4A:0E:38:23
Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial: 0190A14E302DCA3E1AAB5D1A40A15A97BF15
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/9-tURZcOUut5hkUxxTU1kEoOOCM.roa
Signing time: Thu 11 Jul 2024 10:19:34 +0000
ROA not before: Thu 11 Jul 2024 10:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25605
IP address blocks: 155.190.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:4e:30:2d:ca:3e:1a:ab:5d:1a:40:a1:5a:97:bf:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Validity
Not Before: Jul 11 10:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7eb5445970e52eb79864531c53535904a0e3823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:cf:6e:6b:b3:a2:36:54:12:d8:e1:50:d6:
f8:c9:1c:42:56:de:bd:6c:ae:a3:e4:bb:63:ff:6d:
0e:e4:b2:90:68:eb:5f:da:7f:19:01:bd:5b:d3:11:
76:db:38:5c:c1:95:d9:ad:cf:d5:99:61:42:11:ce:
70:c3:6b:2c:8f:3f:e8:f7:87:50:f0:d5:7b:e1:d4:
b3:69:ab:e1:9d:2a:8b:ed:5a:4c:66:e9:2b:b9:13:
94:ab:7a:03:e3:28:27:ba:5b:17:c8:c1:b3:a7:a1:
40:ba:cd:05:82:16:db:40:fa:9f:92:7c:07:9c:aa:
0f:83:20:e1:ae:e5:6d:65:0b:cd:af:d9:e3:45:60:
d1:02:de:be:10:9c:34:23:63:39:b5:25:05:89:4a:
a4:97:4d:af:80:ff:31:e1:39:12:c1:27:e3:30:38:
b2:0c:50:0e:7e:ec:d2:10:7e:f0:b7:bd:3d:dd:fc:
76:0e:c0:d0:f9:6a:32:a4:cb:82:98:87:6e:74:64:
2d:bf:46:29:90:5b:fd:53:0c:23:d6:d2:ad:b4:86:
01:eb:c2:b3:63:e1:23:4e:9b:67:c3:4e:b1:1b:9a:
99:df:98:27:c1:ac:68:2f:fa:d4:8e:8d:49:00:51:
07:60:85:44:dc:9b:ef:be:44:ad:34:d1:f7:42:01:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EB:54:45:97:0E:52:EB:79:86:45:31:C5:35:35:90:4A:0E:38:23
X509v3 Authority Key Identifier:
keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/9-tURZcOUut5hkUxxTU1kEoOOCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.190.249.0/24
Signature Algorithm: sha256WithRSAEncryption
07:07:35:b4:cc:f0:60:2c:3a:59:22:42:6d:b9:42:50:2f:4a:
ea:43:44:88:48:8e:7f:43:00:29:4e:1f:f4:be:72:91:ef:29:
42:f0:97:de:ad:9e:03:5a:6f:02:dc:0e:51:da:99:78:24:c9:
14:1f:09:1c:28:75:b0:e7:0c:02:7e:26:3e:a8:03:8d:ee:75:
a1:b0:5c:22:4f:5c:b4:b7:ca:81:25:c8:80:f9:01:ab:68:1c:
5c:6b:a0:4a:90:a2:12:39:ac:9a:6e:dd:f6:c3:c9:76:bd:43:
ae:18:22:5b:6a:f8:df:45:02:91:f2:b6:24:12:40:11:cb:f3:
0d:61:40:91:1b:48:76:2d:d8:f5:df:f1:67:8b:3b:3f:58:67:
21:69:22:b9:c5:6f:b2:ee:45:f7:91:a1:a3:f0:c6:bd:0d:58:
ff:83:69:84:f2:62:2d:43:5a:88:be:c8:48:8e:f9:13:5a:46:
e9:65:02:6f:2d:15:2b:79:ad:e2:e5:da:be:04:c5:b4:6e:13:
9f:54:f1:45:8b:5f:6d:c2:2a:a3:a1:2f:0e:2a:d0:69:a3:a7:
f6:d5:3a:b2:65:4b:c3:97:ad:8f:e6:37:7a:e4:c3:79:6b:cc:
70:ce:29:b9:b0:72:72:c3:a2:08:ad:00:82:8b:b4:cc:c2:2c:
a9:b2:ec:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:20:04 2024 by rpki-client on console-ams.rpki-client.org