Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/p4mUIX4hR85puaSgoPgDOo1yAEk.roa
File: p4mUIX4hR85puaSgoPgDOo1yAEk.roa (raw, json)
Hash identifier: UTXIPn1eiuQOQPJwBdmBc0iikMNo2mbNnSVaoUyiw9Q=
Subject key identifier: A7:89:94:21:7E:21:47:CE:69:B9:A4:A0:A0:F8:03:3A:8D:72:00:49
Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial: 01910061F22E46CF479E2771508E74A1DA56
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/p4mUIX4hR85puaSgoPgDOo1yAEk.roa
Signing time: Mon 29 Jul 2024 21:25:04 +0000
ROA not before: Mon 29 Jul 2024 21:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15442
IP address blocks: 193.17.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:00:61:f2:2e:46:cf:47:9e:27:71:50:8e:74:a1:da:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Validity
Not Before: Jul 29 21:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a78994217e2147ce69b9a4a0a0f8033a8d720049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:0b:13:ae:08:60:da:df:78:1a:12:5a:95:
c4:0b:1c:13:d9:b5:0d:d9:f4:84:32:e5:65:c3:a2:
3f:eb:1f:e4:88:9c:64:96:2f:95:6e:c9:34:2f:2a:
6e:5d:9f:90:ae:ed:3c:3d:c4:51:8b:04:ae:d6:7a:
08:82:1e:64:c8:f5:58:a4:30:f7:07:8f:2e:44:43:
c5:ce:39:1a:5c:82:1f:cb:a2:d0:49:d5:a0:75:c7:
71:f6:08:3c:1a:7b:b4:24:6b:60:2b:a1:a2:9e:87:
61:9a:a7:4d:71:04:6b:a5:85:7b:d2:89:e5:09:af:
82:35:09:82:11:ad:c1:71:17:ef:6c:8c:c2:0f:d2:
bc:72:e6:1d:cd:f6:23:00:04:00:c1:4d:d6:84:0a:
b2:a5:f1:57:b1:bf:d0:ec:be:a8:14:cd:ea:04:63:
33:05:d6:a1:92:7a:a9:16:2e:82:48:66:b6:72:09:
46:a5:78:f5:fc:31:12:3a:8d:fe:15:86:54:b4:93:
99:9f:f9:c5:4f:45:ce:67:8f:fc:e6:76:c2:47:2d:
0f:50:10:1b:10:01:69:c6:13:ec:7e:46:57:02:4d:
ab:9f:e3:14:fc:e1:87:82:98:8e:1b:1b:25:62:d4:
e1:a9:20:39:f5:66:aa:45:6e:80:9b:80:84:4a:f8:
07:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:89:94:21:7E:21:47:CE:69:B9:A4:A0:A0:F8:03:3A:8D:72:00:49
X509v3 Authority Key Identifier:
keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/p4mUIX4hR85puaSgoPgDOo1yAEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.96.0/21
Signature Algorithm: sha256WithRSAEncryption
c5:77:72:58:62:3f:6e:a9:35:fe:1b:96:20:e4:35:db:30:16:
44:a9:b8:17:c3:a0:13:79:9c:bf:1b:32:80:96:84:ba:ce:17:
57:db:86:e1:fa:49:15:9b:66:66:02:67:d6:05:49:00:71:9e:
c3:f5:28:85:ed:c8:07:af:b3:2d:da:c8:b2:7b:b9:a9:20:70:
86:a9:be:ca:46:36:ac:50:08:8e:f3:41:98:db:3b:52:4a:a3:
af:de:da:b2:15:98:12:37:56:53:ef:67:0f:f9:ba:a9:06:b8:
5d:7e:a0:41:36:f8:3f:3d:a6:62:d2:b7:43:84:e6:25:a4:89:
d3:37:13:90:0b:9c:92:03:58:e0:ab:91:54:c5:15:10:36:22:
47:52:20:34:df:41:cc:53:a9:13:79:79:7b:fe:fc:88:5d:10:
be:30:88:9a:e6:9f:70:94:7a:f7:e9:be:3d:a9:21:f6:2e:4e:
98:af:73:40:7f:91:9c:50:cb:65:f9:16:88:76:38:4a:c8:5f:
f5:a7:ee:a3:fd:5e:be:ce:4f:7b:bc:79:74:7f:d0:32:3a:48:
e9:2b:5d:11:d9:a1:3d:22:7e:42:59:b3:22:76:66:8a:32:2d:
b2:99:0b:1a:ab:7a:03:d0:90:3f:a3:b7:1d:4c:90:bd:7d:6c:
eb:4c:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:32:14 2024 by rpki-client on console-ams.rpki-client.org