Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/AShzzu461aMsgDfr0d-dFeDLURA.roa
File: AShzzu461aMsgDfr0d-dFeDLURA.roa (raw, json)
Hash identifier: SUSyoLfXQCgJ8O+trz5WO6abOaTO+aAuCWk8yxFaNXc=
Subject key identifier: 01:28:73:CE:EE:3A:D5:A3:2C:80:37:EB:D1:DF:9D:15:E0:CB:51:10
Certificate issuer: /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial: 018CC9BC3380BFCF773F8388B37EC6921E2C
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/AShzzu461aMsgDfr0d-dFeDLURA.roa
Signing time: Tue 02 Jan 2024 10:33:23 +0000
ROA not before: Tue 02 Jan 2024 10:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8820
IP address blocks: 92.119.104.0/22 maxlen: 24
2a09:b0c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:33:80:bf:cf:77:3f:83:88:b3:7e:c6:92:1e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Validity
Not Before: Jan 2 10:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=012873ceee3ad5a32c8037ebd1df9d15e0cb5110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:08:4e:65:59:7a:7b:b2:63:8b:d2:36:c4:
a6:26:87:0d:d7:d4:51:6e:fc:96:14:77:d2:af:5b:
88:ab:08:c7:c8:df:77:a1:db:ba:41:ee:95:c3:28:
cf:61:32:1f:32:e4:82:dc:ae:2a:5a:d4:37:3e:90:
1f:d0:ca:dc:5c:8b:25:92:96:e9:26:f9:f2:d9:a3:
b0:f3:04:ba:00:bd:c3:d9:e4:cc:cc:1a:b5:a3:e3:
b5:11:5a:c4:77:14:d4:ec:94:c0:4a:50:57:c5:32:
ab:81:01:82:f3:a6:5f:48:99:17:96:ae:c2:4a:ff:
df:f6:02:f2:cc:b7:e4:5f:e3:2d:c9:d7:b8:ac:92:
00:8d:1b:db:b3:c8:72:5b:a4:d7:72:ac:cc:ee:92:
2f:93:61:93:60:1d:97:c5:08:a1:b5:66:7c:0c:25:
d4:6d:7c:a9:eb:38:d7:7c:3f:64:b2:89:00:bf:32:
70:0b:0e:d5:0e:3d:92:60:b1:a6:ae:b7:3f:89:05:
19:5b:eb:8e:a6:6d:0c:49:65:b2:0b:9d:23:28:69:
08:e9:d3:ad:88:3d:37:20:d5:3a:a4:09:e3:33:76:
39:70:d7:40:5f:b9:12:ec:8a:5b:3d:b6:1c:92:ad:
b0:eb:f6:c0:31:5b:06:7b:e0:ab:67:3f:f6:d9:be:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:28:73:CE:EE:3A:D5:A3:2C:80:37:EB:D1:DF:9D:15:E0:CB:51:10
X509v3 Authority Key Identifier:
keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/AShzzu461aMsgDfr0d-dFeDLURA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.104.0/22
IPv6:
2a09:b0c0::/32
Signature Algorithm: sha256WithRSAEncryption
80:5c:0f:c1:87:a7:d8:81:df:29:05:7a:96:2a:d2:8a:ec:f2:
b5:7d:2f:f1:e1:d1:a8:9c:7b:e3:ce:bb:89:ca:e7:27:0d:5c:
a8:75:e0:6b:20:16:d9:12:6a:91:d7:85:24:4c:5e:d7:2e:d2:
11:c1:af:91:50:1b:43:3c:e3:0a:f9:ef:9c:6d:70:91:73:18:
4f:b1:55:c1:70:c0:f3:e8:c2:a1:cc:44:be:04:11:59:8b:28:
e5:5b:25:8c:b4:ce:78:97:b5:01:cc:b0:da:e8:79:0c:80:77:
13:0a:ad:f0:4c:81:8d:69:d4:7a:bb:3f:7a:7f:cc:81:5b:83:
38:6b:37:61:51:56:2d:f1:d2:3a:cb:96:0e:69:5c:61:00:e8:
b7:65:91:2e:62:70:05:28:3a:a7:d5:5c:e3:e8:b3:db:fb:6d:
63:a5:60:59:f4:f2:bc:59:4c:e9:1d:01:c2:7c:55:3d:a0:70:
f0:b4:90:7e:01:c4:cf:e4:dc:80:74:2b:d2:44:4d:33:53:bb:
e5:e3:57:58:a1:e8:82:bc:d8:57:91:96:9a:ee:70:6e:ff:36:
2b:41:59:ae:29:e4:ea:8a:c2:a3:b0:9f:be:7c:47:67:5c:ea:
25:2c:b9:c2:c4:ab:6a:a1:9f:b5:f0:60:33:c8:05:27:b9:f8:
d7:0a:67:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:50:54 2024 by rpki-client on console-ams.rpki-client.org