Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9K-dR_6HoxBX_ylmVaO2eGkdYn0.roa
File: 9K-dR_6HoxBX_ylmVaO2eGkdYn0.roa (raw, json)
Hash identifier: 7sI8yI+dyuVfdofsKJPI4fVHqeKzoXi+Y651EOtmoyE=
Subject key identifier: F4:AF:9D:47:FE:87:A3:10:57:FF:29:66:55:A3:B6:78:69:1D:62:7D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01900E7B38ABC9C925B311C71BF2A386C988
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9K-dR_6HoxBX_ylmVaO2eGkdYn0.roa
Signing time: Wed 12 Jun 2024 22:04:34 +0000
ROA not before: Wed 12 Jun 2024 22:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:e7a:fbcb/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Jun 2024 14:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0e:7b:38:ab:c9:c9:25:b3:11:c7:1b:f2:a3:86:c9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 12 22:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4af9d47fe87a31057ff296655a3b678691d627d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:fb:af:2c:7d:4c:dc:52:35:cd:34:c1:e8:
0f:be:73:d9:e9:dd:85:80:44:91:c8:f3:82:18:9f:
ea:34:39:a0:98:cf:80:63:aa:6e:b9:f3:10:4e:f7:
eb:3f:11:ea:29:1e:65:ce:ed:06:9c:1b:a6:ac:f4:
da:0e:cc:bb:e2:a5:dc:3e:4f:71:5f:82:a6:9c:33:
2b:0e:3d:73:fb:78:de:88:34:26:fe:0c:42:5d:c0:
18:19:a0:09:5b:50:15:71:97:70:17:d8:9a:27:c3:
4b:a4:55:a4:28:ac:5f:fd:26:c0:8d:a3:c4:22:c1:
97:93:27:46:4e:58:7d:22:a2:2e:0c:71:d6:31:90:
b1:1f:c7:8d:89:0e:6a:2b:cb:06:da:08:9a:8a:d3:
a9:4c:c4:bb:2f:46:15:21:aa:90:a5:48:2f:86:52:
a7:1f:02:0f:8a:df:a5:b1:23:9e:2c:56:d8:08:0b:
0d:81:15:24:a7:7c:dc:57:11:e8:74:d6:c5:1f:49:
bf:01:83:5b:d3:bf:f9:1f:b2:a0:19:09:e0:67:2a:
9f:eb:ae:a3:ea:d0:b2:3c:f3:03:45:59:35:b6:95:
e3:ed:61:2d:5c:02:df:2c:d9:12:b6:f5:7d:66:60:
92:cb:40:85:13:b6:57:21:2e:55:2f:28:37:da:d7:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AF:9D:47:FE:87:A3:10:57:FF:29:66:55:A3:B6:78:69:1D:62:7D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9K-dR_6HoxBX_ylmVaO2eGkdYn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:79:6c:8f:cc:f9:b4:50:b5:23:89:15:f0:f5:90:4c:0f:d9:
64:d4:c5:d2:07:e9:1a:03:dd:02:0a:ac:8b:78:a9:45:5d:cc:
ec:b0:7c:1c:25:8c:f0:39:b9:78:6d:b3:a6:8d:7d:33:0f:14:
f7:fe:f9:de:57:24:3b:83:c6:a8:02:b2:92:de:dd:4e:73:19:
b1:48:e3:01:e7:75:9a:bf:7b:87:76:43:9a:1c:f8:70:54:7a:
86:bb:d4:95:9b:75:aa:13:47:2e:69:20:2d:1f:9d:a7:2c:15:
92:fa:5a:e3:7b:30:f8:0d:44:8b:bb:63:6e:55:c6:3e:ca:c3:
d9:f8:66:c2:06:d3:3d:0d:53:54:7b:64:4b:fb:24:1d:0b:f6:
9f:65:83:2e:1b:19:ad:bb:63:fc:c4:d1:48:a3:4c:f5:c4:47:
4c:30:27:be:7c:67:6f:04:92:e2:fe:47:5e:6e:29:fa:7e:61:
f4:9f:51:c1:49:61:76:5c:1f:2b:1e:e0:f2:ac:fd:97:41:50:
70:0e:86:95:6e:d9:d5:ab:92:52:ee:7b:a6:97:85:2d:ed:48:
28:d8:83:7b:b4:38:a9:87:0d:d4:65:af:11:86:98:b8:43:eb:
75:1c:aa:51:8f:f5:40:e4:c9:fa:58:35:2e:c8:6a:85:c8:ce:
4f:5c:2a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 23:26:30 2024 by rpki-client on console-ams.rpki-client.org