Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/PhdJdRaYj3n_e8VPBss90siSUxA.roa
File: PhdJdRaYj3n_e8VPBss90siSUxA.roa (raw, json)
Hash identifier: XouC5tFD+9sr7gWUxtxy89XLBmZx/dFQnODZ5qiqIgc=
Subject key identifier: 3E:17:49:75:16:98:8F:79:FF:7B:C5:4F:06:CB:3D:D2:C8:92:53:10
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019096F93C57D58087F0B927A66037E0757F
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/PhdJdRaYj3n_e8VPBss90siSUxA.roa
Signing time: Tue 09 Jul 2024 10:10:34 +0000
ROA not before: Tue 09 Jul 2024 10:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48282
IP address blocks: 193.38.235.0/24 maxlen: 24
193.188.22.0/24 maxlen: 24
194.113.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:96:f9:3c:57:d5:80:87:f0:b9:27:a6:60:37:e0:75:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jul 9 10:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e17497516988f79ff7bc54f06cb3dd2c8925310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:f1:12:00:5d:2a:7f:80:66:fb:a2:5d:1d:
87:8a:94:f9:5d:a0:f1:d2:17:e1:36:93:9c:fc:1f:
fd:a0:77:81:45:45:11:14:f6:63:0d:09:6d:51:ba:
b8:3c:73:1c:7b:60:86:7f:8a:09:7a:94:9c:16:30:
cb:b7:2d:02:b3:56:58:72:53:d7:9d:e6:14:11:a9:
a2:7d:d7:14:64:db:82:7e:5a:24:e9:a5:45:6a:f2:
d5:b3:de:7e:a0:20:28:33:29:a4:d7:3f:d5:f7:24:
d3:41:fc:e6:37:88:cb:9b:7b:57:95:b4:26:91:c9:
bf:e2:e5:02:82:5f:f6:f5:b6:f1:78:71:2f:a1:52:
8d:58:ef:49:6f:2f:9e:39:8a:eb:46:34:26:e0:1e:
ce:b7:fa:fe:3d:87:53:97:92:51:eb:0b:ce:e4:46:
ba:37:a8:98:f5:1e:47:b5:9c:5d:32:f9:06:9a:05:
45:18:12:01:0f:04:a1:5a:45:32:4e:65:c0:52:c1:
bc:bf:13:67:a0:d1:9d:2d:51:24:8e:15:b3:3a:11:
77:c7:c9:df:f5:c2:40:ac:fc:33:89:94:bb:62:75:
eb:6f:be:1f:63:03:6b:2d:f9:d3:2e:36:3b:e5:92:
f1:6c:77:f8:c7:7c:27:ec:34:e4:af:3c:a4:33:eb:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:17:49:75:16:98:8F:79:FF:7B:C5:4F:06:CB:3D:D2:C8:92:53:10
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/PhdJdRaYj3n_e8VPBss90siSUxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.235.0/24
193.188.22.0/24
194.113.106.0/24
Signature Algorithm: sha256WithRSAEncryption
16:27:fa:2d:a0:57:8d:2c:da:5b:60:6a:6b:96:62:cd:bf:8d:
da:a6:91:22:e9:e2:6a:42:9b:98:44:c6:26:52:59:5a:b0:40:
58:10:bb:3c:1a:56:75:ba:4d:91:cc:5e:c2:25:43:1f:cc:a7:
9c:24:24:67:2e:13:47:81:1c:5e:c6:ae:58:ad:e2:b2:b6:ec:
a4:87:ad:f9:68:4b:c8:d6:fb:0f:f2:63:c1:bd:9a:69:6c:d2:
0d:12:a1:f3:85:3f:e1:2a:76:ff:60:8e:f8:b9:23:4b:2f:38:
af:52:03:0c:da:08:ed:dd:de:97:a4:d0:2f:15:3b:73:9b:c0:
93:41:a6:53:4a:a8:83:89:9d:b4:52:8a:18:8a:e2:25:b6:46:
ad:bc:24:5d:43:d2:00:56:49:dd:a0:39:f2:20:1b:a3:58:18:
1d:73:bc:4d:30:17:9c:ff:e9:89:b7:f8:66:3b:0d:ca:a7:62:
cf:6f:0a:8b:07:3b:97:85:55:48:04:c7:ba:4e:81:91:f9:e1:
d6:6a:d3:72:aa:56:6e:38:80:3b:5b:b8:8b:e7:8f:ba:d1:24:
37:b6:47:9b:88:01:2f:6d:0b:c5:2c:ea:aa:04:fb:4b:c2:2c:
5b:90:e9:c9:6f:78:2c:bc:be:d8:3a:5c:47:28:18:5e:41:e4:
da:f8:49:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:22:52 2024 by rpki-client on console-ams.rpki-client.org