Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/hW7gIsbj3GHd6v4n7RUGqeX4sVc.roa
File: hW7gIsbj3GHd6v4n7RUGqeX4sVc.roa (raw, json)
Hash identifier: S3+f17CRJz+G+8H4jFnK2sJxsqKIFXJip2Yhwb/C0ls=
Subject key identifier: 85:6E:E0:22:C6:E3:DC:61:DD:EA:FE:27:ED:15:06:A9:E5:F8:B1:57
Certificate issuer: /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Certificate serial: 0192F946376930963AB50E6DBA33FCBFAEB8
Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/hW7gIsbj3GHd6v4n7RUGqeX4sVc.roa
Signing time: Mon 04 Nov 2024 22:23:01 +0000
ROA not before: Mon 04 Nov 2024 22:23:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 193.9.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f9:46:37:69:30:96:3a:b5:0e:6d:ba:33:fc:bf:ae:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Validity
Not Before: Nov 4 22:23:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=856ee022c6e3dc61ddeafe27ed1506a9e5f8b157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:b3:b9:b0:36:3d:04:9d:a8:b4:47:d6:36:
0a:dc:4f:15:b4:67:69:fb:68:98:9a:3a:5a:fb:15:
cf:09:b7:1b:a3:52:28:0c:ca:10:88:02:29:d9:8f:
9d:b7:5f:ed:a7:76:80:ad:77:c9:56:ef:05:0c:9b:
65:42:d8:be:54:43:9f:83:79:2c:af:09:63:e4:21:
b4:d9:2c:4b:1b:79:91:4d:e2:f8:1c:a9:fa:83:8a:
02:61:b8:b9:3f:15:59:5d:82:ac:1f:41:af:41:3d:
29:41:f9:54:1b:3d:7e:01:4a:56:17:e6:49:08:9d:
88:1d:d9:df:7f:b7:37:8e:d7:45:19:cb:d7:97:48:
ad:40:23:f8:0d:0f:4e:fd:fd:fc:f0:d3:94:dc:0a:
5c:a5:99:c5:cb:70:7d:93:a7:0b:f2:65:6a:81:c6:
58:5d:6e:27:92:25:79:08:65:45:6b:7d:be:56:55:
cc:b7:a8:c0:57:a2:f9:02:e6:12:a0:78:d6:58:cf:
82:94:f7:b0:30:69:6a:18:ea:90:21:16:66:3d:5c:
c8:5a:2e:af:5d:d3:30:0a:e7:97:84:dd:1d:ca:22:
fd:db:b5:e1:02:c0:49:e6:88:0a:3f:f9:02:3f:41:
07:6e:c5:81:16:cd:95:80:e4:1e:a3:bd:dd:50:8b:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6E:E0:22:C6:E3:DC:61:DD:EA:FE:27:ED:15:06:A9:E5:F8:B1:57
X509v3 Authority Key Identifier:
keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/hW7gIsbj3GHd6v4n7RUGqeX4sVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.16.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5e:17:17:6c:3e:09:9d:b1:dc:6d:80:30:c7:45:70:35:db:
a7:23:d2:5f:67:ff:eb:21:bf:a2:5c:8c:9f:1d:85:04:e5:01:
69:69:82:6b:e3:03:71:b2:5c:e7:ee:28:9c:aa:61:58:b0:64:
ad:fe:e1:83:47:84:4b:3d:c6:77:63:af:ea:7b:16:99:78:cd:
83:14:25:be:1d:90:d6:ac:a5:23:13:df:33:fc:b9:c7:ad:e7:
72:c6:72:4e:50:08:cc:2b:d3:a6:3b:11:dd:9d:c3:11:93:dd:
74:c8:29:6f:87:e5:4f:b7:14:05:7d:4a:fd:5d:c4:0d:e7:1e:
e7:31:7b:b6:3e:40:37:dc:df:63:13:54:a3:38:67:b1:00:73:
50:ae:42:30:83:d6:8c:9e:14:42:bc:db:30:a5:16:8e:3b:54:
f2:44:8b:43:af:0a:6d:e6:08:b6:70:9e:83:93:bf:a3:4b:aa:
aa:91:8f:8f:6c:19:87:d5:e5:84:9f:8b:fa:2d:18:35:21:54:
71:ae:7e:02:12:79:f1:b1:de:d9:3f:25:f4:71:1c:01:8a:46:
e7:97:12:ea:ac:a1:26:dc:c9:04:06:4c:49:c3:da:c3:b2:28:
41:c1:01:7a:b3:bd:d7:b0:f1:f1:83:68:4d:a7:3e:8c:a0:85:
56:e4:64:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:08:17 2024 by rpki-client on console-ams.rpki-client.org