Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/I04yYS9o9trz1C94q8yhPh1vNx0.roa
File: I04yYS9o9trz1C94q8yhPh1vNx0.roa (raw, json)
Hash identifier: GnkcSk6lAN5LjtBTJsyhfFumCXta8qATteuvK60P8tU=
Subject key identifier: 23:4E:32:61:2F:68:F6:DA:F3:D4:2F:78:AB:CC:A1:3E:1D:6F:37:1D
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 0190C1217731C9DF5CC23C93E474AAD5D506
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/I04yYS9o9trz1C94q8yhPh1vNx0.roa
Signing time: Wed 17 Jul 2024 14:38:34 +0000
ROA not before: Wed 17 Jul 2024 14:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41955
IP address blocks: 185.199.216.0/22 maxlen: 24
194.26.188.0/22 maxlen: 24
2a0a:a3c0::/32 maxlen: 32
2a0a:a3c0::/44 maxlen: 48
2a10:7080::/29 maxlen: 29
2a10:7080::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:21:77:31:c9:df:5c:c2:3c:93:e4:74:aa:d5:d5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Jul 17 14:38:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=234e32612f68f6daf3d42f78abcca13e1d6f371d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:8f:5e:64:1b:1a:95:c1:52:3f:1d:7a:09:
4a:41:f1:0f:52:8e:25:a1:6d:7a:e9:a7:77:ac:50:
78:47:04:80:5d:0e:de:09:75:40:21:f6:2a:28:c7:
7c:67:0a:14:43:d3:2f:6b:97:5f:c1:14:da:cc:f7:
a4:e5:b8:93:fc:5e:c7:18:ef:22:36:24:43:49:4a:
f6:9e:58:39:6a:5c:b5:46:a1:fa:61:a7:79:28:cf:
0f:c5:50:16:60:7f:c2:2d:b4:2f:2f:92:af:00:7e:
45:0c:dd:85:e2:df:13:35:d6:31:2c:a0:10:dd:f0:
e0:7a:b3:91:fe:93:ed:b0:c4:2b:a6:1a:90:5f:95:
94:fb:62:9c:fa:4a:9f:e1:46:cc:1a:2d:36:16:b3:
0e:3e:f8:b6:a9:f3:f6:f4:00:f2:3f:a4:85:55:91:
ab:b9:fc:04:e1:2e:c5:85:1c:aa:74:d4:6e:64:bb:
cf:80:ed:54:a1:5e:9b:be:fc:b7:51:47:71:a7:c9:
fc:74:a3:0c:c0:1d:37:15:bc:fa:5f:11:15:c4:3d:
ec:09:7d:08:c0:c5:55:1e:e1:ed:12:41:18:9d:26:
32:b4:1d:32:07:a1:51:0f:8d:84:af:6b:85:a4:4b:
3c:b1:6c:f5:2d:00:a1:92:75:a6:83:bb:d5:2d:5a:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4E:32:61:2F:68:F6:DA:F3:D4:2F:78:AB:CC:A1:3E:1D:6F:37:1D
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/I04yYS9o9trz1C94q8yhPh1vNx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.216.0/22
194.26.188.0/22
IPv6:
2a0a:a3c0::/32
2a10:7080::/29
Signature Algorithm: sha256WithRSAEncryption
0a:dc:b4:64:8b:96:7e:c0:fc:91:7b:d9:29:ce:d5:ec:bf:0f:
e6:f6:9b:45:76:8e:08:f8:35:e3:95:49:82:9a:ee:b7:c5:61:
6c:0a:25:03:82:4e:b5:30:fc:5d:88:7e:68:ec:65:bf:cc:7c:
ee:16:06:a8:2d:92:a0:59:a5:3d:b8:08:2f:39:38:81:06:f5:
8a:a1:cd:e5:77:73:d9:51:c1:7c:f0:ef:31:c6:d7:d4:a2:24:
09:71:86:d1:ce:d8:66:cd:dc:8d:2f:55:2f:de:84:d9:e3:43:
c3:48:e1:c8:5e:9a:f9:70:5d:be:de:bc:7d:e6:16:da:28:1b:
63:50:38:54:1f:f8:57:29:e4:05:7e:3b:23:10:a6:0a:de:fa:
58:98:1d:e4:05:51:e4:56:c9:d2:ed:b6:6d:8a:a7:0b:0c:4e:
41:5e:9b:f9:e1:0f:74:b2:ef:2c:e8:29:12:be:8e:68:f5:5f:
47:c4:d9:ec:30:e5:fa:ea:95:2d:40:da:e6:47:05:56:71:4d:
d1:9d:e7:bd:0d:4a:17:7a:e5:00:ee:b6:ab:6c:0c:56:0d:69:
09:93:20:ae:d1:9f:03:26:9e:65:b7:f3:01:85:10:ec:66:17:
0c:93:00:60:43:29:aa:1a:ef:38:d3:2b:9c:b8:b1:5f:d6:1e:
07:40:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:30:38 2024 by rpki-client on console-fra.rpki-client.org