Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/inhSiXKNvzZHwJuOIDJXKWz9trw.roa
File: inhSiXKNvzZHwJuOIDJXKWz9trw.roa (raw, json)
Hash identifier: 6cvHWgvjioEJAuHOytscnsljJmvH5NSal+7k8pTreeE=
Subject key identifier: 8A:78:52:89:72:8D:BF:36:47:C0:9B:8E:20:32:57:29:6C:FD:B6:BC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0192F8967079CDE0C19D71D9C31976D00FF3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/inhSiXKNvzZHwJuOIDJXKWz9trw.roa
Signing time: Mon 04 Nov 2024 19:11:01 +0000
ROA not before: Mon 04 Nov 2024 19:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.114.0/23 maxlen: 23
194.87.119.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
212.192.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:96:70:79:cd:e0:c1:9d:71:d9:c3:19:76:d0:0f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 4 19:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a785289728dbf3647c09b8e203257296cfdb6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:dd:1f:a6:52:80:bb:e1:f0:1c:35:15:dd:
b2:66:ec:97:e1:0d:85:c9:3e:e9:a9:4c:54:50:c0:
c1:3a:5a:e1:47:9e:8e:66:6d:73:77:13:47:e9:fd:
30:bd:86:cc:95:47:28:be:62:ed:a6:a9:b0:68:8e:
9c:bd:fd:15:ee:09:0f:7c:64:c4:20:57:ba:b7:ed:
c6:99:ac:b2:c1:fd:b7:41:de:0e:a0:aa:94:be:48:
9e:32:cc:af:1b:2f:1d:6b:6c:31:3e:74:30:de:e1:
96:15:b3:95:68:12:1a:63:14:ef:b1:b7:4d:9e:fb:
88:d5:1e:17:1b:52:07:b7:24:be:ce:db:d4:95:24:
ae:76:82:85:4f:d5:4b:b3:1c:52:2c:67:5c:54:8c:
ee:03:a4:0f:90:cb:15:55:3b:cc:3a:8a:6b:03:94:
81:0b:c8:18:67:96:42:e8:81:85:27:fc:00:7f:8e:
f7:d6:96:33:ba:86:3f:e3:09:81:bd:fe:17:de:32:
e3:35:06:de:37:bf:8f:59:9e:a7:7f:e1:74:b7:d3:
b4:6a:a6:cd:4d:65:23:77:7e:ff:8a:05:5e:96:30:
c8:d5:26:3a:e8:49:08:6b:b0:9f:ca:16:a0:75:d5:
1f:0f:bd:f4:8d:b6:ce:cd:37:ac:cd:09:32:98:b8:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:78:52:89:72:8D:BF:36:47:C0:9B:8E:20:32:57:29:6C:FD:B6:BC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/inhSiXKNvzZHwJuOIDJXKWz9trw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.114.0/23
194.87.119.0/24
194.87.134.0/23
194.87.168.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.84.0/23
212.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:99:4e:3b:e0:8c:7e:d8:4a:3b:71:fc:be:30:90:5e:76:71:
77:3c:cb:39:43:9b:e8:f3:1c:49:e9:e0:a1:2f:3c:c1:4a:e9:
f4:7c:dd:f2:79:f2:d9:31:e3:e2:09:5d:14:7c:0b:fd:10:ce:
ec:ca:ca:9f:e9:a4:3b:20:e2:b6:73:18:45:fa:77:a1:65:c6:
38:6d:99:db:0f:19:cb:ec:fd:ed:9f:f3:ba:78:43:b7:82:cd:
02:ed:90:b2:47:8e:6e:f1:d1:2c:3c:95:c4:7e:6f:0f:e8:6c:
8f:41:be:1c:dc:f9:06:38:49:b2:59:09:80:d7:1e:16:90:a2:
13:05:33:0f:f2:4f:34:b5:9b:fc:68:6c:87:f9:ec:e9:39:f5:
70:36:16:23:81:77:ad:33:e4:4f:4f:6c:cd:f1:d5:44:f0:8e:
97:f2:3e:4a:5e:79:6a:53:36:a2:68:ec:f2:0c:d6:9a:83:d1:
3f:de:83:e7:c4:c0:2c:d8:f0:43:59:85:c4:45:cd:2d:b7:f8:
8c:55:1b:77:ab:cc:cb:10:21:90:c8:92:01:90:33:85:62:ca:
27:79:e9:de:3d:8d:1a:67:37:b1:06:e5:8c:da:3a:b3:7e:28:
b7:18:34:95:b0:3d:eb:8e:b4:eb:22:e9:da:c4:e5:0f:ee:99:
6e:e9:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-fra.rpki-client.org