Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/tRAvvMj5p6QX8yBvaExxUa938Qs.roa
File: tRAvvMj5p6QX8yBvaExxUa938Qs.roa (raw, json)
Hash identifier: 94E0JgZ/khtrGhCEDNlHwinxgy0+nnx0y2HCEcq1JEM=
Subject key identifier: B5:10:2F:BC:C8:F9:A7:A4:17:F3:20:6F:68:4C:71:51:AF:77:F1:0B
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 0193187DDBAD483E31B9B7728D505800D257
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/tRAvvMj5p6QX8yBvaExxUa938Qs.roa
Signing time: Sun 10 Nov 2024 23:52:01 +0000
ROA not before: Sun 10 Nov 2024 23:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15020
IP address blocks: 91.235.168.0/24 maxlen: 24
193.23.60.0/24 maxlen: 24
2a09:8400:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:18:7d:db:ad:48:3e:31:b9:b7:72:8d:50:58:00:d2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Nov 10 23:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5102fbcc8f9a7a417f3206f684c7151af77f10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:6f:07:b3:77:5c:b2:7e:46:38:9f:74:db:
1b:5b:14:28:1c:5d:06:4b:5e:59:42:cf:d9:47:a6:
e6:8d:ad:64:9a:43:47:c0:5c:ad:13:66:e6:0a:b6:
68:ee:fd:ee:73:a4:f0:82:77:9f:85:66:f8:68:ea:
9d:6e:a4:e2:0a:34:82:e8:f3:07:29:c2:b0:9c:c5:
dc:e4:0f:36:dc:40:2d:ce:bf:31:67:3e:1b:a0:89:
ef:f8:d1:3a:96:dc:90:01:32:af:4e:e5:fa:29:d7:
36:a3:05:78:96:8c:0b:19:33:3a:7c:80:49:54:1b:
8b:89:e3:6e:41:c0:f7:83:e9:84:20:89:b7:c1:30:
29:03:58:d6:1f:7e:3e:fc:d5:9c:d6:4a:be:44:b6:
5e:61:7e:dd:87:1d:d7:8b:95:33:74:93:0f:6f:f3:
3d:83:bc:5e:ca:83:ba:1f:8a:2c:e0:49:5a:1e:37:
69:ec:73:fb:2c:be:f1:05:7e:7b:42:92:9a:bf:1f:
c6:e5:a5:bb:c4:e0:f7:a8:bf:73:49:b2:f8:be:51:
d4:15:0a:70:18:8d:66:da:35:32:ae:f1:45:a1:74:
f4:70:a4:2b:62:cc:1a:04:70:db:e7:7f:11:ac:e3:
6c:8a:e3:f1:02:80:56:e6:d7:69:97:a5:91:3b:ba:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:10:2F:BC:C8:F9:A7:A4:17:F3:20:6F:68:4C:71:51:AF:77:F1:0B
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/tRAvvMj5p6QX8yBvaExxUa938Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.168.0/24
193.23.60.0/24
IPv6:
2a09:8400:3::/48
Signature Algorithm: sha256WithRSAEncryption
87:dc:da:db:a7:20:d2:91:45:7d:32:ff:94:24:6d:9f:0d:75:
7f:ca:e6:67:b5:09:a6:8f:c9:0d:18:a9:49:ae:8a:5a:4b:f7:
e8:82:47:d1:48:eb:69:20:d8:2c:b6:a1:47:dd:78:bd:f6:fb:
60:d9:fe:80:6b:5a:03:a9:d8:1e:3a:4f:3d:be:a2:88:87:d0:
64:ce:9c:24:6d:a2:92:23:b5:14:9c:06:8b:ef:71:9d:7e:cb:
ca:5e:43:33:a9:58:10:1c:4f:21:51:9f:6b:e9:62:9d:31:f7:
e4:05:c5:90:25:06:44:e3:47:6b:28:74:06:aa:e4:aa:40:ea:
c5:1c:c9:09:b9:bf:e6:4e:ab:03:e4:73:da:e8:22:aa:82:f1:
81:52:2c:4a:8e:ef:5b:eb:c5:66:a4:1d:58:44:01:19:fd:92:
6b:ce:fa:11:16:20:58:ea:96:4e:28:22:5a:5b:a9:3e:51:e7:
7e:01:1b:32:22:a8:ce:0a:c4:75:fd:85:bc:31:97:b9:f8:fb:
0c:9b:20:3d:8f:75:5e:98:61:95:eb:f0:43:5e:c8:91:b2:98:
2d:1c:82:e3:b9:97:f1:08:83:e1:95:97:9f:81:84:5e:aa:5e:
b0:07:e1:c6:37:a9:c5:82:a6:99:32:d5:09:f8:5d:10:b8:2c:
11:c8:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:05:53 2024 by rpki-client on console-fra.rpki-client.org