Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Lr9sQtNfkhgveiXydwCpiF1CVDY.roa
File: Lr9sQtNfkhgveiXydwCpiF1CVDY.roa (raw, json)
Hash identifier: 4zV8oV6qftb6m00CwCD/5q0QDedYL4vkKs/qkv8m3Eo=
Subject key identifier: 2E:BF:6C:42:D3:5F:92:18:2F:7A:25:F2:77:00:A9:88:5D:42:54:36
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01932C71B85BA89E747EF42B0748608A7A85
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Lr9sQtNfkhgveiXydwCpiF1CVDY.roa
Signing time: Thu 14 Nov 2024 20:51:10 +0000
ROA not before: Thu 14 Nov 2024 20:51:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200195
IP address blocks: 193.8.185.0/24 maxlen: 24
194.113.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2c:71:b8:5b:a8:9e:74:7e:f4:2b:07:48:60:8a:7a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 14 20:51:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ebf6c42d35f92182f7a25f27700a9885d425436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:4e:46:a8:6e:bd:c9:ed:8b:f8:1e:0f:3f:
df:c6:c4:2e:44:99:c9:0a:35:fd:fd:fc:e6:30:53:
43:bd:e2:d5:a4:34:f2:95:7f:2c:9a:ce:ca:73:1f:
b8:d4:c5:64:4f:2e:81:cf:6d:07:ba:6c:f0:d7:54:
2c:1f:24:ee:90:a2:48:43:e4:c3:27:6e:c4:c5:85:
f8:bd:ac:c3:09:c9:df:fb:0e:0b:ec:22:bf:e6:9f:
51:1e:71:c7:5a:2a:fd:7c:f3:10:28:13:54:f6:50:
ac:6c:ab:99:44:3e:bd:93:92:8c:67:cb:eb:41:9c:
f6:7b:a3:29:6d:f2:9e:62:13:7f:41:4b:0c:b3:6a:
0d:6d:f7:7f:25:02:2a:e6:1b:4b:3b:76:8a:8a:20:
7f:ef:5d:0a:03:2a:ed:d6:94:ca:a8:d3:fe:8b:29:
e0:a8:b9:40:24:11:93:62:b6:2e:2a:22:1f:5d:ae:
c6:31:a2:99:82:23:ae:c1:a8:d5:60:b4:7b:7b:6a:
c8:8e:3e:0a:7b:d8:9b:af:3a:2d:22:d9:50:c9:c9:
5a:78:77:97:c0:a1:ac:78:47:a2:35:62:2c:88:8d:
2e:46:ec:77:ec:71:e5:5a:c4:48:22:7e:b7:6e:6a:
67:30:67:9d:c7:fd:6d:6f:49:39:0e:ce:67:b8:39:
78:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BF:6C:42:D3:5F:92:18:2F:7A:25:F2:77:00:A9:88:5D:42:54:36
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Lr9sQtNfkhgveiXydwCpiF1CVDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.185.0/24
194.113.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:fd:a6:d4:1f:36:f7:eb:57:ec:36:8f:45:57:66:a6:d0:65:
aa:f6:1a:25:b2:12:d8:eb:c6:ce:9c:a9:f5:43:5f:58:c5:43:
0e:5d:0a:67:dc:fd:f1:f9:00:7b:16:c7:08:6a:d7:b3:45:70:
10:da:3f:bb:d2:b2:6c:c7:0b:32:91:7c:8c:78:41:79:d2:73:
e9:de:1e:9c:e2:93:dd:f5:fe:e1:99:60:6c:05:e7:56:08:a5:
a2:08:77:94:db:49:c9:1a:e1:b3:df:d8:57:e5:ca:12:aa:42:
8b:88:f1:fd:b2:74:ed:cb:a5:08:fa:81:bf:c1:94:4c:3c:0b:
ca:b5:14:6b:d8:9a:75:ad:78:d6:c5:45:2e:5e:c4:21:2e:ab:
4f:2a:1f:33:cd:f3:ee:a9:52:f8:65:69:7c:75:55:a4:dc:02:
95:88:6a:ac:ff:2f:bb:3c:c2:8f:80:cc:a5:68:2f:1e:8e:b0:
05:e3:c4:66:c1:49:09:c9:80:8f:92:3f:62:e4:75:b1:6c:05:
5f:cc:e7:bc:e9:ca:9e:82:77:fa:7a:23:7d:66:53:35:f1:5b:
04:b9:26:d4:76:bb:cb:83:fd:43:15:f2:80:b4:86:98:b5:b2:
10:02:0a:6b:5d:cc:7a:43:76:10:3f:4c:f4:83:72:14:1d:49:
1d:3e:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:04 2024 by rpki-client on console-fra.rpki-client.org