Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tuCYOFhEKd6gJkh09BEZ_7ZoXyQ.roa
File: tuCYOFhEKd6gJkh09BEZ_7ZoXyQ.roa (raw, json)
Hash identifier: nsvMd1QlhRraXnYbQWoUdLVlmPYAbz7cewacLerVFk4=
Subject key identifier: B6:E0:98:38:58:44:29:DE:A0:26:48:74:F4:11:19:FF:B6:68:5F:24
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193013E06D4C1F0E2B3503814CA66ACB93F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tuCYOFhEKd6gJkh09BEZ_7ZoXyQ.roa
Signing time: Wed 06 Nov 2024 11:31:02 +0000
ROA not before: Wed 06 Nov 2024 11:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 393398
IP address blocks: 81.161.237.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:3e:06:d4:c1:f0:e2:b3:50:38:14:ca:66:ac:b9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 6 11:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6e09838584429dea0264874f41119ffb6685f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:9b:c2:4e:68:6b:bf:f5:c4:3f:11:54:46:
ea:bc:59:a1:17:b9:c1:55:16:d9:b1:67:e7:80:17:
c0:3c:98:ff:af:e5:13:ce:43:47:84:c2:b1:1f:e3:
e4:c7:76:66:4f:96:9d:ef:66:06:6a:c3:70:ee:7b:
b6:98:ca:33:f4:2e:1f:d3:fa:ac:58:34:91:cc:e3:
f2:ef:2a:a2:0a:93:65:b0:46:41:f5:20:4c:e7:ce:
12:21:c8:32:c4:74:cd:8b:08:48:f2:3b:ac:df:76:
a5:79:ee:90:71:4b:e0:ad:6b:f0:f8:c5:33:8a:8b:
cc:72:53:ad:c0:69:ec:53:b2:a5:27:23:8e:04:7c:
16:55:dc:00:b9:98:60:db:40:2e:c1:59:34:c2:d2:
ce:f8:86:31:d9:16:4f:5e:0b:f3:e3:34:7d:a7:d8:
10:c7:1f:d2:68:86:99:9c:31:c4:5e:3a:f2:ae:68:
d1:65:31:c2:68:72:c0:7c:4b:3c:60:d6:43:a1:13:
95:b6:16:79:53:e1:1b:25:c2:f3:bc:6c:b5:1a:79:
b7:34:76:76:b8:27:d7:62:6d:0b:7d:bb:55:a0:65:
85:35:04:c8:d2:bb:9b:c6:bd:ff:2e:41:ca:8b:1c:
a3:ed:3e:77:e3:cb:fe:b0:52:25:f0:37:1e:3b:8a:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E0:98:38:58:44:29:DE:A0:26:48:74:F4:11:19:FF:B6:68:5F:24
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tuCYOFhEKd6gJkh09BEZ_7ZoXyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b4:30:5c:8a:c1:65:7e:5b:35:d3:1a:65:58:27:e7:c9:32:
ac:9e:d8:0e:f2:5f:80:8f:b4:d3:79:ab:5a:11:2c:eb:76:fe:
da:cc:77:a4:72:63:3f:21:91:30:d9:dd:4c:82:77:7e:60:cd:
0d:71:c3:3e:d6:5b:d8:8e:56:05:45:7d:64:70:5a:ba:94:65:
74:05:e3:55:ed:6f:f4:02:b4:2d:2b:06:80:d8:f7:f0:4e:f9:
86:1d:4f:21:29:7f:93:de:8d:25:d9:77:48:dc:16:3f:ad:36:
ba:9d:e3:9b:b0:c6:56:84:f9:0f:35:d9:d5:b6:9d:59:f0:ae:
ae:7a:62:52:7f:fa:3c:fb:d5:3f:3e:07:77:43:43:a1:14:43:
45:7f:6c:e5:7a:c0:e1:3b:f7:86:ca:82:6b:3b:d2:e7:20:5a:
5c:88:3b:c1:d4:53:f4:8a:ad:53:a9:61:28:bd:90:d6:48:f3:
68:64:fa:0a:df:46:99:e2:04:c3:f5:40:98:aa:33:2f:a8:e3:
18:31:d3:81:c3:fc:c2:ef:c8:2e:4e:aa:59:f1:da:a8:a8:bf:
0a:3f:79:20:52:d9:f6:2d:96:29:4a:e7:29:97:96:cc:47:51:
28:86:41:86:d6:e6:70:26:ac:3c:6f:ed:ff:69:ae:84:e9:45:
fc:22:cc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:19 2024 by rpki-client on console-ams.rpki-client.org