Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/7vl71f9yiQpgh6fuSsJU4ihMrEY.roa
File: 7vl71f9yiQpgh6fuSsJU4ihMrEY.roa (raw, json)
Hash identifier: 7jdON+XrOCGOAPONn4PgQRNbd/EpntqX9r9ID1tGOgM=
Subject key identifier: EE:F9:7B:D5:FF:72:89:0A:60:87:A7:EE:4A:C2:54:E2:28:4C:AC:46
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 018CC4935FCADB29AC93CA1E0EBD83716B79
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/7vl71f9yiQpgh6fuSsJU4ihMrEY.roa
Signing time: Mon 01 Jan 2024 10:30:41 +0000
ROA not before: Mon 01 Jan 2024 10:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29550
IP address blocks: 193.111.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:5f:ca:db:29:ac:93:ca:1e:0e:bd:83:71:6b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Jan 1 10:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eef97bd5ff72890a6087a7ee4ac254e2284cac46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:bc:66:18:35:83:50:40:34:10:6d:69:ca:
c8:3b:d4:5d:70:29:7f:ac:fc:f7:53:49:c5:73:19:
73:64:07:43:25:e9:20:4a:4f:58:ac:4f:4e:ff:57:
e0:0f:5d:da:25:37:a2:21:8f:68:16:5f:c0:5e:e3:
82:ac:f2:f2:08:c7:3b:02:57:f0:68:79:5d:23:01:
3d:97:4f:e4:26:b2:18:42:27:14:42:fb:9a:2b:3a:
41:1d:c3:53:ee:79:94:f0:df:97:3d:98:92:54:f6:
1d:23:1c:3d:95:45:86:83:c5:4f:6c:8e:ea:b4:1d:
3f:2d:29:76:f9:4d:51:ca:9c:df:01:89:bc:73:f0:
75:83:b3:25:68:f1:2c:f5:d9:a0:b2:68:4c:34:43:
ee:30:5d:aa:d3:e9:e9:c3:ac:9a:5e:f2:77:10:d0:
ff:0a:e2:71:9c:23:df:ed:5c:1c:b0:22:73:4f:09:
e7:d7:83:56:cf:65:f5:57:97:12:2d:51:f5:40:93:
3c:e2:86:9f:c5:e4:e1:05:ab:f1:30:02:77:d8:05:
16:13:44:ff:06:dd:3a:8c:27:69:66:a9:b8:30:b9:
9f:86:01:4e:0d:29:ba:58:0d:c3:f0:80:94:71:fd:
ba:a9:56:4a:ff:09:9d:dd:d4:9d:8a:14:27:1a:0e:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F9:7B:D5:FF:72:89:0A:60:87:A7:EE:4A:C2:54:E2:28:4C:AC:46
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/7vl71f9yiQpgh6fuSsJU4ihMrEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:5d:63:8a:98:0b:2f:d5:69:9a:ef:fa:31:2b:53:a4:02:20:
68:f9:1f:8d:75:3e:8b:77:c8:c8:11:12:f9:26:55:70:e7:6c:
f4:a1:39:eb:62:9e:25:00:bf:05:3b:98:72:dd:16:70:14:4a:
46:f2:46:50:c1:74:69:3d:98:c1:54:b3:3f:61:4a:a1:43:73:
ab:44:ed:9f:2d:03:01:5c:9c:aa:40:77:41:d9:c4:06:87:57:
e6:16:a6:9f:f1:dd:fa:93:f7:f8:f6:bf:19:da:52:18:82:9e:
c7:c8:a3:9a:24:53:25:68:df:e0:28:93:b2:6b:87:92:c5:3e:
37:96:ce:9a:94:5d:a8:58:7d:c3:9e:d8:cf:62:3e:ee:96:d1:
e4:0e:02:9d:26:47:f0:5b:fb:7a:ec:e9:9b:df:ec:47:f6:a4:
db:fb:01:c3:09:82:fc:4d:11:4b:6b:d5:b5:1b:11:61:f0:4e:
54:27:3a:41:3f:0a:ff:4d:07:69:47:ad:a0:5d:73:f4:0d:f0:
c4:d5:6b:34:ce:16:1b:f6:49:b8:23:8a:28:8c:cd:f3:ce:ab:
97:a4:6a:0c:48:f7:58:5d:75:0f:04:f9:04:0a:78:c0:75:11:
51:a6:f3:69:22:0e:25:86:cb:ca:1c:36:a9:2d:9e:78:b6:82:
dd:7f:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:52 2024 by rpki-client on console-ams.rpki-client.org