Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/fPMmHjrsU-bzMvk6oLBjsh6XPXo.roa
File: fPMmHjrsU-bzMvk6oLBjsh6XPXo.roa (raw, json)
Hash identifier: Oj3QsRAAcC7vd3Ie9AREk0P2ylAZIlDGTQZuZwfYvEI=
Subject key identifier: 7C:F3:26:1E:3A:EC:53:E6:F3:32:F9:3A:A0:B0:63:B2:1E:97:3D:7A
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01915009693646C339A109E5676C563C57C7
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/fPMmHjrsU-bzMvk6oLBjsh6XPXo.roa
Signing time: Wed 14 Aug 2024 08:37:59 +0000
ROA not before: Wed 14 Aug 2024 08:37:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214542
IP address blocks: 193.57.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:50:09:69:36:46:c3:39:a1:09:e5:67:6c:56:3c:57:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Aug 14 08:37:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cf3261e3aec53e6f332f93aa0b063b21e973d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:b8:2c:e4:8a:5f:db:6e:38:b3:55:fe:53:
43:2e:0a:a3:7b:59:9f:ab:e5:68:14:a6:54:7b:a3:
cc:87:a7:c8:6e:e8:13:db:87:b5:5b:11:c3:22:0f:
e0:94:15:fe:d7:5c:ab:95:d4:b0:d9:da:50:59:76:
3e:f8:e6:90:cf:f9:86:d2:db:61:99:af:74:b8:93:
4f:8a:15:e4:c7:79:bc:8f:41:69:7e:49:e0:06:4f:
5e:82:d7:8e:e6:5e:24:53:e7:62:b3:8e:c6:e4:08:
0f:e8:29:cd:d6:10:d4:f7:5b:ac:7c:cd:fa:f4:26:
40:b8:a1:fa:19:24:96:7a:16:77:d6:cd:39:d3:17:
b5:d9:3e:d7:3d:98:9c:78:72:96:c9:cf:5b:e0:f7:
be:0c:43:44:03:db:9e:2c:05:9b:e1:a9:9d:b2:c9:
62:9c:69:31:be:28:19:9f:4e:98:8a:95:6f:cb:92:
fe:68:10:62:9f:e0:0b:15:d6:97:7f:8a:79:9a:f2:
90:c7:53:10:7a:14:21:7d:7e:54:19:81:c8:71:14:
b3:d3:5e:58:68:53:10:f3:8b:e0:99:ba:2c:0a:d4:
02:12:a0:47:37:79:7d:f7:8a:16:2c:e3:84:6b:e5:
49:0e:d9:f2:e3:66:04:10:b8:f4:ef:1e:d9:a2:63:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F3:26:1E:3A:EC:53:E6:F3:32:F9:3A:A0:B0:63:B2:1E:97:3D:7A
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/fPMmHjrsU-bzMvk6oLBjsh6XPXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.9.0/24
Signature Algorithm: sha256WithRSAEncryption
39:48:9a:22:a4:1a:c6:0c:cc:72:f5:9f:5a:13:29:64:0f:2d:
c5:a1:66:ea:ee:eb:5e:fb:44:0b:16:5a:7f:8c:2f:b4:62:60:
75:02:c5:61:30:b9:45:c9:cc:d2:04:f7:10:44:93:a5:83:eb:
a3:4e:ad:8f:9f:6c:7f:c1:ff:b9:74:e7:03:01:fa:d0:6c:ab:
9f:84:02:5e:5d:95:c2:fc:9d:ae:09:01:63:94:ca:95:9f:22:
0d:95:f5:41:4b:01:0d:73:fd:60:c4:5d:62:ab:ff:90:3f:2c:
6b:12:71:a9:92:4b:ce:f2:85:8f:6f:1a:ae:64:b1:57:32:65:
de:62:bb:a1:fc:93:27:e8:13:f2:bd:99:82:9a:49:23:78:87:
30:a9:8c:24:93:e4:b8:de:ea:9b:15:63:ee:6a:49:fe:f2:96:
89:fe:e9:ad:a6:be:eb:56:f6:83:4f:a9:4a:b5:46:89:b0:7a:
f5:80:af:91:07:7c:67:79:0a:c6:d4:b1:d0:9b:27:38:ef:24:
b3:32:b0:e4:e2:c3:43:e3:b4:96:b1:a7:a8:4e:3f:69:c3:d9:
6f:80:c6:98:35:e9:ce:bf:b2:e8:54:4d:03:09:73:0c:41:73:
39:a5:84:84:df:45:51:c8:21:09:46:3b:98:6b:43:65:6f:92:
21:09:7a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:23 2024 by rpki-client on console-ams.rpki-client.org