Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/dru_fruAhJppzISAQrXbZbFHftY.roa
File: dru_fruAhJppzISAQrXbZbFHftY.roa (raw, json)
Hash identifier: HTWF6FI6g4nnSuuV2orotX0lArlFZZAq5LAxNfpSVFM=
Subject key identifier: 76:BB:BF:7E:BB:80:84:9A:69:CC:84:80:42:B5:DB:65:B1:47:7E:D6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018FC60FE973DAA57F23AC39D2084B30720E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/dru_fruAhJppzISAQrXbZbFHftY.roa
Signing time: Wed 29 May 2024 20:34:42 +0000
ROA not before: Wed 29 May 2024 20:34:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49791
IP address blocks: 193.233.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c6:0f:e9:73:da:a5:7f:23:ac:39:d2:08:4b:30:72:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: May 29 20:34:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76bbbf7ebb80849a69cc848042b5db65b1477ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:b0:f4:e0:4c:cb:26:26:54:a7:b5:a1:55:
95:e5:61:97:d4:c7:79:1b:7f:f5:d6:28:c9:bd:ef:
cc:10:d5:ae:57:93:60:d6:9b:79:c7:f1:9a:75:ea:
92:18:c4:35:dc:7a:e1:2c:72:f8:ca:27:ea:95:16:
c5:97:71:28:f8:77:17:83:4c:fb:0f:a4:46:7d:b9:
85:7f:d0:1c:32:56:f3:0a:ad:6b:f7:81:08:17:44:
94:1a:95:d3:f2:75:29:b4:32:f9:c3:0e:52:4c:4f:
5f:bc:e5:63:46:c7:67:0f:51:d9:c6:ac:5f:dc:60:
40:bb:09:a8:ff:5f:f4:f4:f1:7b:2b:c9:19:77:fd:
fe:63:3a:19:5d:c3:f1:e6:e3:0b:f3:c7:3b:f9:53:
59:7e:87:64:9a:9a:49:1f:f3:a9:dc:04:a6:99:2e:
a3:e3:47:b0:13:45:2c:a0:5b:1d:16:3a:72:3b:d0:
1b:d0:bf:37:19:0f:b9:e1:7a:11:1e:57:2b:1d:6b:
d6:80:ff:37:49:36:0d:8a:db:60:3a:33:c6:54:dc:
c9:01:58:71:e8:4e:48:8b:b5:79:07:27:90:9b:a1:
59:cc:78:08:6e:87:10:96:e0:c7:c4:09:46:1c:ba:
fe:99:3b:05:23:09:6e:1c:44:2e:8a:05:81:13:48:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BB:BF:7E:BB:80:84:9A:69:CC:84:80:42:B5:DB:65:B1:47:7E:D6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/dru_fruAhJppzISAQrXbZbFHftY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.87.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c9:67:90:ad:5f:89:7e:4a:5f:15:75:77:77:07:73:01:91:
75:3c:50:06:54:3f:46:e5:13:49:70:0f:16:d5:59:8a:40:c8:
17:48:3c:47:67:9d:f2:86:c6:16:1d:7f:05:2c:28:77:17:c8:
25:bc:66:36:b6:30:87:35:f5:f3:81:b7:d2:db:dd:de:a4:28:
45:41:53:dc:a7:51:0d:9a:50:54:b9:0f:ca:b3:0b:ce:12:e1:
86:d1:64:ee:b8:89:d7:1b:19:a4:91:a1:e8:5c:63:fa:40:84:
38:86:bf:97:7a:78:30:53:7d:e7:c7:36:88:06:10:26:41:65:
bf:5d:fa:08:62:38:29:c7:01:42:1d:e8:31:64:3d:43:42:df:
30:8c:f9:d4:65:b9:b8:03:d7:fc:3a:5b:36:89:b3:d2:2e:02:
b5:d7:8b:a8:b9:96:0b:19:14:9e:06:8c:e0:07:ce:49:aa:b8:
cc:46:09:ee:59:34:66:0d:22:95:71:2b:d4:89:0d:6c:94:4b:
45:07:ea:7b:2e:00:dc:e3:c4:92:49:ca:cc:ff:89:18:00:de:
a2:a3:d9:19:ce:a3:33:8a:eb:8c:6d:be:6b:b5:9b:75:26:86:
b1:b6:19:c9:ca:d5:8c:a9:15:2e:c5:fd:23:9c:81:27:d3:47:
a5:e5:92:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:39:24 2024 by rpki-client on console-fra.rpki-client.org