Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/A6sCoFu8NzloQlZBEZogOuA-ypQ.roa
File: A6sCoFu8NzloQlZBEZogOuA-ypQ.roa (raw, json)
Hash identifier: 5gvcEfu7cI4MQN+s1TwDET0wRT5LuEhfPva037FoQ3c=
Subject key identifier: 03:AB:02:A0:5B:BC:37:39:68:42:56:41:11:9A:20:3A:E0:3E:CA:94
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 018CC5004AE3D2B39D50863E07C3E12A84B9
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/A6sCoFu8NzloQlZBEZogOuA-ypQ.roa
Signing time: Mon 01 Jan 2024 12:29:39 +0000
ROA not before: Mon 01 Jan 2024 12:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 193.28.240.0/24 maxlen: 24
193.28.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:4a:e3:d2:b3:9d:50:86:3e:07:c3:e1:2a:84:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Jan 1 12:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03ab02a05bbc373968425641119a203ae03eca94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c9:c9:d0:fc:32:15:8c:07:7f:f4:9f:87:24:
38:2e:c8:15:db:75:8d:8d:01:2b:01:af:ce:1c:fb:
8e:c4:56:0e:31:3b:86:cc:f9:6f:25:3f:2e:27:3a:
8b:22:e0:89:2d:37:04:54:63:c9:2b:31:fa:6c:e0:
56:f4:a4:3e:2a:3c:bc:af:34:12:3f:b9:14:cb:a4:
53:01:1a:0d:2b:1f:ae:7f:6f:d3:d2:62:57:8b:ea:
69:2d:30:b7:2e:dd:9b:4c:15:30:cc:a4:81:bf:9a:
f3:b1:70:7a:dd:a3:9a:83:e4:5a:24:41:f4:71:79:
6d:1d:e3:96:a0:cc:4f:29:b2:ce:86:df:15:fb:45:
52:87:98:4a:99:ae:8e:d1:b7:23:2a:a6:2d:95:42:
ad:c1:48:fd:ee:9a:7f:d7:3d:57:4e:4a:cf:2a:d7:
5a:38:57:9b:b5:2c:20:fd:90:88:13:6b:6a:b4:9e:
2f:76:e4:7e:d4:7d:97:6f:54:dc:af:f1:b5:9a:c8:
46:64:c3:ad:f3:ce:76:75:e2:f8:ff:c1:de:13:d8:
e8:90:5d:41:2a:97:4e:7c:07:41:2e:05:6c:e2:9d:
78:c2:25:5c:ae:7c:3f:f6:66:d5:9b:f8:c4:92:37:
2d:29:6d:28:56:b9:de:7e:24:2d:84:80:7f:77:2e:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AB:02:A0:5B:BC:37:39:68:42:56:41:11:9A:20:3A:E0:3E:CA:94
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/A6sCoFu8NzloQlZBEZogOuA-ypQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.240.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:93:da:ce:c1:bf:a0:30:0b:69:1b:a1:67:74:a7:4b:c8:41:
51:4e:dd:be:58:ac:42:a2:d5:0e:de:12:81:b9:fa:67:a2:fc:
d8:36:96:29:b6:ce:7a:58:42:b7:46:2f:e7:93:c5:ef:56:34:
56:6f:b3:93:dc:43:d6:8a:6a:48:6b:43:27:40:7e:9c:4b:05:
4e:ba:34:d5:5c:37:e5:3f:59:60:c5:55:9e:aa:f1:62:2f:7b:
6f:35:d1:e9:20:e9:1c:0e:92:61:17:b8:19:5a:76:81:d3:29:
bd:39:da:3b:35:30:ac:63:17:aa:68:57:e1:cc:41:c2:e1:17:
7a:6f:fb:4e:b8:99:08:73:60:e9:4e:ce:4e:db:70:00:4f:e8:
40:82:63:03:ab:97:84:70:e6:51:4e:ec:36:0f:76:c8:82:d7:
71:e1:7b:48:57:e4:c6:7f:74:3e:9c:dc:4a:28:2f:c7:74:b3:
99:5c:76:41:0d:24:8e:32:91:5e:cb:fd:83:1b:6a:df:43:5b:
2c:77:ea:71:50:26:a7:b4:62:d2:ff:c9:51:39:58:b8:cd:b9:
8c:3a:67:94:b1:d1:dc:f0:58:d6:b7:95:c0:3d:b3:e6:2f:f9:
b1:65:d6:d6:82:0f:b1:c5:27:80:ed:f7:dd:8d:38:7e:c1:c3:
27:52:7e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:50:41 2024 by rpki-client on console-ams.rpki-client.org