Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/CeS9IGv5B3VMKzT0HQ8luu8uar4.roa
File: CeS9IGv5B3VMKzT0HQ8luu8uar4.roa (raw, json)
Hash identifier: sWDhVdAbKLYumx31uNfzb9sxBUKtM04YuqIrQA05igU=
Subject key identifier: 09:E4:BD:20:6B:F9:07:75:4C:2B:34:F4:1D:0F:25:BA:EF:2E:6A:BE
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94E01C6035652441CD5021DB5893504
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/CeS9IGv5B3VMKzT0HQ8luu8uar4.roa
Signing time: Tue 02 Jan 2024 08:33:01 +0000
ROA not before: Tue 02 Jan 2024 08:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199648
IP address blocks: 194.181.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:01:c6:03:56:52:44:1c:d5:02:1d:b5:89:35:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09e4bd206bf907754c2b34f41d0f25baef2e6abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:35:b0:d6:9c:57:14:dd:dd:85:70:36:e8:af:
ae:0c:37:a5:8f:36:5f:27:2f:07:5a:cc:6b:15:46:
7b:77:81:54:4a:a0:2f:bc:70:7b:04:cb:98:a7:cc:
1f:54:99:c6:4d:a6:0f:16:9d:f3:e4:7e:b4:3e:af:
2b:55:42:83:ab:8d:7b:18:ee:0a:5b:89:e8:d6:91:
f9:65:09:5b:a1:cb:aa:15:cd:53:4c:2d:98:b7:dd:
5c:d9:c9:ee:d1:f5:f3:93:d4:ec:f2:c5:82:51:06:
1e:2c:e8:c8:e5:31:3f:55:9a:8d:70:3c:27:45:3c:
02:a9:d3:e5:6a:6b:4d:e0:3e:35:9a:4e:2e:df:d3:
a8:43:e1:53:dc:96:7a:30:b5:66:e6:01:90:cb:f4:
e4:71:f9:f3:cf:c8:1a:61:2a:ed:93:be:8d:f8:ad:
70:72:eb:e0:da:52:82:c0:43:b1:ae:a0:67:9c:c8:
56:b3:8f:f7:68:da:51:d8:8c:f2:a3:72:15:8b:4a:
9f:74:68:83:9b:cd:f5:2c:6d:f5:91:8b:9f:b0:21:
dc:42:b9:ba:c0:46:83:a4:9f:c9:4e:64:5a:34:af:
14:29:67:47:0a:ba:70:4f:49:fd:d2:f8:c0:f9:62:
9e:92:5d:87:6f:92:f5:0d:86:3e:4b:16:d3:13:c6:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E4:BD:20:6B:F9:07:75:4C:2B:34:F4:1D:0F:25:BA:EF:2E:6A:BE
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/CeS9IGv5B3VMKzT0HQ8luu8uar4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.181.177.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b6:89:a8:91:ed:4f:ff:b2:ce:af:c6:86:d8:bb:5f:32:38:
a2:c0:67:db:4b:00:43:38:cd:58:5b:51:f2:5e:63:b7:6f:56:
ed:ce:1a:bc:07:19:a1:1c:ab:44:f6:c1:ad:27:f2:e9:d7:91:
d1:a1:2e:bf:fa:7d:28:99:e7:f9:ec:fe:f2:eb:7a:f6:d8:b7:
1f:e2:59:c9:3e:b3:6a:39:36:af:11:ff:38:2d:e0:33:37:e0:
3d:d0:6c:fb:99:29:12:e9:f0:55:b7:5a:00:86:89:a2:c0:8b:
bf:6a:e1:b4:48:5d:67:68:10:25:a3:22:f8:17:0a:e5:6b:eb:
3b:3b:8f:86:aa:84:73:2a:19:19:5e:c9:1f:8b:fa:36:ab:e3:
74:ed:08:f2:ab:b3:e9:49:2b:36:5f:17:ba:58:18:56:37:76:
5b:28:59:89:0b:4f:2e:37:c5:c5:c7:f1:80:69:93:f2:fc:03:
2f:7f:ae:de:da:57:87:61:41:96:d0:b3:d1:d6:33:ac:30:98:
68:b1:31:78:3a:a3:52:ae:73:6a:fb:c5:d9:a5:3a:56:56:31:
a9:b7:fe:40:62:b4:dc:b8:89:b2:98:60:89:e0:46:a3:bc:79:
f8:0c:1a:11:ce:a0:da:ce:a5:1b:68:61:51:4d:73:89:67:b3:
14:4e:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:27:38 2024 by rpki-client on console-ams.rpki-client.org