Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/asv7TbA6mtBhQ-x9zmSYvdTJd0E.roa
File: asv7TbA6mtBhQ-x9zmSYvdTJd0E.roa (raw, json)
Hash identifier: rycFWRC8iDVqVyiI2pjX/OO/kX/YgF4HcgBAXtK8Xj8=
Subject key identifier: 6A:CB:FB:4D:B0:3A:9A:D0:61:43:EC:7D:CE:64:98:BD:D4:C9:77:41
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0191D6BF54873EDE9975A4045CCB51BA8033
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/asv7TbA6mtBhQ-x9zmSYvdTJd0E.roa
Signing time: Mon 09 Sep 2024 12:25:48 +0000
ROA not before: Mon 09 Sep 2024 12:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39277
IP address blocks: 194.102.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:bf:54:87:3e:de:99:75:a4:04:5c:cb:51:ba:80:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 9 12:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6acbfb4db03a9ad06143ec7dce6498bdd4c97741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:89:3a:b8:39:57:f8:dc:08:73:13:68:4a:
66:dc:98:f2:09:e9:18:4d:55:a1:57:8f:8c:17:34:
8c:0d:6d:b7:c8:40:d0:9f:c7:15:73:67:00:40:56:
1e:19:d7:28:8a:a2:99:bf:43:b3:00:2a:9a:8c:f8:
08:fd:3c:c8:99:a1:4f:d8:8a:81:9a:c0:4c:04:60:
a1:f2:21:57:bc:8d:da:68:b8:37:ca:d8:d4:7d:d0:
15:eb:be:75:2d:c3:e1:33:23:de:82:42:10:5a:85:
85:41:e5:54:00:1a:8f:71:fd:2a:d7:81:55:f9:eb:
06:e4:3c:52:38:e4:82:f0:24:06:c1:e1:cf:42:09:
e8:5e:f3:0b:07:95:07:cd:72:47:1a:31:a1:4e:4c:
27:76:da:70:29:33:78:46:53:bd:e6:a7:4e:9a:23:
b7:9f:fb:a7:c9:e7:ec:de:6c:8d:8d:b0:25:6b:b4:
ed:dc:54:88:34:42:5d:2d:f4:ec:7f:50:6c:9e:c0:
2e:7b:ed:b0:07:ec:aa:a5:5b:e2:18:c6:52:db:c0:
53:61:da:8a:49:c3:f7:40:23:e7:68:54:f0:19:8b:
3d:65:f9:b1:3f:db:81:60:9c:9f:58:09:3f:f7:71:
4e:ea:84:70:5a:3f:2c:f3:33:89:e2:51:5e:0b:b4:
32:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CB:FB:4D:B0:3A:9A:D0:61:43:EC:7D:CE:64:98:BD:D4:C9:77:41
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/asv7TbA6mtBhQ-x9zmSYvdTJd0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.228.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ff:3b:47:1b:ab:cb:9a:b1:7d:80:ed:9c:f7:bf:21:95:3f:
f5:39:1d:bc:d2:93:c3:b8:c3:ef:95:51:a8:20:72:da:08:94:
8c:95:30:c2:f2:e3:d6:10:d5:98:0c:c3:0e:e2:80:36:dc:a3:
5e:8a:d8:e5:a6:02:a7:2a:58:fc:0e:d2:c9:cf:f8:52:f1:5d:
a6:b4:8e:65:ac:82:7f:d8:dc:7a:07:3c:7f:d3:c2:1e:3d:cb:
35:66:db:73:f9:d6:9e:6b:31:f9:73:04:05:5c:fa:ed:83:91:
b5:39:0e:6d:1e:7d:ec:9d:a4:51:ea:69:3b:59:4b:06:d0:0a:
b8:f2:7d:d1:73:82:23:ae:fe:66:bc:ba:fc:5a:1d:20:03:89:
e2:ed:53:c8:ab:fe:cc:5b:30:75:8c:22:8e:f3:c5:b2:f4:be:
d2:6b:1f:f2:15:4d:4c:cd:41:37:91:2b:12:1f:ac:12:da:60:
08:26:41:6b:54:ec:8e:38:87:72:b6:ce:38:fa:5b:f8:1e:c0:
1c:d9:06:f6:72:d5:cf:11:fa:41:6c:5a:30:91:bb:2f:38:eb:
e8:42:4d:80:5b:8b:91:95:40:13:be:ef:14:1b:d2:be:53:3c:
f6:c4:9f:ef:d2:12:09:cf:61:3c:8b:c3:69:9f:c7:2d:80:34:
bd:a1:e7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:47:16 2024 by rpki-client on console-fra.rpki-client.org