Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/M0pBiwAI9s00bcJnrb5wkgi3L1E.roa
File: M0pBiwAI9s00bcJnrb5wkgi3L1E.roa (raw, json)
Hash identifier: 5Yye35Ow7J6m+I08YjUydmBdFrHCvhcDBsliCy8Wspo=
Subject key identifier: 33:4A:41:8B:00:08:F6:CD:34:6D:C2:67:AD:BE:70:92:08:B7:2F:51
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 019277EF6A91C5E2D011C8463D2F22D84C22
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/M0pBiwAI9s00bcJnrb5wkgi3L1E.roa
Signing time: Thu 10 Oct 2024 19:37:12 +0000
ROA not before: Thu 10 Oct 2024 19:37:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 193.160.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:77:ef:6a:91:c5:e2:d0:11:c8:46:3d:2f:22:d8:4c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Oct 10 19:37:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=334a418b0008f6cd346dc267adbe709208b72f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:01:05:5e:67:6e:c9:71:1f:3f:81:ff:b0:a7:
bf:a3:4e:73:ca:17:f2:b7:94:fa:d5:e2:41:f2:10:
01:07:22:8c:57:88:8c:63:68:ac:6c:10:e3:4d:05:
f4:1c:49:fd:b8:66:be:02:08:8c:42:5a:49:c1:e1:
0a:cf:d8:e5:3c:76:1f:18:34:91:e0:cd:ae:89:ce:
f6:60:2b:e1:41:1c:12:65:e2:89:51:7e:f3:15:8f:
70:58:49:e3:a6:ae:84:df:7e:01:13:ce:c5:75:0f:
39:e9:f1:7b:4f:2f:04:dc:c9:00:54:08:bc:5f:6c:
54:aa:91:9e:93:43:a5:e7:14:32:ea:5d:1b:cb:f8:
60:0a:8a:f9:ba:c5:07:d9:8e:81:42:25:f9:07:3a:
9e:8d:a3:f5:18:68:e8:60:06:da:9a:c0:cf:2a:be:
9b:28:22:c8:82:d7:92:5c:f7:de:47:30:56:48:99:
7c:d1:5f:ba:fd:87:3f:26:2e:33:5e:05:41:0f:1b:
80:a5:c7:6b:3c:2a:be:85:52:b0:fa:9d:17:f4:ab:
5c:c1:4a:ab:4a:ca:f3:4f:c4:83:0c:c5:cd:12:96:
4b:be:78:d9:10:49:ac:8f:a4:f1:e7:cc:d4:cc:37:
51:25:0b:10:22:9a:39:29:d0:9f:fb:5f:85:bc:c9:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4A:41:8B:00:08:F6:CD:34:6D:C2:67:AD:BE:70:92:08:B7:2F:51
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/M0pBiwAI9s00bcJnrb5wkgi3L1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.21.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:69:12:6f:08:ea:4f:72:f3:1e:9f:51:7a:e5:58:8f:40:63:
90:8a:92:87:87:52:ba:df:ff:a3:74:39:05:f5:32:9a:d2:d5:
eb:02:de:f5:a5:d5:cf:bd:92:96:aa:5b:52:03:61:94:9e:d1:
db:fc:10:d3:cd:03:a3:38:bb:ec:c2:ce:36:3e:5a:d0:c6:c3:
40:31:03:6c:ac:d8:54:14:ab:64:78:5d:8c:fc:83:0d:93:5d:
11:82:72:8a:e1:80:31:11:d3:2d:df:f0:af:e1:cc:c6:fd:49:
17:1f:f5:de:5f:4b:7f:70:c5:93:b6:97:eb:27:95:22:fa:f6:
6f:46:55:ea:c0:ce:4f:01:17:8f:69:4a:8f:91:e8:c4:fe:cc:
50:19:5f:71:fd:eb:5a:d4:bf:ad:99:06:d0:ca:8b:d5:b0:28:
7e:43:d8:db:cb:53:ee:87:c3:17:bc:7b:ae:1b:7a:2c:19:59:
18:ad:7f:f1:5e:00:63:8c:dc:2e:63:ff:5c:a2:f2:8d:4a:70:
f8:96:a9:c9:34:c6:73:3e:43:f6:67:4e:a3:18:97:d2:25:86:
c2:a6:a1:6d:be:29:cc:17:01:d9:4d:a9:88:40:dd:af:d7:08:
72:c0:6a:c9:9b:7a:d2:fa:a7:27:77:f3:46:07:47:f5:5d:4b:
4f:36:23:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:33:26 2024 by rpki-client on console-ams.rpki-client.org