Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/l6FPeYCKEzjqM9GHHTPJqHpL9-k.roa
File: l6FPeYCKEzjqM9GHHTPJqHpL9-k.roa (raw, json)
Hash identifier: K0GypPDkswq8IMvH35ULF8CaXXM+LakXwPJzJpqhOuM=
Subject key identifier: 97:A1:4F:79:80:8A:13:38:EA:33:D1:87:1D:33:C9:A8:7A:4B:F7:E9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F4AB6643B156FD7AA7079B6B37BFC
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/l6FPeYCKEzjqM9GHHTPJqHpL9-k.roa
Signing time: Tue 02 Jan 2024 04:29:45 +0000
ROA not before: Tue 02 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210068
IP address blocks: 193.57.42.0/24 maxlen: 24
194.15.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4a:b6:64:3b:15:6f:d7:aa:70:79:b6:b3:7b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97a14f79808a1338ea33d1871d33c9a87a4bf7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:1e:93:9d:aa:87:4b:9e:51:e8:0a:5d:bf:
d0:8a:05:93:57:4f:9a:36:4e:85:aa:b5:f5:6a:25:
5a:2a:e6:ac:0f:1e:08:a8:f2:66:16:ac:39:df:32:
37:09:c9:a1:3a:97:d4:9f:94:42:41:54:0d:ef:35:
12:03:e3:54:14:8b:0e:a9:bf:57:5c:2b:4f:c5:10:
d6:c8:aa:10:55:3d:a6:c3:b7:61:dd:72:23:74:9d:
65:bb:f2:6b:10:3b:ec:d5:c2:f8:bd:30:7b:fc:09:
e6:b8:5e:56:af:49:37:1d:48:ea:b4:bf:64:15:85:
87:75:48:28:8b:73:e1:f9:a9:71:1d:0a:8f:b1:d7:
ab:41:27:b5:2d:30:a4:8a:11:47:1e:1e:72:1d:a0:
e5:6f:ab:52:fa:28:9d:ab:0c:a0:5a:b7:91:21:22:
02:ef:d5:da:ad:f2:fe:ea:bc:da:ef:e4:2e:f4:2c:
11:ac:48:c6:6c:ca:7b:fe:a7:ee:8e:f8:10:3e:c3:
52:a9:18:95:16:a5:57:d8:30:fa:cd:b2:f1:f1:94:
f6:81:17:e8:51:00:5c:fd:1d:8b:b8:96:a6:b1:ce:
f4:6d:9c:21:fd:10:19:bb:40:f3:51:ab:6e:44:70:
27:96:f1:bc:fc:46:d3:9b:74:a4:09:d4:07:3a:db:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A1:4F:79:80:8A:13:38:EA:33:D1:87:1D:33:C9:A8:7A:4B:F7:E9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/l6FPeYCKEzjqM9GHHTPJqHpL9-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.42.0/24
194.15.55.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b4:d2:39:d8:11:7d:20:37:a2:d6:6f:ee:b8:e9:3b:89:02:
3b:ba:f7:2c:9d:9e:5f:e1:f0:01:9a:ed:34:6b:c4:63:96:8f:
fa:5c:7b:e1:37:a5:55:2c:7f:1f:eb:9e:f5:23:18:05:66:21:
2d:10:b2:22:93:24:04:4d:19:25:c2:c1:08:bd:73:6b:46:ae:
a2:4c:23:da:43:b6:89:bd:e5:c1:5f:90:95:4c:ee:4c:81:8e:
97:0c:f8:62:8f:fb:e2:41:fd:78:b1:46:99:a3:fe:ed:e3:27:
98:d6:3d:b7:20:40:1c:ed:f7:ea:46:5f:80:a1:8b:5c:cc:ea:
5a:5c:77:9c:d2:f0:9f:06:4f:82:c0:67:0f:c7:8e:82:f8:ce:
62:54:f4:20:3f:d6:52:54:e1:4e:1e:c7:2b:4d:57:e6:9b:1a:
8d:d1:c1:6c:7d:3b:47:89:cb:df:ce:e2:39:14:ae:e8:ec:f0:
81:83:1b:da:17:61:68:cc:ac:29:e9:95:f4:56:c3:26:6d:6d:
32:96:ae:49:87:d1:2d:99:2c:c2:85:a9:a7:57:4f:77:d8:a4:
16:ef:43:53:61:75:de:31:47:9e:81:73:e4:74:d0:ae:bb:28:
2a:42:73:32:05:08:d5:a7:05:fb:d2:79:6e:c5:b8:53:84:06:
db:2e:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:40:31 2024 by rpki-client on console-fra.rpki-client.org