Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/z9McrLDIyhh2DkZcKcFEnwmeucs.roa
File: z9McrLDIyhh2DkZcKcFEnwmeucs.roa (raw, json)
Hash identifier: K2MsTCNXQOnu+xOoCwu+RhqDgSZySFfvaPx7P3CEMGI=
Subject key identifier: CF:D3:1C:AC:B0:C8:CA:18:76:0E:46:5C:29:C1:44:9F:09:9E:B9:CB
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01935B6ED48AD0D58BF38D6FB513003EAC16
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/z9McrLDIyhh2DkZcKcFEnwmeucs.roa
Signing time: Sat 23 Nov 2024 23:50:10 +0000
ROA not before: Sat 23 Nov 2024 23:50:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
91.223.110.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5b:6e:d4:8a:d0:d5:8b:f3:8d:6f:b5:13:00:3e:ac:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 23 23:50:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfd31cacb0c8ca18760e465c29c1449f099eb9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:d9:f4:48:22:61:bc:8a:6d:f0:88:48:8e:
1c:05:55:8a:d4:19:ad:1a:d0:ea:83:ca:e2:66:0d:
40:ac:a3:b4:c0:83:b5:2a:1f:49:fa:64:9b:10:40:
e3:df:8b:bc:18:d5:80:54:4a:cc:c3:43:05:68:1f:
08:f9:5d:be:e5:28:c7:c6:56:27:d9:f1:77:9f:97:
95:2c:85:89:7e:9a:b9:be:a2:42:57:6a:ea:40:d2:
8f:1c:46:e6:be:90:65:fd:04:6e:7f:5d:40:44:3f:
57:23:2c:86:0f:74:81:8a:45:e0:de:99:90:13:d4:
bb:0c:f4:c9:86:57:b2:3b:2d:0f:8d:88:0e:7d:e0:
a9:02:12:67:c9:82:00:4a:94:44:55:bf:a0:3e:09:
7c:3a:19:7f:4c:a6:5b:0a:ac:bc:21:10:4f:3b:6c:
1d:c5:b0:ea:be:9a:c0:48:9d:10:48:e7:71:56:1e:
0d:27:e3:2a:0c:4e:cc:14:b8:60:3a:65:bc:b9:4e:
f8:f6:f8:f8:e9:12:f9:96:fd:81:0f:ff:64:8c:0f:
4f:c7:41:d3:ce:98:1d:b1:b9:06:fd:3a:5d:d8:f9:
d7:8c:39:79:7c:7b:b1:27:0a:ac:1d:54:62:08:98:
93:e4:3e:12:6e:f9:6d:10:c6:90:2c:96:f3:f3:cc:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D3:1C:AC:B0:C8:CA:18:76:0E:46:5C:29:C1:44:9F:09:9E:B9:CB
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/z9McrLDIyhh2DkZcKcFEnwmeucs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
91.223.110.0/24
195.211.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:13:20:5c:f9:50:b2:cf:22:92:10:5b:9e:b9:b4:b4:c5:0e:
23:63:2e:89:e1:dd:b6:df:12:09:f8:4b:7c:fd:21:a1:47:72:
eb:9f:71:11:c8:86:ba:38:08:1c:ec:b0:81:de:04:2b:33:18:
cb:3c:51:2e:00:34:13:25:db:2b:c3:00:d6:d8:49:d9:df:fb:
ac:66:69:c6:a6:c4:48:33:ab:21:3d:41:9b:a4:90:4c:3b:e3:
bc:4a:75:cd:d0:21:21:46:26:9e:ee:8c:25:9a:f4:d2:2f:4b:
54:75:1b:73:97:4a:86:c0:0a:d1:76:03:22:37:98:66:cf:31:
db:5a:49:7b:5a:66:17:df:1b:7e:80:60:c3:89:81:78:95:bc:
08:73:64:ed:63:09:42:12:b4:12:c3:1a:22:e1:d8:d8:25:de:
b6:eb:3c:3d:d2:97:38:c0:26:46:f2:44:61:ea:ba:70:f8:bb:
d2:74:7e:5c:b4:64:c6:ee:c3:8b:d4:e1:2c:cf:dc:b3:b0:c3:
7d:1b:e7:75:dd:d5:c2:e6:ab:c3:22:b8:77:a4:f7:ff:bb:c2:
1d:0b:df:98:aa:86:92:20:64:f8:f1:32:17:cd:a1:34:18:17:
5f:5f:de:dd:3d:bf:86:c4:fe:a2:2f:a4:51:6f:1d:0b:a2:04:
83:02:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:30 2024 by rpki-client on console-fra.rpki-client.org