Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/PHeypY8kjCvJ9at3RkmY11JDuWc.roa
File: PHeypY8kjCvJ9at3RkmY11JDuWc.roa (raw, json)
Hash identifier: y0Xr0IZ/39p2mb2WZC2VTA+ThcN9Nao/lK9d3fncjhY=
Subject key identifier: 3C:77:B2:A5:8F:24:8C:2B:C9:F5:AB:77:46:49:98:D7:52:43:B9:67
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 018CC727225A6A7AFBEC58EAA3FC5D7BAE76
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/PHeypY8kjCvJ9at3RkmY11JDuWc.roa
Signing time: Mon 01 Jan 2024 22:31:19 +0000
ROA not before: Mon 01 Jan 2024 22:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 93.157.188.0/24 maxlen: 24
93.157.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:22:5a:6a:7a:fb:ec:58:ea:a3:fc:5d:7b:ae:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jan 1 22:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c77b2a58f248c2bc9f5ab77464998d75243b967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:82:a6:31:31:c4:8a:23:ed:09:29:05:7c:
09:ab:9a:26:f4:8d:de:27:e7:7a:60:4b:f0:35:2a:
83:b8:51:51:d0:7f:03:0d:ee:b9:bf:36:07:82:af:
93:e3:9c:48:97:de:0e:c6:40:96:47:f0:f7:0a:17:
9f:26:bf:79:9d:5d:9c:01:c7:78:ef:10:f9:95:a2:
93:85:01:af:ca:4e:a2:f6:44:e3:87:6c:2d:71:cf:
27:cc:57:9e:40:16:3b:99:84:a1:c0:b3:5b:af:ae:
6b:a7:c7:f0:32:08:31:1b:de:e4:dc:92:d8:a8:9d:
9d:81:93:ab:ba:30:fc:fe:d0:16:a5:8a:71:2d:06:
fa:de:c0:ef:1e:f1:c8:c5:d0:0d:73:72:dc:d9:2f:
9f:2a:b2:db:46:41:1e:ca:40:b8:3f:c3:4f:c5:dc:
db:72:2d:3b:3c:5d:a4:c8:5f:a2:f3:92:c1:bf:0a:
8c:94:b1:e1:db:d2:bd:a7:42:c3:83:0c:1b:70:87:
86:18:8e:33:9c:e5:cf:de:64:65:cc:da:73:bb:e6:
10:b3:66:a1:f1:29:32:52:26:36:eb:ba:b9:c0:12:
6d:8c:b2:09:25:5a:71:a8:7f:0e:6a:98:13:b1:42:
bc:79:c6:5a:99:30:8e:fd:e8:7c:16:0c:4e:9f:0c:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:77:B2:A5:8F:24:8C:2B:C9:F5:AB:77:46:49:98:D7:52:43:B9:67
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/PHeypY8kjCvJ9at3RkmY11JDuWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.188.0/24
93.157.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:dc:2a:7f:fb:29:1f:a7:48:7e:91:3c:99:58:41:95:13:0f:
98:67:14:1f:1c:28:24:41:e5:4a:f1:59:a9:0e:ca:47:9a:fe:
db:f0:35:58:eb:fe:da:61:c0:c3:f9:1b:85:43:d0:64:40:8c:
2c:57:a1:96:39:28:0b:02:5d:13:ce:9b:58:15:cd:d6:65:89:
61:97:a3:04:66:ec:db:d6:ef:7a:a3:5e:4b:ae:69:9c:f3:90:
7f:2b:68:f9:1e:86:5b:44:17:3a:74:e7:df:8e:49:97:8f:a3:
1e:22:14:de:9b:5f:58:ce:37:ef:5d:9d:26:d7:7f:eb:61:60:
d8:01:85:6d:35:0f:f6:e3:1c:a6:ef:d2:f4:9a:b7:83:96:a0:
cf:fc:8e:ea:63:3a:4d:fc:75:1b:d2:e9:51:04:41:af:dd:eb:
f8:0a:2e:fc:9d:bd:e8:e8:10:51:a0:c1:f4:89:59:48:47:ad:
b8:5f:55:d8:57:5d:e5:5c:34:db:99:d4:2a:20:17:fb:15:43:
64:3e:b4:18:9c:71:19:91:87:5f:e3:9f:f4:f3:99:69:f5:d7:
f9:67:8e:a0:9e:69:89:eb:b9:04:38:ca:e3:28:13:c7:cd:40:
41:9a:e6:80:bf:12:47:d3:fd:2a:d5:d0:2f:ad:15:1d:0a:25:
6a:d4:28:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:01:08 2024 by rpki-client on console-ams.rpki-client.org