Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/Lnp4mlPm1Jr9KAx0myuJrx7G98w.roa
File: Lnp4mlPm1Jr9KAx0myuJrx7G98w.roa (raw, json)
Hash identifier: rlZ05JqIzHCTcJiZraGM18rvqC5Q1A5N8wwe7jWdl6s=
Subject key identifier: 2E:7A:78:9A:53:E6:D4:9A:FD:28:0C:74:9B:2B:89:AF:1E:C6:F7:CC
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 018CC64B87B7B3B6A387D5797CBCC4321C68
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/Lnp4mlPm1Jr9KAx0myuJrx7G98w.roa
Signing time: Mon 01 Jan 2024 18:31:27 +0000
ROA not before: Mon 01 Jan 2024 18:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.17.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:87:b7:b3:b6:a3:87:d5:79:7c:bc:c4:32:1c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e7a789a53e6d49afd280c749b2b89af1ec6f7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:34:32:3b:7a:ea:82:2c:16:00:8b:a7:f8:
e2:40:ff:f3:35:d9:88:15:07:00:a8:eb:40:9e:6e:
e5:5c:38:f7:06:4c:e6:16:72:dc:85:04:50:55:db:
b3:90:34:59:9e:e8:67:74:1d:8e:a6:9a:dc:fd:a6:
69:bb:f7:5a:4d:42:ae:59:03:43:41:2f:7c:fc:30:
c6:db:5b:6d:c7:92:cb:0a:bd:15:82:cd:f5:3a:f3:
b6:cc:a5:b8:88:71:61:d4:1e:49:c2:68:1d:a6:cd:
1e:d5:0f:e8:c2:42:a3:96:8d:e9:0b:5a:3d:d9:f3:
7b:11:11:ff:14:27:67:d0:bd:b8:fb:0f:72:61:41:
aa:01:35:ba:31:af:1b:a8:4c:c7:77:32:84:ce:d5:
97:ed:87:83:38:ca:b4:28:52:0b:42:4e:a8:0c:80:
ee:82:97:11:4c:8e:e3:e7:e7:1b:13:52:21:f7:65:
30:f7:13:2d:a1:03:6c:c5:a8:94:4b:25:7c:aa:10:
33:ab:a8:41:23:36:96:0b:8e:fc:12:ab:f8:42:d4:
a9:6c:d5:6c:58:00:00:bd:d5:98:e8:16:c9:6b:83:
62:53:4f:f1:c4:6c:b7:66:bd:d6:26:fc:16:aa:2c:
6c:8e:ca:46:26:ac:2e:cc:0e:1e:47:c2:5a:57:5d:
88:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7A:78:9A:53:E6:D4:9A:FD:28:0C:74:9B:2B:89:AF:1E:C6:F7:CC
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/Lnp4mlPm1Jr9KAx0myuJrx7G98w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.209.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ea:a9:5f:64:05:2f:01:1b:9f:0f:59:0b:4b:14:c0:a1:54:
40:0f:36:8c:90:37:4e:ad:e5:cf:79:89:9f:6b:eb:b4:1a:32:
ef:8a:25:83:89:5c:49:d5:54:5c:94:35:fc:0a:83:58:7d:07:
61:39:e9:96:c2:e5:39:56:5f:5c:a5:7a:c7:1c:48:be:b3:36:
b7:34:a2:cf:a9:b8:68:24:fc:29:90:74:0e:dc:45:d9:40:0d:
a4:b6:7d:47:7e:4e:4d:f8:5f:0f:c5:36:b5:b2:12:3b:65:07:
78:c7:6c:b3:82:a2:33:9b:a9:0f:e4:1f:51:e1:92:9f:d5:54:
b2:ce:61:a3:f1:cb:e0:39:4b:6e:a3:b1:5c:f4:cd:7a:5f:82:
18:68:58:d8:6f:a0:44:b3:f5:ba:dd:63:e5:22:64:a6:d0:50:
b6:c1:e6:c2:81:15:60:a8:38:b5:4a:8f:81:a1:5c:2e:44:c4:
ad:c1:f8:82:6b:e0:2c:ae:a8:30:8e:80:91:fd:4f:3d:b3:9b:
36:b5:3b:be:01:8a:33:58:b8:f2:63:64:58:af:70:fd:a1:69:
5d:cc:5a:cf:ca:2b:b6:18:9d:3a:f5:85:46:75:9a:39:b2:67:
95:cf:38:50:48:1f:a8:ce:60:ea:a5:19:e4:9e:84:30:af:50:
71:26:f7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:57 2024 by rpki-client on console-fra.rpki-client.org