Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/S918gbqqQB6fRC711rAQWQPNIJM.roa
File: S918gbqqQB6fRC711rAQWQPNIJM.roa (raw, json)
Hash identifier: +ixw+AHehEuWyjEgK1GWoKTT7m7PVouSRU1jNxb0uwI=
Subject key identifier: 4B:DD:7C:81:BA:AA:40:1E:9F:44:2E:F5:D6:B0:10:59:03:CD:20:93
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 018CC64B87F09075C8C260D4DDE56CE08EA8
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/S918gbqqQB6fRC711rAQWQPNIJM.roa
Signing time: Mon 01 Jan 2024 18:31:27 +0000
ROA not before: Mon 01 Jan 2024 18:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.17.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:87:f0:90:75:c8:c2:60:d4:dd:e5:6c:e0:8e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bdd7c81baaa401e9f442ef5d6b0105903cd2093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:15:db:af:fc:d2:6a:20:cf:26:54:20:f1:
e9:52:32:cb:13:22:9b:22:72:3f:05:a3:5e:d1:25:
e3:f6:2d:00:93:40:c6:ce:4d:3e:ca:e0:d4:55:14:
19:71:c5:d7:b8:62:17:bd:41:c7:c9:dc:c6:29:e6:
af:73:b1:f7:77:08:64:e1:02:c6:98:d9:58:c8:02:
7f:4c:f6:20:fe:68:00:b3:b2:7a:f1:ff:b1:d1:30:
c0:19:5b:b6:37:2a:63:74:58:3e:4c:d3:f8:02:88:
cf:eb:f9:05:43:4f:22:8b:3f:d2:c2:88:7c:25:3b:
e8:72:5c:1e:82:7d:b5:e3:98:7d:c3:a8:7f:2a:db:
09:73:11:00:a7:21:9f:5b:17:2c:ea:06:f4:66:1a:
df:25:ff:e3:dd:12:c2:a5:d7:6e:99:55:83:5c:59:
9e:7c:31:80:dd:5e:ed:52:f1:c3:66:fd:01:ce:79:
d8:ec:ed:36:e5:ed:f5:4c:ed:71:27:09:52:44:97:
47:07:fa:3b:2e:28:04:f8:37:b4:06:ec:52:09:a6:
14:6d:43:6a:31:7c:c2:ac:18:cc:8f:c6:f4:0a:04:
d4:84:d8:a5:e0:cb:43:a7:44:b0:70:da:8a:11:3b:
7b:9e:a5:b7:e3:43:5c:ee:3c:7d:ce:5a:3d:be:39:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DD:7C:81:BA:AA:40:1E:9F:44:2E:F5:D6:B0:10:59:03:CD:20:93
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/S918gbqqQB6fRC711rAQWQPNIJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.209.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:eb:e5:3c:85:9f:ff:b9:a9:d0:86:4c:22:38:d7:05:38:c2:
7e:86:b9:b3:8e:9d:cc:fc:e1:38:20:d6:47:2a:f1:e9:b0:4f:
de:02:ca:8d:a6:20:f6:be:2a:19:fa:50:06:77:58:1d:85:d4:
82:4d:79:e3:cb:8f:f8:29:85:ed:a4:f1:33:dc:68:d0:f9:f8:
4c:f2:27:2c:0d:92:db:b6:f3:14:cc:31:12:ae:a5:84:e9:26:
57:69:66:65:70:60:6a:b6:56:ac:8f:ad:0e:ec:ff:4b:81:3d:
d1:ae:b0:d1:f6:28:37:23:63:6a:87:95:6f:40:d5:e0:60:95:
6d:c4:51:7c:7b:98:3a:4e:1b:54:90:e8:84:02:b1:01:ef:68:
da:c8:27:fc:d6:a9:aa:10:40:6e:9f:10:0d:1f:62:b4:99:7b:
a1:1c:0d:d0:5a:33:f7:f5:a9:6e:78:74:f3:39:0f:6b:4e:03:
9d:f7:50:db:be:7d:40:be:55:c6:09:ce:2a:ac:6b:a9:66:e0:
d9:47:b0:4c:c5:2e:17:80:f1:a3:83:d4:8b:8c:2c:c9:87:b6:
ab:58:15:a0:43:42:65:b5:82:62:2e:bf:f8:da:3b:b0:b2:6d:
60:91:da:e8:c6:31:42:af:bd:8a:4c:25:77:5b:73:af:79:a8:
7c:4b:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:57 2024 by rpki-client on console-fra.rpki-client.org