Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/p9VLmwle_0A8HS6kzMIdrVQgzu8.roa
File: p9VLmwle_0A8HS6kzMIdrVQgzu8.roa (raw, json)
Hash identifier: WenVUAHK53qWLTs0ckqmnjy3d058fXagfdiezR9I6Tc=
Subject key identifier: A7:D5:4B:9B:09:5E:FF:40:3C:1D:2E:A4:CC:C2:1D:AD:54:20:CE:EF
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 018EBC769EB4819D05E4BEEA45B40ECC6A8A
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/p9VLmwle_0A8HS6kzMIdrVQgzu8.roa
Signing time: Mon 08 Apr 2024 06:47:54 +0000
ROA not before: Mon 08 Apr 2024 06:47:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215879
IP address blocks: 193.29.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:76:9e:b4:81:9d:05:e4:be:ea:45:b4:0e:cc:6a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Apr 8 06:47:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7d54b9b095eff403c1d2ea4ccc21dad5420ceef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:cb:c1:11:69:48:e6:f9:74:c3:ac:65:39:
13:ca:7b:b3:c8:64:28:8c:c1:5f:80:d8:6d:b9:73:
1d:45:57:b7:fa:09:4b:c1:c3:4d:e3:28:d2:e9:e1:
a2:3d:16:c1:8c:ae:39:a9:87:58:c5:ac:d7:4c:05:
cc:8c:11:23:65:ab:54:0f:34:3b:a2:55:f8:5c:b9:
4b:7b:49:25:78:93:d3:e3:1a:d6:15:9d:0d:47:c5:
f0:52:b1:2c:ed:13:d0:e4:dd:7c:26:1c:ba:b5:61:
87:92:b5:3a:a9:9f:6a:55:1f:00:d7:aa:59:e6:06:
36:b4:fd:6c:da:28:91:46:3f:0d:b0:98:22:b8:1d:
cf:b2:df:91:62:27:7b:8a:5d:eb:7c:91:d0:61:6a:
de:fc:a9:69:9b:5a:b3:e1:b1:d5:66:78:ef:69:4f:
11:eb:46:42:d4:69:bd:ce:b2:76:0b:6f:34:f0:05:
1b:f2:53:a5:dc:0d:f8:3b:ef:e6:e1:01:5d:e8:45:
27:60:10:c6:ef:9a:3e:c2:52:e2:c0:b6:ab:11:fc:
f8:a0:45:bb:ad:21:01:40:29:aa:97:8b:3a:10:96:
ae:f6:8f:c3:82:f3:e2:71:ce:56:ce:69:19:c5:57:
76:1c:22:a4:c1:2b:e7:fd:5f:09:8f:81:fb:a2:c7:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D5:4B:9B:09:5E:FF:40:3C:1D:2E:A4:CC:C2:1D:AD:54:20:CE:EF
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/p9VLmwle_0A8HS6kzMIdrVQgzu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.144.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:b1:a3:d7:54:c8:ff:2e:1f:8a:55:48:79:03:40:5b:32:fb:
fe:58:76:4f:cb:8b:9e:17:29:58:59:86:12:cf:48:e1:30:0f:
1b:06:64:8d:30:e2:7d:08:a4:c2:ba:d4:df:85:c7:c8:72:e6:
18:df:4c:c4:1e:a1:2c:e5:a9:2a:67:32:6e:a0:25:f6:0b:b9:
4f:37:67:3d:f0:8d:33:52:bb:34:1f:2c:2c:7c:0c:b3:47:c3:
dd:83:15:67:d8:4d:bb:58:07:bb:d6:66:75:36:25:3a:a7:5a:
31:0c:89:3e:a8:91:2c:be:36:9c:cc:a8:65:33:32:de:b2:68:
b1:e5:f7:c7:11:b1:04:4c:fb:0d:86:a5:87:b6:65:98:31:39:
66:38:b2:7b:4d:6e:f4:c3:fc:9d:ef:a9:0f:2e:a4:ce:44:a4:
47:7f:bc:49:44:02:05:f6:52:44:64:85:db:7e:55:f3:b5:74:
85:be:3c:2d:06:2f:27:ab:87:88:9d:5b:06:61:d9:82:bb:16:
1a:ce:5f:8f:cf:55:b4:ea:e7:de:b1:fc:a9:dd:f2:b0:23:13:
ad:75:5e:10:c2:c6:56:a4:ba:df:e6:96:f7:e0:71:e5:80:30:
eb:cb:f6:49:86:f8:82:aa:79:86:b6:b1:43:5e:e0:b6:0e:5e:
1f:96:29:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:32:40 2024 by rpki-client on console-ams.rpki-client.org