Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/I4mrLnYszgWweIyLL6-IS2SrTcU.roa
File: I4mrLnYszgWweIyLL6-IS2SrTcU.roa (raw, json)
Hash identifier: ZhxD0yG7ilaw0y6Pb0i5anSVrwAfw88P9V6UNZakdDI=
Subject key identifier: 23:89:AB:2E:76:2C:CE:05:B0:78:8C:8B:2F:AF:88:4B:64:AB:4D:C5
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0193006334B1B87DB89DC4DA9763C6814CEE
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/I4mrLnYszgWweIyLL6-IS2SrTcU.roa
Signing time: Wed 06 Nov 2024 07:32:01 +0000
ROA not before: Wed 06 Nov 2024 07:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 194.38.48.0/24 maxlen: 24
194.38.50.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:63:34:b1:b8:7d:b8:9d:c4:da:97:63:c6:81:4c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Nov 6 07:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2389ab2e762cce05b0788c8b2faf884b64ab4dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:1e:1a:b4:76:6d:21:14:b1:18:ad:fa:a3:
db:d7:b8:44:71:4a:ad:be:f2:29:14:d6:e5:74:68:
06:4b:9c:dd:6b:2c:22:3e:dc:5e:77:34:3f:ca:96:
a6:fc:cf:e3:68:6e:2c:f6:f0:d4:3e:f5:39:d8:c9:
03:66:aa:e8:01:9b:6c:d8:73:97:6f:a6:4e:5f:10:
55:b1:28:d0:f9:cc:94:ed:dd:4d:d4:53:d5:e8:50:
12:99:b7:56:b2:74:1d:25:27:35:28:93:d8:00:3c:
b4:58:d8:a7:af:33:33:47:a9:84:0d:b8:69:e7:2c:
06:21:38:8c:86:e2:11:58:1b:16:9f:cf:62:eb:5b:
04:39:ca:84:bc:f5:b8:ce:1d:3e:9d:f8:8d:24:cc:
d6:ac:74:d4:64:1b:e5:5f:11:f6:aa:59:2b:69:6c:
90:7f:4a:78:c1:8c:37:ea:c1:a3:8b:5c:27:29:0a:
59:3b:c6:56:4c:f8:3c:ef:e6:3e:ec:9b:27:c0:f4:
13:bf:a7:10:cf:b1:c7:10:c1:63:bd:62:2a:d9:0d:
0d:ad:14:37:bc:86:e9:76:db:31:8b:bd:59:77:93:
30:3f:76:07:af:76:46:0a:b6:85:69:76:a7:1d:8b:
16:db:4c:fa:5f:65:c8:b1:c4:c3:fd:23:0f:5f:3e:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:89:AB:2E:76:2C:CE:05:B0:78:8C:8B:2F:AF:88:4B:64:AB:4D:C5
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/I4mrLnYszgWweIyLL6-IS2SrTcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.48.0/24
194.38.50.0/23
Signature Algorithm: sha256WithRSAEncryption
05:45:aa:74:54:a8:c0:d6:fe:96:38:b7:19:7d:ab:a1:5a:75:
d3:a6:88:7a:ec:82:01:26:61:91:fa:49:ef:7d:17:9b:70:3b:
21:66:f2:23:46:d0:b7:cd:73:b4:21:eb:fc:ff:64:34:4a:08:
2e:2c:f0:34:b6:22:bd:0a:46:b2:54:00:45:22:b6:e5:be:a5:
46:11:d5:2e:91:53:f9:d7:81:8a:e0:86:de:6c:c7:96:d6:a0:
fb:62:1f:ed:94:e7:90:36:45:61:a6:45:1c:06:d0:5a:1e:73:
9f:12:89:76:f5:c9:54:69:8a:16:ef:73:b1:50:4d:eb:27:e3:
c8:73:d4:f4:89:0f:ed:2d:56:1b:e6:31:45:8b:ca:b2:38:13:
fd:3f:78:0f:48:33:81:16:0b:dc:88:06:27:c3:9f:54:99:da:
c3:3b:a3:d1:a2:2c:1c:be:0a:67:cc:cb:6f:68:27:13:32:fb:
47:26:bb:cf:52:4f:17:54:7b:c4:f8:82:c9:f3:77:4d:b1:9e:
3d:2d:86:8e:c6:83:c3:05:04:22:6d:02:e6:85:6f:80:27:e2:
bd:d3:df:9d:43:a3:98:5a:ae:24:d0:8c:3a:4d:a0:e1:b5:eb:
92:25:b4:14:a0:40:43:87:5e:6e:d5:3b:4f:ab:2b:45:1e:99:
33:8b:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:28:00 2024 by rpki-client on console-fra.rpki-client.org