Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/J40igieOnHGhMg-CK2Cu53AloEE.roa
File: J40igieOnHGhMg-CK2Cu53AloEE.roa (raw, json)
Hash identifier: 4spAkroEdGkK9Vvr5XQ7mWsijryuVPPlx4xovlQHvKw=
Subject key identifier: 27:8D:22:82:27:8E:9C:71:A1:32:0F:82:2B:60:AE:E7:70:25:A0:41
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0192AE94C09E9D74CEF2D58D7825DC669AFE
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/J40igieOnHGhMg-CK2Cu53AloEE.roa
Signing time: Mon 21 Oct 2024 10:17:17 +0000
ROA not before: Mon 21 Oct 2024 10:17:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214941
IP address blocks: 193.160.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Nov 2024 14:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:94:c0:9e:9d:74:ce:f2:d5:8d:78:25:dc:66:9a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 21 10:17:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=278d2282278e9c71a1320f822b60aee77025a041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:88:40:a0:0e:12:e1:ce:f3:41:7d:10:ed:
a6:fd:f9:25:fd:25:f9:47:8e:5a:e5:75:52:7f:b2:
f0:ee:da:88:4b:f9:18:cd:f9:8c:4a:a9:f8:86:52:
cc:97:77:1e:30:a3:f8:e2:00:09:91:b0:5d:2f:86:
d4:24:01:fd:db:a9:34:2f:6f:7a:52:2a:87:4b:29:
ba:ad:52:56:87:cf:47:92:4a:8e:20:74:28:20:9c:
4b:b8:05:fa:7d:1c:fe:e9:6f:7d:68:46:9c:7c:3a:
27:cb:89:75:b6:43:79:26:bc:78:b3:11:3f:e3:03:
81:ce:1c:5d:42:84:75:28:6d:ee:b8:23:0c:68:42:
60:80:21:89:a7:19:63:22:9c:09:9f:85:eb:35:a6:
87:b1:da:4f:07:91:ca:19:48:a8:c7:e5:23:7f:7f:
20:09:15:ae:0c:3d:cc:cc:cc:c7:88:98:6b:00:a6:
5a:29:03:3c:c3:b1:0a:51:7a:5e:7d:10:87:02:b7:
7d:30:88:5c:5a:ba:e5:a7:c6:e2:23:2f:9a:90:53:
4e:d4:06:a1:c9:28:cf:3e:0f:e2:6d:e8:ca:ca:02:
1e:4e:e0:af:a6:5b:99:58:3a:e9:d2:05:6d:98:11:
20:98:07:48:2f:b6:28:2c:33:66:b5:11:e0:55:4a:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8D:22:82:27:8E:9C:71:A1:32:0F:82:2B:60:AE:E7:70:25:A0:41
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/J40igieOnHGhMg-CK2Cu53AloEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.222.0/24
Signature Algorithm: sha256WithRSAEncryption
09:41:3e:93:7a:a9:95:84:16:c7:8d:92:df:f1:0d:3c:6e:c9:
46:c6:b0:23:a8:8e:a8:f4:14:bb:c3:9b:2a:98:3d:ba:cf:b2:
34:55:cc:6f:4c:e0:2b:b9:93:77:3d:ae:6b:95:dc:db:a5:dd:
ff:cf:12:37:3a:fc:31:66:b5:88:44:43:d4:8c:e1:ef:7a:b5:
cf:25:e2:57:d2:b0:b2:bb:e6:e7:58:83:36:6b:4b:f6:1d:48:
b8:72:8b:c5:a0:5b:6d:e2:8a:fe:0b:bc:58:ce:4b:8e:fa:8a:
44:76:78:c1:67:7e:b1:d4:19:00:a5:10:5b:36:e5:a0:81:46:
d8:1a:03:a1:e1:4e:9d:2e:2e:e6:12:b6:74:f5:f8:73:ed:27:
4a:88:ea:39:29:13:d7:0c:d3:86:56:59:d8:46:68:bf:93:ca:
64:f9:94:e8:dc:7b:43:c4:ad:93:6e:37:3a:e8:28:09:ee:b8:
3c:5d:fe:09:f4:03:ae:ca:03:92:64:0b:00:c3:ed:e9:0f:4c:
b9:77:45:cb:0e:e2:fa:74:ab:c5:7d:5f:38:54:2f:ac:48:bc:
d5:70:97:b9:fb:79:f5:92:36:e9:dd:7e:83:07:4f:f1:95:e1:
81:fd:82:8f:f7:f6:03:7f:43:ab:23:b6:cc:4f:a6:cf:59:ea:
7b:e1:bf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 23:46:19 2024 by rpki-client on console-ams.rpki-client.org