Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/hoEgczhyLx2Cc-qZRtWCZNej5js.roa
File: hoEgczhyLx2Cc-qZRtWCZNej5js.roa (raw, json)
Hash identifier: YRfFDfVw9CTfDrxMI0FIfTlUvwJ535nzUQNNZYWZG0s=
Subject key identifier: 86:81:20:73:38:72:2F:1D:82:73:EA:99:46:D5:82:64:D7:A3:E6:3B
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0191F68220639C1ABCEF9CC2458EC818DFC1
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/hoEgczhyLx2Cc-qZRtWCZNej5js.roa
Signing time: Sun 15 Sep 2024 16:26:48 +0000
ROA not before: Sun 15 Sep 2024 16:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48447
IP address blocks: 193.160.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f6:82:20:63:9c:1a:bc:ef:9c:c2:45:8e:c8:18:df:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 15 16:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8681207338722f1d8273ea9946d58264d7a3e63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:c3:27:5c:7c:11:b1:52:40:cf:80:45:c5:
57:51:95:bd:56:90:c8:70:49:89:59:27:e3:c8:3d:
2f:45:09:f3:84:14:3a:85:f4:ff:7d:51:1e:a2:14:
92:18:d6:6e:48:40:f9:f4:32:bd:8a:cb:a7:b4:5c:
74:7a:ad:d0:56:54:64:1c:c3:20:bc:b9:e2:0c:4f:
f1:ed:4a:7e:89:79:b0:34:10:9f:4a:70:9f:f9:81:
f4:34:a2:b7:19:81:53:a6:0b:ef:51:63:3d:a4:50:
bb:5d:18:2e:cb:63:81:d3:2a:d0:e7:b6:cc:64:3c:
91:04:81:9d:11:0d:0b:17:ef:55:ae:32:3b:02:e6:
46:72:38:65:e4:56:9c:1b:7a:1b:40:25:e6:28:a3:
22:c3:7e:c7:df:bc:b4:e6:cd:ff:43:62:78:20:f6:
27:6f:60:33:dc:73:4c:86:ef:30:ae:e4:d5:1c:8d:
73:23:13:79:77:a1:d7:24:04:b2:e7:0e:2d:a3:dd:
e8:f3:33:9c:7d:2d:0e:07:a3:24:52:0b:c3:26:9b:
5f:74:7c:c5:c8:fc:ca:25:e3:84:9b:d0:27:a5:03:
4b:95:b9:3a:44:8b:91:13:ab:10:63:81:31:7c:30:
2e:c7:71:a9:3e:98:37:93:fc:17:b9:58:0f:6a:d1:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:20:73:38:72:2F:1D:82:73:EA:99:46:D5:82:64:D7:A3:E6:3B
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/hoEgczhyLx2Cc-qZRtWCZNej5js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6e:07:10:3f:7c:cc:70:ef:d9:82:44:b6:4d:20:6e:2a:ab:
27:42:0b:f6:84:38:67:57:de:bd:5d:9e:07:65:bc:5e:46:c0:
b4:c6:0e:ad:4c:7d:9d:eb:f5:3b:cf:0e:b7:73:fd:ad:3b:77:
49:4f:dd:61:3f:10:ff:35:47:bf:59:55:ab:3d:0a:57:c3:a1:
42:56:3d:c5:f2:da:3b:c5:c9:9b:4a:21:1d:6c:0c:f2:eb:1f:
61:4a:ce:70:6c:43:01:71:e0:95:56:7d:ef:0a:7f:fa:08:4b:
9d:b9:ec:45:5e:f8:60:2a:61:8d:80:46:e6:87:ea:86:cc:0a:
95:c0:b7:62:fa:1d:00:5a:80:11:cd:23:3a:44:5e:03:9a:e5:
17:b2:07:65:a2:26:00:23:81:e7:da:b9:10:84:6e:1e:40:bd:
2c:8c:7e:ba:71:ed:7e:a4:0e:97:10:16:30:64:46:0e:1b:18:
20:86:9c:76:da:14:d8:bf:67:a1:65:0f:24:aa:b3:14:ac:91:
04:72:5f:9e:85:b3:94:71:a9:a0:ad:0a:35:66:85:dd:82:00:
4c:8e:18:19:f8:c9:ae:48:e8:74:50:14:0e:40:c7:f1:e8:0b:
52:6f:c0:ee:2d:87:f6:e2:3b:d0:86:5f:61:bd:9f:bf:af:b3:
0b:e8:f5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:52:18 2024 by rpki-client on console-fra.rpki-client.org