Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/A7JDJepx2uGm64Y3mxLHLibJ25w.roa
File: A7JDJepx2uGm64Y3mxLHLibJ25w.roa (raw, json)
Hash identifier: K0z+t4+KkAJ814aDkSAlgs1fWxkTnvo7Eg3ez+FkNcM=
Subject key identifier: 03:B2:43:25:EA:71:DA:E1:A6:EB:86:37:9B:12:C7:2E:26:C9:DB:9C
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 018CC56E68FF2DA77CED346D7E3BCCDC096B
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/A7JDJepx2uGm64Y3mxLHLibJ25w.roa
Signing time: Mon 01 Jan 2024 14:29:56 +0000
ROA not before: Mon 01 Jan 2024 14:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24961
IP address blocks: 194.9.182.0/23 maxlen: 23
193.193.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:68:ff:2d:a7:7c:ed:34:6d:7e:3b:cc:dc:09:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Jan 1 14:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03b24325ea71dae1a6eb86379b12c72e26c9db9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:b1:12:bd:19:e9:75:d9:82:b0:72:1b:02:
e1:53:e6:f6:44:d4:f3:f5:ee:f5:da:d0:45:31:bc:
81:a6:6f:2e:6f:95:a9:4b:58:63:3a:15:ed:61:ac:
26:6b:51:b1:04:e3:1e:18:1a:9b:5e:ad:69:25:b2:
69:0a:f8:85:8c:a2:bb:1e:57:47:62:41:95:14:0f:
96:01:62:da:b5:14:69:44:27:58:ce:cb:17:71:84:
2c:17:8c:95:fb:78:09:18:3a:ba:3e:84:f1:0d:5d:
2e:d1:15:46:db:ad:5c:8f:d9:27:48:20:a6:bb:86:
fa:3e:bf:88:d9:19:94:53:1a:a9:b2:d7:92:62:97:
02:14:56:7a:d2:9b:b3:14:91:91:76:88:5b:03:ef:
bf:a0:60:0d:95:87:ca:48:f7:66:e2:6f:d6:14:84:
b9:e9:f9:b4:9e:c0:8d:7b:73:46:e8:95:ed:44:47:
a0:a4:63:5d:54:85:df:27:45:7a:b3:e4:0e:fa:d1:
78:69:1c:56:40:57:7e:62:24:0c:a1:30:37:d3:2a:
0d:67:c0:22:73:ec:04:09:70:74:64:c9:82:40:60:
82:92:22:99:b6:c0:72:ff:f1:56:be:46:8d:de:ce:
83:28:34:b2:e1:3a:a5:0a:48:d0:02:99:16:d4:55:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B2:43:25:EA:71:DA:E1:A6:EB:86:37:9B:12:C7:2E:26:C9:DB:9C
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/A7JDJepx2uGm64Y3mxLHLibJ25w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.190.0/23
194.9.182.0/23
Signature Algorithm: sha256WithRSAEncryption
75:3b:0d:94:93:33:91:52:5c:08:e3:e9:fe:22:66:96:f3:dc:
0e:80:13:52:f8:25:09:3f:0a:4c:d4:af:26:8d:35:69:fe:5e:
bd:d0:46:55:04:60:57:1b:f6:6d:92:6f:fc:45:95:63:e4:6b:
c8:f4:d6:7d:74:59:6f:ea:a7:df:f4:24:8a:21:04:80:a7:85:
8e:e3:2c:1a:24:b9:91:26:bd:04:d7:4a:93:b7:1c:93:d2:36:
1c:c5:68:c7:21:b9:bd:78:5a:b6:47:91:64:e4:73:64:df:f4:
ac:22:74:65:e3:83:c0:d9:76:87:7e:2f:9f:83:20:91:78:a6:
91:aa:ce:99:0c:f2:35:8e:b8:bf:ca:61:7c:37:4d:fd:fc:1a:
b3:01:7b:ec:7c:84:6f:3e:72:67:3c:39:c2:68:69:03:0d:93:
83:4d:f3:81:f6:6e:ed:25:4f:f5:7c:48:19:52:e3:c3:94:f4:
fc:34:7a:a7:ca:34:12:67:fe:54:c4:bb:bc:b4:ed:25:a7:ca:
a9:78:a1:38:32:44:75:65:0a:98:57:d8:70:83:05:df:42:a9:
bf:56:09:52:76:9a:38:a3:87:4f:f8:6f:ba:4c:02:ec:7c:1a:
6b:21:54:ff:eb:1a:9c:3e:ae:a6:bf:db:5b:83:77:59:0a:91:
54:91:f7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:23 2024 by rpki-client on console-fra.rpki-client.org