Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/k0ejwbsxRVYrHAPhBTtK-CZ6SNI.roa
File: k0ejwbsxRVYrHAPhBTtK-CZ6SNI.roa (raw, json)
Hash identifier: sxvMk8uhGqdhyp/0/lP6JhAxBjiUCSOmdMLouEIxXKA=
Subject key identifier: 93:47:A3:C1:BB:31:45:56:2B:1C:03:E1:05:3B:4A:F8:26:7A:48:D2
Certificate issuer: /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Certificate serial: 018CC42508453588A5FAD0D7776E6D17C387
Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/k0ejwbsxRVYrHAPhBTtK-CZ6SNI.roa
Signing time: Mon 01 Jan 2024 08:30:10 +0000
ROA not before: Mon 01 Jan 2024 08:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211304
IP address blocks: 193.84.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:08:45:35:88:a5:fa:d0:d7:77:6e:6d:17:c3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Validity
Not Before: Jan 1 08:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9347a3c1bb3145562b1c03e1053b4af8267a48d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:57:cf:2e:be:d9:a2:4e:30:3d:2b:37:12:66:
e3:e9:b4:cf:d6:9f:74:c8:9d:79:50:35:e8:d6:50:
5d:ed:42:ee:ec:d7:fd:d5:f1:98:f6:a0:dd:64:38:
1c:77:3e:54:fd:0a:f7:54:2b:68:b9:e3:46:0a:73:
c2:1b:07:94:38:c7:9b:fd:8e:27:23:9d:bc:d9:f2:
30:a1:61:35:0e:ea:30:ba:04:9f:6c:33:20:83:a4:
dd:d1:57:4a:c8:28:67:b0:0d:26:a2:b4:ab:5a:e2:
d8:7b:7d:76:16:a6:53:2e:b5:ad:3d:6c:7e:47:60:
31:ae:18:ee:02:66:95:53:be:1d:03:c5:ef:6c:29:
7b:62:83:6d:a7:31:dc:56:22:3a:6c:cd:1b:be:4c:
95:5b:ac:f5:2a:2b:24:5c:1d:d6:3b:e1:2e:af:48:
59:0e:87:d5:b8:3d:3f:e6:9b:47:6c:89:01:9b:cc:
81:ae:1a:5d:dc:d2:ed:dc:58:f1:e9:05:03:a6:15:
48:5d:d2:94:06:d6:f2:c8:38:22:40:29:34:de:34:
c4:f5:e1:72:be:5f:5a:fe:c0:05:25:1e:0f:cd:10:
20:7a:15:4e:3e:28:80:33:c7:18:27:e0:2d:5f:25:
a8:9d:fd:42:2f:5e:a1:7b:05:32:9a:78:bc:72:6b:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:47:A3:C1:BB:31:45:56:2B:1C:03:E1:05:3B:4A:F8:26:7A:48:D2
X509v3 Authority Key Identifier:
keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/k0ejwbsxRVYrHAPhBTtK-CZ6SNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:d8:4c:50:06:da:9f:42:a9:93:ac:f6:7a:cc:9b:0b:a2:2b:
0a:f9:57:46:6d:2c:1d:64:08:74:5f:53:f8:36:43:b8:0e:19:
ba:11:c9:fd:7e:88:81:41:11:71:a0:9b:24:bd:50:84:ef:65:
38:a9:4a:9c:24:79:37:b7:19:40:bc:d8:c0:58:e5:75:07:f5:
cd:e5:45:55:c9:b9:4a:5a:34:c5:55:e7:d0:ad:6c:ac:94:31:
1e:36:07:12:55:79:3b:a2:4d:87:5e:74:3d:84:81:2d:c3:34:
72:c3:4b:2f:d0:56:39:60:93:61:0b:ff:c2:19:ea:4e:d0:d3:
fb:97:bd:5a:8d:5f:1e:de:d5:a5:7e:a2:41:5a:b3:92:63:90:
99:10:13:b7:c0:41:ce:e0:91:92:f9:c0:59:cd:6f:d8:70:3e:
21:37:00:20:13:37:8e:40:c2:21:0f:67:c3:a1:8e:ac:1d:ad:
57:98:86:ff:f7:09:8f:de:e3:fa:a7:3c:43:d1:52:97:27:f8:
31:5c:2a:d8:36:67:a2:d3:d8:07:43:55:78:01:e9:11:ee:ed:
46:12:e8:3e:7c:db:3b:d9:16:77:05:1c:c6:c0:0c:5f:f8:e6:
b2:21:60:9f:c5:ec:9f:75:d7:66:20:2e:db:7b:f5:33:df:46:
67:00:8f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:06 2024 by rpki-client on console-fra.rpki-client.org