Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/dOMZNdxNNljkMddxnwds2Sb8rcQ.roa
File: dOMZNdxNNljkMddxnwds2Sb8rcQ.roa (raw, json)
Hash identifier: GZA5YT4Rdnx8xkwCaHC7SM3XvDhZOKLzCL6fMsoEfy4=
Subject key identifier: 74:E3:19:35:DC:4D:36:58:E4:31:D7:71:9F:07:6C:D9:26:FC:AD:C4
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 01909E29708F4754E0A93AABF5065294C634
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/dOMZNdxNNljkMddxnwds2Sb8rcQ.roa
Signing time: Wed 10 Jul 2024 19:40:34 +0000
ROA not before: Wed 10 Jul 2024 19:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 193.135.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9e:29:70:8f:47:54:e0:a9:3a:ab:f5:06:52:94:c6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Jul 10 19:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74e31935dc4d3658e431d7719f076cd926fcadc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:90:d2:af:12:55:24:5c:dc:67:dc:42:d8:
46:8c:5b:b1:04:75:e2:45:d7:d5:60:4b:b5:b8:93:
bc:be:e0:b2:ec:87:26:5f:40:4c:81:9b:f9:8e:24:
e1:ef:95:aa:d0:c1:e8:24:86:88:bf:64:f9:16:d3:
05:28:0c:3e:26:d0:bd:5c:74:f9:32:89:81:e4:61:
f9:d3:1f:55:23:ef:3a:6a:ad:93:9d:f2:d0:d7:dc:
d4:a5:79:2e:73:d4:bb:4c:6c:ba:4f:fd:02:de:c6:
33:27:3e:6c:b4:65:94:3c:5e:bc:ff:91:0a:a7:fc:
3e:d0:06:ad:d0:1d:b9:b4:6c:3d:d2:96:e4:61:8c:
30:bd:e1:49:ef:c4:7e:91:c4:d2:bf:80:90:57:87:
72:25:ef:d8:65:16:eb:ab:48:f3:08:72:14:fe:42:
10:6c:55:83:b8:67:cf:66:d4:98:61:f0:65:a5:80:
60:42:b0:43:73:30:ff:b9:4e:61:72:1d:9f:b0:6a:
8d:3f:17:b3:b9:b7:fc:58:dc:d0:6f:2f:2c:57:f0:
76:03:92:7a:4e:70:81:03:59:51:80:f9:3e:8e:78:
05:d6:4e:76:7c:22:9d:f5:e8:dc:57:5a:7c:fb:6b:
41:68:40:5a:d9:92:2a:3b:97:39:5a:3e:fc:ca:9a:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E3:19:35:DC:4D:36:58:E4:31:D7:71:9F:07:6C:D9:26:FC:AD:C4
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/dOMZNdxNNljkMddxnwds2Sb8rcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.40.0/21
Signature Algorithm: sha256WithRSAEncryption
60:25:5b:67:52:1f:95:27:6c:ef:80:84:b7:bd:2f:2d:4c:38:
86:6b:5a:b0:08:9b:50:4a:5e:19:19:f5:21:44:af:6f:ac:f5:
d3:d8:5d:ab:1c:7c:c4:dd:24:eb:d6:46:61:65:68:a0:ab:61:
3e:93:ea:5f:59:4b:49:4e:66:9d:30:b6:66:92:42:34:be:ae:
31:f5:5b:3e:01:94:fd:65:2c:f7:f5:f0:17:61:21:e9:ef:af:
14:47:c4:7c:b2:b2:98:f7:40:3f:e7:95:4b:40:68:fb:03:36:
7b:9b:0b:5c:11:03:d1:6f:fd:b6:52:0b:2e:a1:8b:3a:78:1a:
d2:97:d0:e9:3e:97:41:69:00:b4:e8:be:0c:ca:7d:9e:65:71:
a0:67:06:71:22:ce:47:1a:5c:41:0d:2a:d1:05:4d:25:cd:48:
87:b2:c6:fb:a6:be:00:22:a7:68:73:a3:1d:d7:c2:11:a4:44:
ae:fd:f0:02:4c:3c:24:64:13:63:77:f3:8e:4b:81:bb:6e:c4:
c3:a6:42:20:a9:a7:65:b4:b5:72:a4:6d:30:b7:5f:f6:7d:92:
3c:c3:6d:df:23:5e:73:52:82:ff:c9:38:68:fe:5c:6d:91:cf:
ba:88:d7:57:ad:50:fa:dd:3a:25:61:df:b4:0d:14:f5:a3:fb:
a7:20:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:38:08 2024 by rpki-client on console-fra.rpki-client.org