Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/m4u8XU-Vl13AANN58ZMF85Un-7M.roa
File: m4u8XU-Vl13AANN58ZMF85Un-7M.roa (raw, json)
Hash identifier: jqTKiA7zk7gwZPOaInaTM3EGAWBKAabtb5TWJMLmBeU=
Subject key identifier: 9B:8B:BC:5D:4F:95:97:5D:C0:00:D3:79:F1:93:05:F3:95:27:FB:B3
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 019040F23AF41527D5F22F7D3B2B5BF1E4A0
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/m4u8XU-Vl13AANN58ZMF85Un-7M.roa
Signing time: Sat 22 Jun 2024 17:15:34 +0000
ROA not before: Sat 22 Jun 2024 17:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215655
IP address blocks: 194.60.228.0/24 maxlen: 24
194.60.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:f2:3a:f4:15:27:d5:f2:2f:7d:3b:2b:5b:f1:e4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jun 22 17:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b8bbc5d4f95975dc000d379f19305f39527fbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a1:a4:9c:39:e8:3c:cb:41:ec:48:bf:8b:d2:
32:86:12:5c:79:5e:5d:2f:a4:53:0d:8c:5f:93:67:
79:e5:5a:c1:23:b2:e0:b3:f3:d4:c3:14:e0:49:1a:
d9:99:72:e7:f8:31:8b:45:90:7f:c6:a8:be:20:be:
d5:63:f3:07:dd:00:d5:de:d9:07:a5:0d:d8:fa:15:
47:dd:b9:ba:9f:0a:7b:30:09:36:e0:bc:84:29:64:
64:ba:08:64:ed:f5:35:74:98:f3:d5:7f:a8:cf:19:
a7:28:85:5e:ae:95:3e:57:c2:25:32:d5:9a:2d:ef:
10:7f:02:38:d3:1e:1e:11:91:87:24:b9:4e:34:fb:
d2:0a:bc:c0:a6:db:c8:b3:4c:73:b9:99:dc:6d:65:
c2:d0:a5:e3:8a:a6:70:68:3d:50:4b:24:a9:60:d5:
80:4f:bd:78:70:0c:c9:aa:9f:25:c1:f6:e2:7b:72:
19:e6:49:92:30:41:26:8e:f0:8e:96:f2:eb:2e:5e:
45:90:9b:4e:ab:08:20:d3:26:dc:4a:97:4f:3c:65:
95:9c:d1:be:5f:00:28:ba:87:d4:33:cf:fa:2d:93:
15:27:bc:73:21:d4:58:1c:7d:68:1e:98:fb:04:a5:
cf:63:a8:55:12:ad:5c:a8:2f:89:65:5d:5f:0c:65:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8B:BC:5D:4F:95:97:5D:C0:00:D3:79:F1:93:05:F3:95:27:FB:B3
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/m4u8XU-Vl13AANN58ZMF85Un-7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.228.0/24
194.60.230.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3c:3e:77:15:d6:80:67:bc:b1:72:40:22:88:90:70:69:ff:
9b:76:f3:03:44:95:33:5b:d7:09:fa:de:07:aa:48:47:5c:cd:
66:74:0d:79:49:1d:01:1e:18:29:ee:9e:75:28:2c:8d:5d:e4:
6d:06:d9:b8:b4:26:8b:d7:05:96:91:a6:91:55:08:97:66:76:
ba:23:2a:0c:28:ae:25:5c:24:13:45:8f:8a:fd:67:f0:c4:6b:
52:a5:a5:6a:a6:2f:80:d2:48:37:25:89:30:a1:f3:88:59:d3:
27:36:db:80:ac:47:64:70:c2:01:9a:99:88:b3:15:20:13:eb:
41:fb:e7:ee:ba:e9:73:93:9f:72:03:03:cc:1c:45:1c:a4:ed:
10:b6:b0:84:a7:d5:95:68:69:c8:ab:f5:06:d1:cb:6e:04:03:
d5:27:31:80:2f:69:7f:d2:db:3e:c2:e4:cf:6d:90:b3:10:6c:
e0:4f:13:b5:9f:7a:1d:80:74:29:47:c9:3a:17:5a:d6:02:a1:
40:e3:18:38:d6:0d:11:79:93:51:25:93:b1:d6:09:9c:3f:31:
2d:a8:88:ca:da:7a:e0:6e:09:7c:d0:d3:74:95:df:9d:5f:71:
06:60:87:98:77:b0:df:50:32:65:2b:21:11:9f:2f:e0:48:f0:
fa:52:b8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:24 2024 by rpki-client on console-fra.rpki-client.org