Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/A8Wc3duBJtVhykztMgkourqup_4.roa
File: A8Wc3duBJtVhykztMgkourqup_4.roa (raw, json)
Hash identifier: 3vpC331zuOCowctHXD2TKDvtKwjar4jwcDzP7pnBhXo=
Subject key identifier: 03:C5:9C:DD:DB:81:26:D5:61:CA:4C:ED:32:09:28:BA:BA:AE:A7:FE
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018DB2FE8833BBE5AACA3BC30411F9925B0B
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/A8Wc3duBJtVhykztMgkourqup_4.roa
Signing time: Fri 16 Feb 2024 17:37:21 +0000
ROA not before: Fri 16 Feb 2024 17:37:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215645
IP address blocks: 93.190.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:fe:88:33:bb:e5:aa:ca:3b:c3:04:11:f9:92:5b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Feb 16 17:37:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03c59cdddb8126d561ca4ced320928babaaea7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ac:c2:9b:ed:cf:b7:6b:59:52:e2:63:62:5e:
5d:0a:6e:0d:60:d1:1e:e0:56:31:97:b4:a5:fc:d7:
6e:15:39:2a:b1:93:00:00:2b:d2:a0:85:0b:c4:03:
6a:42:c4:ff:c1:43:82:4b:ef:de:36:ea:ba:cf:34:
67:08:eb:4d:be:73:43:b1:b7:11:e7:44:59:33:7f:
9e:05:9f:44:10:56:1b:88:c3:3c:b0:12:cd:d9:89:
95:99:c0:43:ec:e8:2b:ca:36:b1:e6:79:76:44:62:
ab:03:8a:2b:21:b6:62:52:52:44:e9:38:e7:5e:4e:
b3:d8:91:5a:aa:13:7e:93:9a:d0:f3:cf:03:33:4c:
b2:21:06:87:ff:72:8e:4f:df:11:f6:33:40:53:65:
ed:0c:38:46:ce:98:71:b2:be:2d:94:29:17:aa:4c:
d3:03:36:96:46:d2:50:d7:84:53:b8:9f:2e:c7:20:
42:dd:ab:22:e7:5b:b2:e9:60:b6:a7:41:42:3d:3d:
ca:38:d0:bb:1a:24:da:74:df:e2:69:50:62:55:ae:
72:d9:19:6a:f1:2a:45:71:26:00:53:0e:bd:1a:3c:
db:3f:54:02:ab:61:2e:1e:21:ba:5c:84:55:ff:4f:
a1:bd:1e:69:d5:e8:8d:19:3d:49:ff:34:bb:9b:be:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:9C:DD:DB:81:26:D5:61:CA:4C:ED:32:09:28:BA:BA:AE:A7:FE
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/A8Wc3duBJtVhykztMgkourqup_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.8.0/24
Signature Algorithm: sha256WithRSAEncryption
84:51:a3:0b:41:fb:18:7f:88:c0:ec:e3:7c:57:b6:5e:ac:f2:
9e:ad:78:90:d3:ec:ce:b9:4a:fc:03:e9:0d:a6:49:00:96:a7:
64:7e:cf:f6:24:b1:77:7b:ee:11:ac:4b:79:81:13:56:57:6a:
31:04:31:08:25:40:3a:04:88:d8:d4:ac:cc:fb:26:ad:e8:0f:
67:7f:fc:2d:64:12:d6:c6:d2:18:b3:20:c2:02:76:de:7b:4b:
25:c0:4f:cc:eb:df:42:d2:42:24:75:25:f9:a1:53:6f:ca:d3:
f6:22:13:a9:4f:cb:2f:27:94:8f:f5:31:68:ee:d4:72:11:cf:
d6:28:20:1a:7b:a2:28:5d:27:52:2d:7d:cd:fc:d4:1f:db:1f:
c4:ee:63:07:a4:84:69:ba:2b:b5:73:e7:24:46:46:ae:68:8d:
37:8d:a1:d9:f3:d9:9f:0b:a5:3c:7e:a4:02:a8:25:3f:df:2e:
3e:99:69:90:67:cd:09:be:12:78:23:b6:0f:70:48:43:9f:9c:
06:8d:3d:0d:d1:5b:f1:fc:d8:22:6b:1f:3f:ec:b8:b5:2d:f4:
d1:a5:6a:e7:93:7c:53:3c:db:4c:ce:c6:28:45:c1:ab:03:22:
ca:a0:8e:3c:1b:22:75:1a:87:00:df:75:76:cf:49:35:cf:43:
ab:24:73:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:41:54 2024 by rpki-client on console-fra.rpki-client.org