Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/RXbUtLpCxRi4oJ1zzHYpr6LADf8.roa
File: RXbUtLpCxRi4oJ1zzHYpr6LADf8.roa (raw, json)
Hash identifier: Elr+0I+QysQi1URCHVbD/OTm8/AG5akb3LUFRA6wW3g=
Subject key identifier: 45:76:D4:B4:BA:42:C5:18:B8:A0:9D:73:CC:76:29:AF:A2:C0:0D:FF
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0191AE4C5119A8983284F5D4850B97D1EE50
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/RXbUtLpCxRi4oJ1zzHYpr6LADf8.roa
Signing time: Sun 01 Sep 2024 15:55:22 +0000
ROA not before: Sun 01 Sep 2024 15:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211567
IP address blocks: 193.111.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ae:4c:51:19:a8:98:32:84:f5:d4:85:0b:97:d1:ee:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Sep 1 15:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4576d4b4ba42c518b8a09d73cc7629afa2c00dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:72:50:1c:f2:a2:f3:f8:90:80:fe:3e:7d:
c2:54:87:59:8f:8f:a1:8b:71:ac:ea:86:ea:19:e6:
4e:3d:16:1e:c2:67:98:31:32:f2:57:e2:24:e7:ff:
50:de:22:0a:bd:80:d5:49:c8:de:9f:1c:3e:eb:f1:
4a:22:d0:79:83:10:64:7d:2c:0d:fd:f0:f5:df:48:
fc:9a:29:f8:ee:17:cf:df:c4:02:71:25:13:00:b5:
46:61:20:8b:94:21:2e:aa:67:86:df:9e:e3:e1:00:
1e:0a:93:d9:eb:a1:47:dd:00:4d:e3:f7:5f:94:7c:
ce:55:4c:dc:c6:40:f0:88:b7:c1:34:b6:0f:42:2f:
51:97:6e:2b:57:40:9d:14:21:5d:48:17:fa:be:6a:
12:5e:98:a9:94:bc:2c:2c:7f:c3:61:48:01:f3:9a:
60:92:c7:0e:8c:fc:3e:77:99:fb:07:85:bc:40:57:
d5:86:51:a1:49:b2:8e:d3:32:66:1e:2b:e3:49:1d:
5d:b7:26:3d:ff:49:e2:0f:b0:44:9a:58:73:76:bf:
f8:5f:1f:fa:c4:60:5e:46:11:04:82:2b:11:2a:d9:
b7:34:df:db:70:cf:f3:4d:6d:ad:bd:2e:31:a7:64:
f3:6e:76:e8:c8:fe:7a:f2:50:6d:ec:74:34:87:27:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:76:D4:B4:BA:42:C5:18:B8:A0:9D:73:CC:76:29:AF:A2:C0:0D:FF
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/RXbUtLpCxRi4oJ1zzHYpr6LADf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.79.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:c5:74:dd:08:85:42:41:ef:35:df:2f:2a:e7:fc:35:f9:d4:
6a:2d:b1:6a:90:2a:51:51:8b:31:ee:fe:ad:8c:c2:89:e8:80:
8e:de:cc:3e:f1:fd:c3:26:a8:21:f5:d2:d6:0d:8d:dd:97:7e:
fc:7f:fe:07:db:38:ac:f8:87:35:ae:50:4d:80:b8:b4:88:5c:
cf:bf:a5:b4:95:d2:53:46:3d:95:3f:ce:74:43:b7:4b:42:f8:
8e:35:33:66:ac:ad:0c:dc:65:57:2a:83:e6:e0:ac:cd:d4:18:
16:5f:9d:f8:73:aa:c0:f8:ad:75:7b:69:fc:58:e0:5a:62:21:
5a:0f:b0:bd:54:1f:4d:fd:15:29:29:7e:2f:d3:ec:04:d8:67:
a5:c2:b1:1f:7d:8f:30:4f:ec:d1:85:47:35:b7:94:7c:45:fa:
3e:b9:8f:9b:e1:c8:07:3c:b9:fb:dc:45:23:c9:c2:5f:08:27:
4d:aa:23:12:c1:33:9f:c0:cb:64:4a:d0:d5:46:33:22:db:98:
79:b2:4e:60:36:8a:6a:7a:53:29:25:73:b5:4f:ca:f7:cf:ef:
68:68:cb:6e:35:f4:f5:18:15:a1:6e:8d:6a:85:f8:75:da:43:
b4:18:78:b2:3c:76:77:34:ea:1b:eb:6a:c4:83:b6:72:fc:63:
2b:6c:10:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:41:54 2024 by rpki-client on console-fra.rpki-client.org