Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/o1jgbAFismXY3VPAgrDieU-wwSE.roa
File: o1jgbAFismXY3VPAgrDieU-wwSE.roa (raw, json)
Hash identifier: WYZaAat6UBV179+8m/F18drS+QVBRUTRa9Dk7xAat2A=
Subject key identifier: A3:58:E0:6C:01:62:B2:65:D8:DD:53:C0:82:B0:E2:79:4F:B0:C1:21
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0191AE4A7CC539CCF552E07F3EF67677C0D7
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/o1jgbAFismXY3VPAgrDieU-wwSE.roa
Signing time: Sun 01 Sep 2024 15:53:22 +0000
ROA not before: Sun 01 Sep 2024 15:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213107
IP address blocks: 193.111.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ae:4a:7c:c5:39:cc:f5:52:e0:7f:3e:f6:76:77:c0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Sep 1 15:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a358e06c0162b265d8dd53c082b0e2794fb0c121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:43:4e:7a:3d:ed:ce:f8:35:b1:2c:0f:dd:c8:
bc:b7:c7:00:15:67:0c:4a:7f:a9:8d:76:56:05:c9:
e6:9a:7a:23:cd:02:e4:b3:a4:7a:18:d0:c8:f9:44:
12:61:96:29:50:ce:cb:dc:20:bd:1a:c5:75:8c:7f:
02:d7:9f:d0:96:7d:e0:1e:70:7f:48:d7:a3:a5:82:
95:0c:38:15:23:d6:b0:57:4b:fa:64:c9:be:5a:ff:
a6:50:99:07:7b:79:99:70:fc:01:e7:46:22:31:7e:
d8:3a:ae:ad:10:9c:ff:ca:77:ea:ff:bc:64:08:d8:
7f:a7:75:0c:b8:cd:ef:80:df:c4:ee:03:ab:fd:ef:
2f:95:28:04:ac:0c:27:0a:0e:e3:cf:ad:82:1e:75:
77:4a:31:c6:27:5b:9b:dc:3f:9d:67:45:2a:59:b5:
d3:3e:1b:91:12:39:84:9c:db:d1:cf:1c:b7:3f:6c:
16:23:e0:9a:51:84:29:b5:69:13:38:f6:b2:a6:ac:
26:1b:ce:af:a5:bc:1c:1d:be:ea:57:79:b9:40:35:
e5:7d:0b:24:a5:f6:5f:22:52:4e:06:ce:9d:57:d8:
b7:1b:0b:06:ff:f6:6e:fe:02:e8:34:ce:38:2f:c8:
0b:6e:35:b5:08:17:f0:df:bf:cc:0a:2f:2e:c9:83:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:58:E0:6C:01:62:B2:65:D8:DD:53:C0:82:B0:E2:79:4F:B0:C1:21
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/o1jgbAFismXY3VPAgrDieU-wwSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.79.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a9:da:bd:52:10:00:d0:d4:29:72:02:c8:62:e1:db:f4:45:
6c:b9:72:af:fe:42:33:ae:76:68:cf:6e:37:e4:91:0b:33:78:
3e:e5:bc:16:4b:08:4c:7e:09:6f:1d:6c:aa:ad:a1:76:7d:80:
d4:cb:a9:4a:fc:fd:4f:18:f6:60:32:ed:87:ff:29:05:89:5d:
3e:a4:f8:96:5e:02:47:88:0f:e0:b9:f9:7c:88:81:3b:4c:98:
a2:5a:25:40:d7:9a:ed:5c:6f:16:8b:92:82:1d:ff:1f:ff:d1:
58:70:a2:11:e9:b7:c5:2a:d5:b5:f6:96:6b:a7:34:00:59:79:
28:da:a1:bb:18:ee:02:fa:12:75:1a:4d:66:9d:57:35:a0:21:
ee:d7:49:0a:c0:9c:70:22:16:9f:d2:24:c9:3e:3e:9b:d8:a5:
9d:d8:ca:8f:30:8c:7f:d1:e7:85:14:d3:df:f6:1f:57:73:61:
5c:d8:26:30:c5:b0:42:0a:7a:7f:63:56:68:a7:79:01:89:bc:
e0:76:a7:e5:1a:ad:6a:d8:2d:2c:cf:58:d2:70:dc:16:ed:4c:
a9:bb:d0:57:00:8a:a0:f3:4c:41:1a:15:bd:04:80:77:ba:15:
2a:a1:36:dc:c3:36:40:86:5b:80:a5:8d:47:3a:0b:30:17:4f:
56:c8:cd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:23:29 2024 by rpki-client on console-fra.rpki-client.org