Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/mewo7fpS-iQowUf4fy4nephHveY.roa
File: mewo7fpS-iQowUf4fy4nephHveY.roa (raw, json)
Hash identifier: gCBSBdf/Ylb+8XaJoJPR9kIEaUr1NyRYHMVycaaQ2pY=
Subject key identifier: 99:EC:28:ED:FA:52:FA:24:28:C1:47:F8:7F:2E:27:7A:98:47:BD:E6
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 018D698983A41C1054EA1FC5E068321B53F6
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/mewo7fpS-iQowUf4fy4nephHveY.roa
Signing time: Fri 02 Feb 2024 11:17:16 +0000
ROA not before: Fri 02 Feb 2024 11:17:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9145
IP address blocks: 193.30.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:89:83:a4:1c:10:54:ea:1f:c5:e0:68:32:1b:53:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Feb 2 11:17:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ec28edfa52fa2428c147f87f2e277a9847bde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:76:fa:eb:a2:58:c6:ee:b4:64:53:98:c0:
b4:bb:b8:f2:61:9e:58:ad:e6:7c:f5:9e:df:5e:c9:
fc:8b:3b:64:3f:07:c1:fd:24:60:04:89:83:94:15:
05:11:b4:6f:27:31:62:45:e1:d0:43:05:04:3c:6e:
50:ea:80:07:35:03:e6:30:24:5a:60:ee:77:43:04:
d2:06:31:8e:26:e8:48:40:99:a8:7f:78:56:17:ba:
78:89:ec:c7:51:6a:2d:29:0f:44:80:52:df:69:d8:
1e:ec:1c:c1:8d:58:a6:fb:6f:b4:8b:5d:19:f4:4b:
78:53:6a:32:21:66:11:55:68:18:32:1e:13:93:90:
cd:d9:6e:a1:87:9a:96:48:c9:24:ca:4a:28:00:5d:
d8:e1:08:ba:11:ef:f0:49:f5:42:99:31:ac:bd:18:
87:b0:31:39:38:9a:b0:50:67:fc:86:5b:80:2a:af:
02:6b:76:f9:49:bf:aa:88:69:88:a2:52:c0:ec:83:
5e:51:3e:9c:3b:77:66:e7:28:2a:1f:ad:ba:1b:82:
5e:82:b1:69:56:83:b2:6b:66:51:7a:e9:02:80:fc:
4a:49:cb:c1:12:a3:a8:76:b7:76:47:91:64:a9:df:
e0:60:b2:bc:96:a2:cd:f7:b1:7c:e2:6e:08:1d:b0:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EC:28:ED:FA:52:FA:24:28:C1:47:F8:7F:2E:27:7A:98:47:BD:E6
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/mewo7fpS-iQowUf4fy4nephHveY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.67.0/24
Signature Algorithm: sha256WithRSAEncryption
84:56:d1:79:24:f9:f3:c3:f8:84:d1:9b:3f:ee:ee:f9:90:03:
4c:3f:78:b3:3d:5e:2b:97:ea:39:0b:7d:0a:e4:17:9e:66:35:
c3:9d:9d:62:b8:31:5f:a8:62:4b:b0:c4:2d:a0:b8:40:21:f9:
63:da:2a:92:44:68:71:f8:9a:36:89:d2:e6:55:61:88:3f:3f:
0c:e5:60:f5:19:0c:b0:68:d1:43:20:45:24:42:69:68:fe:db:
9d:95:3a:ee:27:ec:cd:43:80:e7:95:ef:6a:9d:0f:d3:8e:e0:
fe:0a:29:3e:f3:84:e7:c1:cc:95:40:cf:4c:19:69:69:bf:ce:
a4:2c:0c:50:47:48:10:4d:23:0e:0a:34:a4:fd:f8:4d:b1:e3:
ec:59:9d:e5:be:6a:b5:4f:6a:b0:39:06:ed:38:e9:2a:d4:5e:
6d:b1:48:21:54:0c:ae:08:b8:f5:7a:bb:4d:68:e6:0e:3c:44:
46:c6:24:c4:7c:a3:6a:f2:db:67:6f:db:7a:26:7a:e4:4f:a0:
b9:9e:31:79:77:e6:b7:60:e5:76:ca:00:69:60:34:ea:b9:6b:
45:d3:ef:87:7a:bb:14:96:34:05:f1:f9:c5:ec:37:1c:9e:c5:
ab:f7:68:fd:7e:c1:15:3c:35:a6:08:8a:be:e1:76:cc:c2:07:
08:3e:6b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:13:21 2024 by rpki-client on console-ams.rpki-client.org