Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/_L1qmmmsTn7EyFFSDv1jn8xqAd8.roa
File: _L1qmmmsTn7EyFFSDv1jn8xqAd8.roa (raw, json)
Hash identifier: ZK/M1+msBweFUs+xmlzstKJU8Gb/cQws241nmxt+aAc=
Subject key identifier: FC:BD:6A:9A:69:AC:4E:7E:C4:C8:51:52:0E:FD:63:9F:CC:6A:01:DF
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 0192DCE793F9DF6F74F211F96932E68B804E
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/_L1qmmmsTn7EyFFSDv1jn8xqAd8.roa
Signing time: Wed 30 Oct 2024 10:10:17 +0000
ROA not before: Wed 30 Oct 2024 10:10:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205231
IP address blocks: 193.201.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:e7:93:f9:df:6f:74:f2:11:f9:69:32:e6:8b:80:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Oct 30 10:10:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcbd6a9a69ac4e7ec4c851520efd639fcc6a01df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:7c:c0:d4:72:d9:83:20:7a:6e:44:b9:0b:
87:03:4a:30:3e:7f:7b:fb:ee:74:af:4d:34:7a:7b:
f4:53:a9:44:29:03:52:fe:02:7b:6e:d5:7b:e8:6f:
cd:90:9e:88:ff:f8:67:14:d3:0a:78:fc:67:4a:31:
ee:6f:ad:8a:21:43:60:e0:48:8f:32:a4:80:f7:69:
1b:c5:ad:7f:95:41:60:df:04:92:2a:da:72:cd:43:
b1:31:ee:54:0d:ce:25:a9:e0:b7:c8:4c:ac:d9:fe:
67:8c:6d:c5:ee:39:aa:23:7b:82:7f:06:f4:da:f7:
cc:9d:47:cb:7e:4d:47:38:a6:8d:c8:bd:1a:73:08:
cf:3e:3f:97:78:09:c4:f0:4c:70:87:1b:e9:12:3e:
d5:e8:80:3f:b1:d2:ea:1e:1c:98:8e:70:0e:f2:1c:
4d:bb:0c:70:aa:46:f4:01:8d:03:46:0a:51:66:2e:
73:42:5b:2f:4c:d1:7e:d1:49:d4:14:2f:36:ef:e4:
b4:56:45:76:d8:d7:82:17:28:f0:5f:bc:52:3e:8b:
91:14:87:f3:53:eb:e7:c8:5a:ee:d2:3a:af:d2:96:
df:b2:3a:5b:bc:ed:ca:9b:ee:7a:62:d6:62:3b:94:
60:a0:5a:3c:83:64:76:f2:05:cd:82:58:f7:9d:2b:
42:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BD:6A:9A:69:AC:4E:7E:C4:C8:51:52:0E:FD:63:9F:CC:6A:01:DF
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/_L1qmmmsTn7EyFFSDv1jn8xqAd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.11.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3c:c5:f6:2c:29:cf:f3:fe:f1:10:af:17:9b:bd:9f:fb:f3:
93:09:0a:a1:2e:5f:76:95:ce:3c:29:06:bf:8b:01:d3:f8:06:
9a:15:7a:73:19:60:2c:98:96:08:e9:7d:d4:51:8c:96:a8:90:
3c:b1:2d:f5:da:ef:c4:30:c2:1c:6c:f5:5c:6b:ac:eb:2c:6d:
f6:81:a4:8f:de:ed:7e:aa:f0:69:aa:ed:55:d1:b3:03:8c:5c:
87:24:3e:0a:c1:3f:d3:d7:fa:bd:06:19:03:cb:9e:8e:8a:da:
46:66:6f:71:6b:cf:83:89:97:90:47:be:f8:36:75:ee:55:4a:
85:4b:59:20:96:c5:dc:86:cc:bf:1c:60:2c:89:f4:64:2f:15:
d4:ef:56:cc:23:0d:36:ab:a5:ba:ee:9d:36:0b:b7:bc:af:b5:
ae:1c:be:90:1c:e6:83:bb:e7:47:b1:48:bc:85:ab:8f:d6:4b:
ff:52:2b:d3:5e:b6:f6:cf:d7:c1:7a:c3:86:9b:05:a2:a9:d1:
26:c7:96:fd:a7:a2:de:90:b6:e5:27:76:6b:79:43:15:48:4b:
1b:1a:86:c2:fb:f5:46:21:9c:ad:d1:ff:24:3b:e1:94:cc:65:
db:7e:0e:0a:f9:07:de:e5:8a:5e:f8:7b:fd:f9:5c:00:f4:8d:
57:9b:f4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:42:47 2024 by rpki-client on console-fra.rpki-client.org