Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/fBepe3eeK-8PKmvqiv1b-dyLJT8.roa
File: fBepe3eeK-8PKmvqiv1b-dyLJT8.roa (raw, json)
Hash identifier: nfv8rfVU37/nhmGQ7kFChB8QQoMvD8iNdo3PvcSWLsE=
Subject key identifier: 7C:17:A9:7B:77:9E:2B:EF:0F:2A:6B:EA:8A:FD:5B:F9:DC:8B:25:3F
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 018CC425212AF8A149414E1DBE671C3CE099
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/fBepe3eeK-8PKmvqiv1b-dyLJT8.roa
Signing time: Mon 01 Jan 2024 08:30:16 +0000
ROA not before: Mon 01 Jan 2024 08:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35758
IP address blocks: 193.169.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:21:2a:f8:a1:49:41:4e:1d:be:67:1c:3c:e0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Jan 1 08:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c17a97b779e2bef0f2a6bea8afd5bf9dc8b253f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:42:f9:3c:00:4f:53:c6:75:c2:f7:18:82:
1d:09:80:76:c6:6b:9f:6c:d3:74:20:b7:ba:d8:b8:
28:64:45:4f:64:e9:0e:44:ea:bb:81:bc:ec:07:3d:
52:25:13:73:4a:13:04:9b:fd:c3:25:f4:15:61:70:
ff:c0:2a:69:cb:40:2e:da:26:53:7d:b4:f7:22:21:
ec:10:67:55:47:d3:d4:ea:10:6b:65:d6:1f:d5:83:
96:62:7f:b1:8d:dc:ca:c4:74:ae:32:b0:ce:36:48:
a4:29:27:d3:42:1a:5b:a1:05:82:af:39:e4:68:f6:
d3:0f:00:e7:00:0d:ad:45:0e:58:cd:9e:6b:32:1a:
d4:ca:bc:4a:8e:ff:c2:15:c1:29:ed:bc:2d:22:4d:
c7:17:d6:69:be:96:5e:58:07:22:54:2e:74:24:46:
9c:b1:8e:f9:a9:8b:43:e8:db:ac:c2:ed:8c:5f:5b:
c8:e3:07:ed:11:08:8a:63:31:12:bf:b4:1e:82:6f:
e0:e7:9b:ae:3a:7a:1f:8f:8d:13:77:c1:5f:f6:e5:
b8:2a:7a:d3:dc:5f:79:af:35:43:5a:b9:bb:49:29:
3e:70:7e:41:97:8a:9d:79:dc:9d:7a:19:a8:86:57:
50:cd:16:79:e1:1f:4d:f1:54:22:df:39:bc:73:0b:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:17:A9:7B:77:9E:2B:EF:0F:2A:6B:EA:8A:FD:5B:F9:DC:8B:25:3F
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/fBepe3eeK-8PKmvqiv1b-dyLJT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.229.0/24
Signature Algorithm: sha256WithRSAEncryption
77:8d:22:b0:02:a6:c4:41:2b:8b:bd:7e:e7:ee:06:84:74:77:
c8:fc:09:ae:0c:02:ae:32:dc:63:c8:d7:51:5a:9f:52:31:b1:
b8:45:67:67:43:a0:5c:aa:16:28:da:77:2a:28:c0:53:4b:d7:
ac:c4:42:29:35:a1:3a:a3:6a:31:88:f6:64:f6:62:7b:95:52:
e2:dc:fa:38:24:7d:68:66:a8:b3:b1:e1:fa:6f:b5:bb:44:c2:
b5:d8:1d:e6:0c:2e:db:b0:ed:76:c9:d7:81:4d:09:fa:83:c4:
66:45:72:e3:22:20:45:6c:fe:04:ab:37:14:c9:4a:2e:fb:56:
89:63:f5:2f:c7:d1:8a:38:8a:e6:2a:ad:66:d2:b3:8e:86:92:
c7:f6:88:fc:56:c7:28:ab:eb:ff:bc:f8:2f:ea:6e:9b:3c:77:
cb:17:e9:be:a1:80:71:0c:b4:b5:eb:6a:bf:0d:94:c5:09:ed:
4a:89:52:de:92:f8:2e:de:d6:2c:47:e4:f3:f4:3c:f7:9d:1a:
12:1b:4a:64:a7:01:33:21:9c:1f:34:78:b8:b1:13:b8:6e:24:
31:b1:ca:00:eb:4b:9d:33:42:0f:45:c6:85:f5:c9:fc:52:c0:
20:f2:7c:c6:9c:6f:01:9c:1d:93:da:df:db:18:6d:02:93:ae:
56:a2:d6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:10:19 2024 by rpki-client on console-fra.rpki-client.org