Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/hP4t2SZI4u9cy2z8qNVRvPVNUsE.roa
File: hP4t2SZI4u9cy2z8qNVRvPVNUsE.roa (raw, json)
Hash identifier: L3S5g8Rhr2usu/E2WaJOkRkZFl7YdWfsXfB767g9ixg=
Subject key identifier: 84:FE:2D:D9:26:48:E2:EF:5C:CB:6C:FC:A8:D5:51:BC:F5:4D:52:C1
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 018CC649BAE2108BDDE73F1717C62B1EF591
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/hP4t2SZI4u9cy2z8qNVRvPVNUsE.roa
Signing time: Mon 01 Jan 2024 18:29:29 +0000
ROA not before: Mon 01 Jan 2024 18:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12843
IP address blocks: 193.202.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ba:e2:10:8b:dd:e7:3f:17:17:c6:2b:1e:f5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Jan 1 18:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84fe2dd92648e2ef5ccb6cfca8d551bcf54d52c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:cf:e0:08:03:a8:6a:d8:62:ad:54:21:58:
d0:9c:05:36:49:ae:47:d3:00:b7:be:8f:e5:17:d4:
d3:1b:8a:ab:c0:9d:b4:4c:32:dc:c1:2f:95:4c:a1:
f5:ba:eb:4f:5e:07:1b:4a:e5:80:dc:43:ed:13:f8:
0d:87:f5:76:71:3a:ba:ae:2d:8b:b6:20:c1:fa:33:
52:e7:86:71:01:ab:a4:af:16:64:2a:48:3d:ff:28:
6d:31:18:c4:7d:c3:39:1d:67:d7:b4:b6:b4:31:9b:
30:26:dc:17:98:2b:9f:ea:65:64:bd:67:95:c4:f3:
42:99:96:a2:0c:5a:2d:0f:d7:8b:32:cd:eb:3f:8c:
20:e6:f6:d3:66:26:6d:40:80:fb:29:03:b8:a0:0d:
20:cb:ea:45:60:f7:80:35:bf:61:02:fa:30:a9:72:
d4:5f:18:ad:79:44:b4:af:2f:66:9d:2f:0b:6e:4b:
45:57:63:0e:64:8f:ed:4a:b1:82:a7:f0:1d:a2:57:
a2:12:2c:4a:b3:50:b9:e3:b9:40:59:7a:00:98:5e:
21:24:93:5e:e5:15:18:6c:84:dc:dd:21:22:5b:11:
ea:e6:85:e2:35:60:85:7a:62:50:5a:50:f6:08:3f:
ba:ef:0e:43:ca:83:19:7b:bc:82:42:af:bf:a8:88:
ed:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FE:2D:D9:26:48:E2:EF:5C:CB:6C:FC:A8:D5:51:BC:F5:4D:52:C1
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/hP4t2SZI4u9cy2z8qNVRvPVNUsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.119.0/24
Signature Algorithm: sha256WithRSAEncryption
69:40:d2:64:cf:a8:09:37:f6:7b:a5:99:4e:ab:29:7a:f2:f0:
27:73:f6:01:7e:02:b9:cc:a1:40:c3:6c:f5:24:9a:21:13:4a:
c6:e4:9a:f6:1b:37:d7:e3:1a:e6:7b:54:ac:39:8c:d6:d7:ff:
39:51:c8:12:3e:21:c3:fe:fa:dd:f4:8f:21:bb:24:b3:d3:32:
d6:e2:d6:e5:67:06:60:7c:d9:ca:ce:7d:bb:d2:a8:d7:9e:8c:
1c:09:01:3f:8f:e9:b5:c0:5b:37:e8:85:94:ef:3b:91:b5:6a:
01:2d:e4:b2:a8:e2:95:24:a6:ea:3a:d2:e6:db:44:a6:a1:e1:
58:a6:b8:3b:fc:cb:08:cf:1d:8a:6d:26:e3:b9:7e:d3:d8:70:
31:fb:cf:4d:07:7f:31:c4:64:55:04:68:f7:bc:22:5e:56:1e:
dc:70:c5:56:c9:d3:fe:ee:48:bb:90:05:30:4a:e3:77:98:97:
e1:ae:2c:4b:86:bf:9b:15:fa:ed:1d:7e:5c:f8:0b:18:1d:27:
e3:cf:03:de:ff:78:cd:ba:7c:89:90:dc:bf:67:53:78:3d:dd:
dc:78:9a:63:b4:2a:e6:7b:5d:b8:35:21:5c:97:e7:01:8a:71:
c1:b4:fb:07:3f:ce:ad:ef:3e:c4:5d:50:84:d1:2e:57:9a:25:
4e:7b:c3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:06:40 2024 by rpki-client on console-fra.rpki-client.org