Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/q9XAMvZePT2XanZ5tFs3Z8C3BA0.roa
File: q9XAMvZePT2XanZ5tFs3Z8C3BA0.roa (raw, json)
Hash identifier: JXjKyk067tuPpcj75S7FbQk7GIqT7ZRj0BuyYcKd28A=
Subject key identifier: AB:D5:C0:32:F6:5E:3D:3D:97:6A:76:79:B4:5B:37:67:C0:B7:04:0D
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018CC500C900D7900562726CCA4CB2D818E6
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/q9XAMvZePT2XanZ5tFs3Z8C3BA0.roa
Signing time: Mon 01 Jan 2024 12:30:12 +0000
ROA not before: Mon 01 Jan 2024 12:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212416
IP address blocks: 193.108.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c9:00:d7:90:05:62:72:6c:ca:4c:b2:d8:18:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 1 12:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abd5c032f65e3d3d976a7679b45b3767c0b7040d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:62:85:ab:69:7b:e3:07:d2:18:a4:cf:76:
d5:e9:d3:e7:d0:40:78:c2:9c:6a:38:5f:1c:eb:f4:
e1:a7:54:80:06:c1:36:05:1b:48:3a:5c:57:09:0b:
81:0b:06:ce:32:ce:0b:c6:42:5e:e4:7f:83:7a:92:
7d:8d:bd:1b:21:ff:4f:2b:ae:6c:17:e7:c9:39:b3:
c6:67:6a:eb:3b:ea:58:65:4e:4a:ec:99:3c:a6:78:
61:f5:e3:50:b6:da:b0:4c:8e:45:24:a7:81:d6:4e:
86:74:4e:0d:44:22:ee:92:e8:bc:84:c3:29:c2:fb:
2b:76:81:53:36:8a:ee:8d:b9:e4:85:01:d2:af:53:
44:21:69:cd:de:80:27:45:8d:55:de:f6:f0:1d:ce:
94:18:65:d2:f1:f6:ee:ab:76:a5:04:47:32:e5:f3:
cb:1c:0d:f8:77:8f:fc:5e:d5:bc:26:2c:21:5c:f2:
23:3a:b2:78:99:7f:ba:98:49:2b:a6:84:76:04:b6:
af:fd:19:32:ce:dc:26:24:5a:ed:60:15:09:a4:41:
d5:9a:1f:86:2b:02:49:c0:1f:70:6f:ee:7a:d7:13:
ca:53:f2:6d:08:1c:ce:d0:f3:60:7e:7d:a4:05:61:
a7:38:74:5e:55:42:b3:8b:2a:d0:30:31:20:b4:67:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D5:C0:32:F6:5E:3D:3D:97:6A:76:79:B4:5B:37:67:C0:B7:04:0D
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/q9XAMvZePT2XanZ5tFs3Z8C3BA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.57.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f3:e7:3d:0f:ce:b2:5c:77:fc:16:52:cf:31:76:f7:79:fc:
ec:83:12:90:09:33:99:af:0d:fa:56:f5:25:bb:1a:b8:c0:36:
23:f7:05:12:aa:7f:1e:f5:da:df:76:6d:dd:5e:78:36:e8:93:
21:01:75:7c:c4:73:f3:4f:eb:3c:c2:a8:f9:65:51:96:7b:99:
fb:8f:3b:3a:ec:fc:82:c5:7d:76:eb:d8:4c:53:65:07:b4:73:
9e:ed:02:61:06:02:16:96:13:2c:6d:7d:7b:41:12:39:4e:1f:
65:03:91:a2:e5:9c:a2:8e:ba:d4:54:6c:b8:a6:ef:9d:a4:cf:
c1:43:83:fe:70:9d:cb:29:cf:2f:88:1e:3d:24:dd:10:3c:74:
1c:35:6b:b6:c0:3b:45:c6:23:5b:9c:59:f8:a2:19:fc:16:31:
61:68:4f:0f:e1:34:14:92:d7:80:88:64:db:e4:33:98:99:3a:
39:37:ff:7a:d1:c8:02:82:4c:b4:0e:72:d5:9d:41:b3:b6:43:
9d:b2:84:d7:6f:20:b5:09:d5:69:19:a8:cd:d1:14:f5:61:90:
a2:f4:23:0c:dd:1f:d0:fa:35:29:75:60:67:eb:3f:b2:74:ec:
5b:db:67:9d:2a:b8:04:0c:61:11:2f:6f:e1:47:32:e8:9d:62:
af:f1:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:11:07 2024 by rpki-client on console-fra.rpki-client.org