Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/M23JB57n_ov9n-1slXJitgt8Vv8.roa
File: M23JB57n_ov9n-1slXJitgt8Vv8.roa (raw, json)
Hash identifier: 1H9UeWevdkcR/mcszQOSuDPT/pk7XARCNr/amBBT+q8=
Subject key identifier: 33:6D:C9:07:9E:E7:FE:8B:FD:9F:ED:6C:95:72:62:B6:0B:7C:56:FF
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 018CC8DE568093DBE10B8C7F3A2C07D24837
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/M23JB57n_ov9n-1slXJitgt8Vv8.roa
Signing time: Tue 02 Jan 2024 06:31:03 +0000
ROA not before: Tue 02 Jan 2024 06:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8412
IP address blocks: 193.227.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:56:80:93:db:e1:0b:8c:7f:3a:2c:07:d2:48:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Jan 2 06:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=336dc9079ee7fe8bfd9fed6c957262b60b7c56ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5c:9d:08:86:67:95:31:e1:8e:10:eb:56:b5:
13:07:af:ca:13:08:1b:48:b3:10:39:6e:f9:41:e6:
05:e1:f8:4a:dd:8d:be:18:b3:43:da:a3:48:db:10:
c1:69:88:c7:41:ac:23:f1:e1:86:3f:96:83:aa:d0:
35:f0:82:d8:45:2d:12:43:ef:22:f6:78:61:8f:11:
38:5d:0d:a7:27:7e:ca:fd:9d:32:c2:a2:59:72:d1:
b7:60:53:e6:57:c5:cb:95:c4:ac:7d:4f:bc:c8:7b:
22:e6:8e:26:64:72:11:d6:e5:61:62:30:e0:e3:17:
66:db:96:e7:6b:83:1a:e4:a3:2e:a5:d3:39:61:60:
a8:eb:01:8e:2a:5f:da:66:0e:15:e0:64:3e:9b:3b:
e9:fa:2f:ce:8c:f0:25:f3:9c:a6:e6:5e:c1:f9:38:
fa:7e:eb:69:85:cf:f1:6c:95:be:e7:43:35:f3:68:
9c:33:46:fe:63:a2:33:e9:7f:0f:07:a0:79:a8:72:
8d:10:22:ad:65:63:ba:7a:18:16:ff:c2:c5:de:e5:
8a:b8:93:07:da:52:2e:54:be:6e:7b:33:78:6a:45:
02:67:ae:2c:f3:36:80:0f:13:0e:0b:39:c0:f9:15:
ce:6c:ee:12:02:42:4c:71:33:01:73:d6:7d:4b:1c:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6D:C9:07:9E:E7:FE:8B:FD:9F:ED:6C:95:72:62:B6:0B:7C:56:FF
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/M23JB57n_ov9n-1slXJitgt8Vv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.108.0/24
Signature Algorithm: sha256WithRSAEncryption
46:cf:89:96:85:99:fa:cf:e5:95:59:b7:fe:06:e4:a9:b7:30:
86:8b:ad:ea:12:9e:74:68:d8:8d:59:6a:9f:f9:9d:22:84:1e:
c1:9c:1d:1e:3e:b8:f9:4d:18:0c:dc:a6:d5:66:fc:49:95:40:
40:51:79:e0:0d:10:68:d9:f3:a9:ee:a6:4b:96:a6:42:06:70:
d4:98:4a:b3:49:c1:da:f9:75:87:56:8d:40:68:e5:40:70:83:
bb:c5:07:98:f8:35:6c:50:4a:0e:0f:fc:27:ed:c1:d5:57:57:
de:fe:3f:2a:94:ef:a1:68:d1:e9:0e:26:23:8c:27:fe:88:fd:
cb:ff:aa:07:3e:21:49:7f:25:13:d0:41:a6:b5:46:3a:66:79:
28:9b:fd:2e:20:16:75:84:56:1f:99:2b:c2:f5:3f:bc:31:74:
5c:ae:cf:23:1f:82:8f:5d:bd:79:3c:95:ee:e1:c7:ef:dc:c2:
76:84:39:47:3f:ab:6e:b6:d2:d3:82:a7:45:b7:45:a4:2c:39:
d2:b8:2e:10:d7:37:37:62:38:86:9e:47:50:98:58:ce:13:ee:
a3:1c:73:5d:ad:b0:1a:c5:c4:c4:eb:c8:17:27:45:0c:35:02:
7a:5b:d5:1a:83:7b:6d:54:ad:3c:aa:84:7e:40:37:34:4c:a3:
bc:35:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:29 2024 by rpki-client on console-ams.rpki-client.org