Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/O6_dIPq-lQlYNdktowU9qPJtlzc.roa
File: O6_dIPq-lQlYNdktowU9qPJtlzc.roa (raw, json)
Hash identifier: 2e/vcrbS2D0T4S4r2OAWg4ohBkfVUKWznP4QHeS9NUk=
Subject key identifier: 3B:AF:DD:20:FA:BE:95:09:58:35:D9:2D:A3:05:3D:A8:F2:6D:97:37
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B8A3671553602AA3CC60AB804F220
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/O6_dIPq-lQlYNdktowU9qPJtlzc.roa
Signing time: Mon 01 Jan 2024 18:31:28 +0000
ROA not before: Mon 01 Jan 2024 18:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198115
IP address blocks: 193.192.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8a:36:71:55:36:02:aa:3c:c6:0a:b8:04:f2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bafdd20fabe95095835d92da3053da8f26d9737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:ad:16:76:e4:ca:64:21:90:ce:fd:68:9b:
33:82:76:6e:9b:ee:9c:67:c9:3d:f8:01:9e:0a:fe:
5a:d4:c4:32:3f:e4:ab:4f:4f:b2:25:18:11:27:4c:
d7:e3:14:70:c4:d0:68:8f:c3:3b:ff:53:2a:65:91:
80:da:f0:b9:e3:90:74:8c:1a:c6:6d:0d:48:c2:aa:
9e:de:ad:8d:fe:8e:a0:2b:50:1b:ba:4d:f2:09:94:
1c:bc:d8:d2:aa:52:48:9f:e0:fd:ca:cb:9e:67:91:
e8:b0:73:6f:98:e2:7c:50:52:51:f0:d9:51:79:48:
bc:44:2d:ad:b1:21:4f:60:8f:76:68:49:93:dd:7c:
36:87:15:51:65:e9:b5:9f:17:1e:c5:41:66:7d:37:
70:d1:31:80:58:10:b5:e2:cb:65:92:24:d1:02:6a:
89:71:37:98:52:ca:8d:47:34:d2:f4:e8:5f:89:89:
5b:d8:34:37:42:49:eb:b2:41:65:3d:9a:78:57:97:
11:8c:54:bb:b9:9f:da:c4:d8:a2:d7:6d:e1:4a:7a:
b2:48:91:1a:4f:e5:c3:99:78:2a:f8:59:19:22:8b:
14:01:90:51:23:54:f7:14:35:32:d1:22:b0:e9:66:
e0:4a:fc:95:37:2d:6d:66:47:bc:72:19:af:70:33:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AF:DD:20:FA:BE:95:09:58:35:D9:2D:A3:05:3D:A8:F2:6D:97:37
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/O6_dIPq-lQlYNdktowU9qPJtlzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.189.0/24
Signature Algorithm: sha256WithRSAEncryption
81:23:62:ab:0f:ed:31:ff:11:ba:e6:cf:fa:e9:4e:ac:93:ca:
32:e7:35:c8:b6:53:2c:b4:9e:1a:71:18:ab:d9:ec:93:fc:aa:
77:ae:b0:49:83:a1:cf:fd:ca:06:12:61:a8:3c:05:0a:4c:28:
4a:ad:f6:3c:ec:1c:1b:30:2e:62:69:02:ed:3a:80:2f:7d:eb:
46:51:af:ed:3d:33:71:9e:d5:f4:49:62:2e:21:f6:b4:21:84:
80:7b:6e:39:45:85:ae:9a:35:ad:24:81:62:4d:25:a3:12:51:
bb:1c:a0:77:78:23:ab:66:f8:a5:86:e8:cd:73:87:04:0b:d7:
ac:7e:d7:f3:eb:0a:89:c5:cb:cb:7b:04:72:9f:0f:33:d0:35:
35:b7:ea:d0:f3:e2:41:3f:da:71:72:c1:29:de:6a:97:4f:b3:
e3:8d:17:26:3f:0d:f8:71:59:48:3f:62:67:70:27:97:4c:d8:
7d:16:3b:cf:0f:77:2f:98:fa:5e:6e:70:be:82:0c:9c:cc:71:
d0:19:37:a6:b6:c8:7e:cc:15:85:50:aa:af:05:a2:af:c8:83:
aa:bc:dc:23:a6:f8:29:c9:25:37:6d:7f:06:1c:48:9b:78:d5:
c3:4f:51:6f:cd:71:1c:7d:c8:41:9e:d5:4b:ed:7d:76:f0:71:
5f:89:cb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:19:04 2024 by rpki-client on console-fra.rpki-client.org