Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/8n56mR4Ee3F5vzcLet_FO-LHGYU.roa
File: 8n56mR4Ee3F5vzcLet_FO-LHGYU.roa (raw, json)
Hash identifier: S70jnbRYekXfCWc3d82ysqJ/yAvsnlr15qILjPUPmAw=
Subject key identifier: F2:7E:7A:99:1E:04:7B:71:79:BF:37:0B:7A:DF:C5:3B:E2:C7:19:85
Certificate issuer: /CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7
Certificate serial: 01912C36A646922E58A46FB042799FC2CE07
Authority key identifier: 9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/8n56mR4Ee3F5vzcLet_FO-LHGYU.roa
Signing time: Wed 07 Aug 2024 09:41:04 +0000
ROA not before: Wed 07 Aug 2024 09:41:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 193.161.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:36:a6:46:92:2e:58:a4:6f:b0:42:79:9f:c2:ce:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7
Validity
Not Before: Aug 7 09:41:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f27e7a991e047b7179bf370b7adfc53be2c71985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:04:6a:3e:88:21:22:39:72:dc:13:71:31:
1f:95:02:ac:d3:6e:27:74:04:ab:24:b8:87:af:6b:
ca:2e:9e:86:4f:2e:cb:05:e5:dd:27:88:04:60:4f:
f8:64:df:37:42:99:5b:95:05:42:9d:b3:ad:0e:54:
02:fd:c9:1d:d7:95:db:c6:84:6c:5a:73:37:15:0b:
3e:73:af:f8:f7:e4:70:f8:b2:96:c7:e1:5a:a7:fe:
4f:ae:e9:f3:bf:40:55:29:86:c5:c0:93:89:4f:11:
50:f7:da:f2:53:48:83:06:96:4c:27:a3:9c:9b:66:
89:fc:be:93:ae:37:29:0d:d7:6b:58:e1:0e:51:99:
f5:25:51:02:12:9c:1f:7e:49:bc:cf:59:7c:8e:75:
3b:5a:8f:75:96:4b:85:94:83:24:ed:51:00:1a:f1:
64:31:9d:4c:85:cc:39:ea:c0:f3:3b:fb:73:e8:b1:
f3:3c:d1:23:a1:c9:ac:02:60:bd:f3:57:21:0d:b4:
38:a7:63:01:92:37:dc:6f:56:64:74:49:3a:55:71:
d8:e1:97:f1:fb:a0:b6:71:df:10:0f:6f:4b:7f:08:
9b:6e:9b:da:fe:4d:cf:44:d1:ed:03:af:66:7e:3c:
bb:c8:d3:d5:2b:16:43:64:7c:bd:aa:7a:e9:dd:41:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7E:7A:99:1E:04:7B:71:79:BF:37:0B:7A:DF:C5:3B:E2:C7:19:85
X509v3 Authority Key Identifier:
keyid:9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/8n56mR4Ee3F5vzcLet_FO-LHGYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.193.0/24
Signature Algorithm: sha256WithRSAEncryption
17:70:52:08:ab:c5:b1:07:19:cf:90:ab:4d:fa:00:a7:eb:da:
35:58:44:06:93:b4:07:71:69:6b:ae:ce:99:1c:b2:5d:43:0e:
ea:16:b3:37:a7:ef:a1:ff:05:3f:86:87:1d:f0:89:1e:b7:9a:
fa:30:ab:aa:26:7e:64:78:74:b4:be:74:36:42:90:d1:77:07:
d6:7a:d1:8c:50:a6:c0:c1:7d:2f:a1:18:31:1d:a8:0c:9c:ff:
c8:c9:38:27:2c:0c:84:e5:52:eb:6c:9c:b5:7d:9c:c7:8b:09:
8b:ae:c1:ff:54:0a:f5:b5:ca:31:76:92:fb:39:0c:11:02:a1:
e4:38:7e:be:d6:e2:56:ab:3f:2f:fc:68:7a:25:ca:46:83:b5:
b0:cf:2a:96:55:ad:7e:ea:41:a4:83:b2:2e:77:67:9e:4f:77:
2a:26:f5:f9:e6:b5:27:b6:60:a8:c0:f2:b1:0b:92:ce:18:02:
6e:58:4b:d3:84:06:06:4e:94:c0:83:3e:09:b8:0e:98:3b:6a:
51:58:2d:e3:18:00:61:5e:b0:07:fe:bd:2b:88:7a:18:4d:5c:
c2:53:99:33:01:8a:a7:54:c4:97:93:7d:7b:fe:01:df:87:55:
fb:ce:2d:b8:f2:c7:28:3e:78:a8:e2:2c:2d:1f:da:f6:44:da:
1d:eb:1a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:35 2024 by rpki-client on console-ams.rpki-client.org