Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/R9OjBiHph3fSD_D_mRokvD6cNO8.roa
File: R9OjBiHph3fSD_D_mRokvD6cNO8.roa (raw, json)
Hash identifier: WHV20svm/1+JkMyQYiIqXIV3AGmKucAN0vb2S2mgkqQ=
Subject key identifier: 47:D3:A3:06:21:E9:87:77:D2:0F:F0:FF:99:1A:24:BC:3E:9C:34:EF
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 018CC9BA66F20A6E5C2299B1436016193B64
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/R9OjBiHph3fSD_D_mRokvD6cNO8.roa
Signing time: Tue 02 Jan 2024 10:31:25 +0000
ROA not before: Tue 02 Jan 2024 10:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42359
IP address blocks: 194.0.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:66:f2:0a:6e:5c:22:99:b1:43:60:16:19:3b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: Jan 2 10:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47d3a30621e98777d20ff0ff991a24bc3e9c34ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a7:8d:d9:66:c0:62:44:73:f8:8d:22:97:e3:
d5:4f:8b:75:d2:ea:99:b2:37:e6:48:e0:4f:33:44:
ce:db:09:10:94:4f:aa:58:8b:c7:f7:8c:93:b1:73:
9c:e8:f8:b1:dd:c8:a1:4f:fd:cc:9d:78:73:57:ca:
e2:38:78:fc:24:4f:ea:b1:48:63:2d:57:84:cc:77:
45:5c:cb:9a:32:a7:5f:14:59:02:85:65:04:3e:97:
df:54:91:d5:f7:6b:fa:9b:5e:6c:3a:99:e2:a4:c5:
ab:3d:e6:7b:76:06:99:10:aa:3e:f4:2a:a5:9e:60:
a8:77:ab:b7:01:0d:00:24:d9:9a:e8:a4:72:89:2c:
33:60:b5:ec:4f:00:7e:46:98:ad:eb:49:5f:06:6b:
4b:f4:81:e7:36:fc:76:9f:17:02:ca:6b:a0:1d:3d:
12:26:11:4f:4c:45:a3:fe:99:5a:ad:06:75:37:2e:
59:4a:9d:85:eb:da:2d:b9:4b:54:cb:91:34:cd:07:
ac:17:c5:42:4e:7a:92:0f:79:59:f1:43:95:bf:29:
a9:fc:f1:e8:db:c0:2b:fc:4d:e8:6e:c2:c9:31:07:
17:80:1c:b4:67:fd:ad:b8:f4:e0:8f:7f:80:66:a6:
41:fa:10:b1:fc:28:71:7c:9b:bc:5c:0e:a3:9c:f9:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D3:A3:06:21:E9:87:77:D2:0F:F0:FF:99:1A:24:BC:3E:9C:34:EF
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/R9OjBiHph3fSD_D_mRokvD6cNO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.214.0/24
Signature Algorithm: sha256WithRSAEncryption
07:9d:cc:8d:1a:02:5f:be:5e:24:95:cb:10:ad:9b:88:d2:01:
a3:a8:f2:d7:64:48:92:c8:fa:c1:57:cb:40:d6:e2:3e:eb:66:
87:82:43:db:18:96:b5:f4:a7:75:f3:79:84:a6:10:38:27:54:
25:bf:b2:bf:26:d2:0d:b2:27:b8:5f:ba:2b:24:46:ec:48:c0:
10:2d:40:1f:27:d7:8b:35:d8:e7:30:b7:6b:30:22:b3:86:6a:
9b:7f:1b:05:c7:04:2f:ea:af:73:b2:bc:59:53:05:e1:2e:dd:
3d:6c:7c:50:bf:8c:07:54:7d:60:ba:1b:e4:b1:07:bf:d0:50:
d3:48:6d:1a:8a:84:7c:8d:e9:0f:b8:2e:38:78:a5:71:60:70:
78:10:1a:9e:7a:8c:17:d8:5b:19:c3:32:44:ea:69:92:32:c6:
c8:89:80:54:68:d3:f6:da:53:d8:f0:15:35:31:5a:f7:ef:05:
f6:c3:82:9b:79:ea:87:40:6b:4b:61:46:0e:ac:54:d5:93:dc:
f6:1e:0c:c7:9d:97:3d:11:71:c7:e5:1a:09:b6:8a:73:25:6f:
e3:44:37:d0:ab:06:73:f2:2d:0c:d3:d1:78:e9:ee:9f:25:21:
55:48:98:42:23:8a:95:2a:47:d0:26:4b:62:db:93:f9:d1:33:
1b:96:a7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:15 2024 by rpki-client on console-fra.rpki-client.org