Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/sIPQJM0BZ4ZGHkcR2tuJoOkUnsA.roa
File: sIPQJM0BZ4ZGHkcR2tuJoOkUnsA.roa (raw, json)
Hash identifier: R+8Rs9DcD3kU6ACfCsr7n+ERlxU5EfhPOBjIEmHW4Is=
Subject key identifier: B0:83:D0:24:CD:01:67:86:46:1E:47:11:DA:DB:89:A0:E9:14:9E:C0
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 01925F2EB2826E18BB2D746F17C79B134C62
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/sIPQJM0BZ4ZGHkcR2tuJoOkUnsA.roa
Signing time: Sun 06 Oct 2024 00:15:48 +0000
ROA not before: Sun 06 Oct 2024 00:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209181
IP address blocks: 199.244.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5f:2e:b2:82:6e:18:bb:2d:74:6f:17:c7:9b:13:4c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Oct 6 00:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b083d024cd016786461e4711dadb89a0e9149ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e8:da:9b:7c:69:df:25:cd:b9:59:69:cc:17:
55:ff:f1:96:ee:6d:51:d4:d4:2c:9c:56:99:41:f8:
e5:bd:1e:c9:87:9f:e7:37:40:59:8e:25:9b:3b:cd:
49:87:8b:25:b5:fd:68:3f:73:ca:bc:f2:38:39:3e:
c4:d6:e1:d6:04:45:b1:09:1d:3d:db:14:74:54:11:
f3:02:07:fb:b1:eb:df:fb:4f:f8:54:08:f6:89:36:
5e:82:0e:be:8e:6d:22:82:f3:0b:17:7b:2b:e8:6c:
9e:e9:8a:23:dc:dd:e3:9c:68:1c:64:a0:78:cf:27:
56:c5:ed:fb:f1:fb:39:e4:83:4c:f4:e9:c9:1c:fb:
99:13:96:78:e1:54:a1:7c:39:82:4a:b0:d6:3f:2b:
ab:f0:d0:5d:26:72:39:e6:bf:68:6b:3f:f5:1a:89:
8b:f9:df:76:2a:ad:9e:ee:a7:22:cc:86:b9:bc:63:
e5:41:e3:04:2f:b3:1c:05:a8:87:bc:c3:80:9a:36:
70:b8:0d:b5:7e:77:1f:e2:67:a3:29:68:cc:fb:62:
c6:e0:5a:03:f8:a5:2a:fd:aa:c7:7c:ac:0f:47:d3:
26:23:93:19:f4:f6:b4:ed:ed:ec:e5:f5:15:4c:8e:
8d:6a:dc:26:8c:ff:29:1a:cf:c1:33:1a:f1:67:4c:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:83:D0:24:CD:01:67:86:46:1E:47:11:DA:DB:89:A0:E9:14:9E:C0
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/sIPQJM0BZ4ZGHkcR2tuJoOkUnsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.244.101.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c5:16:47:ba:4c:b7:4f:32:7c:77:85:09:77:bd:68:a3:d6:
af:4c:54:ff:7c:28:2d:1b:f1:6c:d4:1b:f2:c1:0f:7e:07:32:
cc:34:5e:7f:33:ec:8a:7b:d2:fc:44:0d:3c:b2:70:24:e6:4a:
0d:b9:17:d7:68:4e:bd:f2:40:a7:d1:13:6c:2a:42:0e:9a:d5:
3e:d0:e3:1e:32:03:8d:74:d0:b5:ce:1d:aa:ef:c3:8c:d3:ed:
68:07:6b:c5:28:4b:93:c2:f6:4b:10:12:57:6e:88:db:20:67:
e9:94:bc:97:e1:57:bb:22:20:7c:04:34:42:c6:7c:f4:38:f1:
69:63:e4:23:c1:2c:68:7e:70:51:25:fe:32:56:fa:c3:40:f6:
8a:e5:57:d7:87:0b:a4:74:08:49:46:5c:c6:ea:a7:e3:8c:57:
81:c2:18:dc:2a:ba:35:f4:73:8a:54:3b:5a:3a:d6:2c:94:05:
36:f9:0b:1b:ca:3c:1b:e1:d6:b6:fc:98:75:cb:ff:2d:10:cc:
84:0b:5d:03:2f:75:30:62:0a:6a:d2:6b:cd:5b:44:2a:dc:33:
9f:53:38:bf:6d:67:32:38:26:15:1f:d0:57:3e:0f:c0:03:62:
4a:03:2f:68:a3:9d:fd:fe:45:52:86:48:08:a1:65:67:42:7b:
f8:7b:b5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:40:52 2024 by rpki-client on console-fra.rpki-client.org