Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/9ljdnZbG0HijtVvEyg4KoP2e9Jo.roa
File: 9ljdnZbG0HijtVvEyg4KoP2e9Jo.roa (raw, json)
Hash identifier: Jx+J4wI8YAnUA8oUvej8OipJuNyLBT9iE0Pm5dw4MZw=
Subject key identifier: F6:58:DD:9D:96:C6:D0:78:A3:B5:5B:C4:CA:0E:0A:A0:FD:9E:F4:9A
Certificate issuer: /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Certificate serial: 01920E7DA6F3BBCC869B2E4DA9A3C0C3654E
Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/9ljdnZbG0HijtVvEyg4KoP2e9Jo.roa
Signing time: Fri 20 Sep 2024 08:12:48 +0000
ROA not before: Fri 20 Sep 2024 08:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214287
IP address blocks: 193.228.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:7d:a6:f3:bb:cc:86:9b:2e:4d:a9:a3:c0:c3:65:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Validity
Not Before: Sep 20 08:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f658dd9d96c6d078a3b55bc4ca0e0aa0fd9ef49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:c2:b9:c0:4b:b6:5c:65:73:06:a0:0b:f6:
11:3f:9f:0d:58:87:d9:73:3e:d2:f5:bb:36:ed:70:
0a:9c:34:47:8d:c1:2d:d4:77:6a:b5:80:63:86:5a:
ba:f9:8c:a3:90:6f:79:05:57:97:60:ef:8f:25:55:
9e:e9:a0:e3:fc:63:1c:36:ea:61:8d:04:64:54:f7:
a3:74:30:b0:50:48:77:c8:cc:28:32:2f:b8:c4:54:
b2:71:ec:02:02:10:95:77:55:90:ff:49:0e:c3:46:
8e:f3:f6:89:d0:c4:79:ba:f3:d5:3a:a1:49:fe:6d:
eb:0e:51:b4:54:6a:39:ec:e4:d3:8d:a7:4c:87:50:
51:50:7e:fc:3e:00:38:75:3c:48:c5:7e:c9:d3:c7:
6c:73:1b:aa:e6:f3:83:38:35:35:5a:7c:e5:46:13:
f9:8f:c5:d7:47:e5:a9:05:b4:4c:03:e5:14:90:b6:
d7:40:33:6c:e6:ae:14:4c:9c:20:a4:17:d7:d4:cc:
fd:e6:34:ef:0e:2c:2a:1f:76:b6:8e:ff:83:4e:94:
a6:de:52:f0:58:d4:9e:2f:26:66:d1:37:59:0a:0f:
82:c2:d0:ba:5b:85:82:b1:90:98:e9:4d:2d:cf:07:
fa:52:43:20:7b:17:f7:c8:0f:36:32:58:31:fa:70:
71:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:58:DD:9D:96:C6:D0:78:A3:B5:5B:C4:CA:0E:0A:A0:FD:9E:F4:9A
X509v3 Authority Key Identifier:
keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/9ljdnZbG0HijtVvEyg4KoP2e9Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.137.0/24
Signature Algorithm: sha256WithRSAEncryption
54:39:48:bd:e9:9f:b8:8c:92:6e:90:aa:f8:b7:58:77:ea:af:
68:88:e6:07:fe:92:52:02:04:fb:75:50:bb:68:bf:a9:a6:21:
bd:43:13:86:e8:c1:6b:26:eb:b4:ed:34:97:fa:a9:52:71:5a:
00:c0:fa:63:67:e2:5e:7a:14:a3:c5:34:a7:33:ba:61:a1:43:
e4:3f:d5:86:a4:85:d8:4a:f2:94:ae:7c:50:7d:5d:c6:5d:a4:
50:47:7a:ff:b7:0f:97:53:45:d7:42:8a:8d:b7:72:3b:f3:3c:
37:d6:83:ac:77:f0:7a:51:22:58:bc:69:f2:48:1e:72:53:ba:
3d:28:dd:30:78:55:8b:4c:85:f1:f6:ac:9d:42:ff:74:9b:f4:
86:8f:63:7e:47:be:85:da:ef:99:27:2d:9d:34:61:81:da:a6:
f6:8e:41:e2:f5:3b:20:f7:60:4c:d4:11:ae:5d:4b:9f:8e:98:
ee:b0:82:86:71:3c:a9:2e:e4:7e:21:01:8c:4f:f8:26:42:88:
4c:d7:d7:30:20:8a:87:f0:6d:11:7b:37:eb:85:32:4a:f2:24:
cf:9f:f9:3c:f5:c5:bf:65:eb:39:c9:90:fc:9a:16:5d:6f:79:
9c:9a:95:6a:f5:25:cf:9a:a0:ac:fd:e3:4b:0e:27:ff:cb:9c:
84:73:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:19 2024 by rpki-client on console-fra.rpki-client.org