Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/hDNbTCd8s4GnvObJDpAeObjv0Z8.roa
File: hDNbTCd8s4GnvObJDpAeObjv0Z8.roa (raw, json)
Hash identifier: kgX6wsNHYzDvScMAd0535eOsLhVQkiFeFWXDi20HfiE=
Subject key identifier: 84:33:5B:4C:27:7C:B3:81:A7:BC:E6:C9:0E:90:1E:39:B8:EF:D1:9F
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 01925132FBC3F7B0D628B328F0353CB68552
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/hDNbTCd8s4GnvObJDpAeObjv0Z8.roa
Signing time: Thu 03 Oct 2024 07:05:48 +0000
ROA not before: Thu 03 Oct 2024 07:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31027
IP address blocks: 193.41.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:32:fb:c3:f7:b0:d6:28:b3:28:f0:35:3c:b6:85:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Oct 3 07:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84335b4c277cb381a7bce6c90e901e39b8efd19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:21:f2:a8:9a:35:5a:83:59:81:1d:1d:32:
45:f2:03:3f:b0:b8:13:f5:d6:a0:bb:3e:29:bc:64:
36:80:60:be:65:76:39:5a:36:2c:28:c5:fb:af:0a:
75:87:c9:f4:a9:c9:c4:ec:48:35:db:8b:eb:72:a0:
70:c4:7b:5a:9d:44:be:15:73:3b:10:81:bf:c2:cd:
c3:1a:69:1b:57:3c:ec:fa:cd:a9:0e:e4:7e:01:f3:
8d:6c:bd:a7:46:b2:ea:67:28:a4:fe:29:e8:ba:4f:
5e:fe:61:f2:f4:46:d9:87:8e:e4:b8:bc:17:5b:7b:
68:2d:70:4f:8d:18:73:df:0b:a7:8e:b8:82:da:ec:
1f:fe:35:a3:a9:87:47:02:64:e8:1a:b8:4c:4e:8a:
52:4d:f1:fa:82:10:9e:c8:26:6f:63:98:30:da:6c:
b0:82:96:4a:56:25:50:f5:bf:a2:96:40:0e:14:26:
dd:cf:18:71:d2:1d:5e:63:18:eb:5d:23:ca:ce:d8:
72:14:d6:d1:c0:7e:14:39:86:27:4d:25:d9:66:f1:
1b:6e:5a:2d:e8:95:7b:a2:58:5f:23:21:4d:c2:d6:
55:01:f0:b1:90:d7:8e:05:80:d5:18:f2:ff:00:46:
b9:13:6b:a5:18:32:f8:df:e3:8d:b0:89:e1:e5:e2:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:33:5B:4C:27:7C:B3:81:A7:BC:E6:C9:0E:90:1E:39:B8:EF:D1:9F
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/hDNbTCd8s4GnvObJDpAeObjv0Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.156.0/24
Signature Algorithm: sha256WithRSAEncryption
47:8a:9d:02:87:3b:b0:cf:4a:5c:d7:5f:79:34:43:1a:20:19:
22:ff:3d:a6:a4:01:e8:e9:40:4c:06:e3:97:7d:27:ae:41:cd:
21:14:11:57:30:2a:cd:e3:6a:4a:88:9f:4b:c0:c8:3c:c5:fb:
42:7d:f0:4b:d7:55:3c:23:ac:03:30:f0:4c:2d:41:03:70:b3:
ab:b5:bc:26:a5:5a:a4:26:e3:41:a8:c1:38:36:94:11:42:70:
e1:b8:b4:b7:3b:08:04:cd:a8:ba:bb:a1:e6:70:92:ea:9b:c7:
c5:02:51:72:61:0b:01:f5:ab:16:fc:97:98:5a:72:3f:0b:3f:
18:5f:3c:4e:7c:46:9a:16:b5:8e:b0:a9:89:d7:ee:21:76:84:
37:f7:3f:5c:09:37:28:50:da:1e:46:f2:25:f1:51:b1:02:6a:
eb:28:8a:20:ac:e3:03:7a:c0:0c:d2:55:e9:43:d5:b9:04:24:
d7:6f:00:8d:78:ed:b6:f5:93:fa:db:ff:48:5e:1b:bf:e2:fb:
64:9d:d4:d6:98:6f:7b:77:1e:4a:1f:31:08:84:6a:2b:77:d1:
72:b8:72:bc:b9:10:2f:9b:d4:61:fa:68:22:2f:f2:b3:73:39:
6d:46:55:00:a9:e8:d1:a1:63:c6:44:68:ab:b1:c1:28:4b:b6:
c6:54:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:41:33 2024 by rpki-client on console-fra.rpki-client.org