Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/0NhZKzmCLNwXX1HROAzF-1eB6r4.roa
File: 0NhZKzmCLNwXX1HROAzF-1eB6r4.roa (raw, json)
Hash identifier: sfqo9yhKIRhaKfUhXiqEsAtUPZxb7q27e4WslXBdNkg=
Subject key identifier: D0:D8:59:2B:39:82:2C:DC:17:5F:51:D1:38:0C:C5:FB:57:81:EA:BE
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 018CC9BCB184EB42536DF9BCC539121C3A27
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/0NhZKzmCLNwXX1HROAzF-1eB6r4.roa
Signing time: Tue 02 Jan 2024 10:33:55 +0000
ROA not before: Tue 02 Jan 2024 10:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199927
IP address blocks: 193.247.199.0/24 maxlen: 24
2a05:b2c4::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b1:84:eb:42:53:6d:f9:bc:c5:39:12:1c:3a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Jan 2 10:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0d8592b39822cdc175f51d1380cc5fb5781eabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:5d:d7:cd:f0:b2:0e:9a:94:29:a7:47:0a:
1d:c3:c9:fd:57:25:b9:f9:f2:71:ab:31:35:56:ff:
2d:63:6f:ca:b8:8d:b0:0c:ae:47:27:d7:d4:f5:43:
80:a1:19:71:1e:f8:37:bc:b5:dc:b3:3f:b2:6e:24:
7d:da:80:84:29:0e:86:57:21:3c:0d:d5:43:42:d7:
45:96:db:19:f3:45:fe:65:29:cc:f0:43:39:51:d3:
a1:10:fb:48:e2:ab:e8:1e:d3:4a:03:e0:c5:32:58:
a9:24:e5:a4:1e:0a:48:24:db:31:7c:7d:33:55:83:
f4:41:2a:a9:f4:81:9f:a8:f4:fe:8f:c1:d5:dc:ab:
a6:e3:78:96:02:fa:22:5f:ce:60:4b:24:ec:aa:1e:
c9:3b:03:09:2c:1b:f6:fb:b8:19:67:a1:ea:dd:08:
1c:65:c1:7d:d1:8f:00:11:bc:44:05:34:92:f4:2e:
85:2f:98:bf:6b:f5:0b:5d:79:e7:cf:58:d3:13:7a:
f9:13:f4:f4:7a:41:7a:ca:41:09:5e:1f:b1:f0:55:
20:46:dd:7d:a5:53:1a:44:a6:33:71:93:9e:ef:bb:
3e:c7:1b:6b:c5:8d:b2:44:38:de:d4:3d:b8:81:12:
d1:8a:af:87:d1:17:d0:e5:1b:05:42:ac:b6:76:f0:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D8:59:2B:39:82:2C:DC:17:5F:51:D1:38:0C:C5:FB:57:81:EA:BE
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/0NhZKzmCLNwXX1HROAzF-1eB6r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.199.0/24
IPv6:
2a05:b2c4::/31
Signature Algorithm: sha256WithRSAEncryption
7d:2c:26:db:1f:47:03:f5:09:83:9c:ad:02:f3:02:65:c0:b4:
30:b6:44:f8:30:24:3a:05:2a:1f:91:6b:df:d0:ec:01:ae:74:
fc:15:57:f6:e9:70:75:40:45:ea:04:3f:9e:81:08:27:fb:a3:
04:c6:90:be:8b:20:40:27:5e:c3:44:de:fd:2b:ef:4c:0b:46:
b1:5e:23:91:71:b6:4d:25:13:dc:6f:dc:8d:fe:cf:99:37:59:
85:e5:ca:ec:0e:7f:31:40:b0:cb:07:3d:51:1f:4e:e6:a4:33:
a0:20:cf:09:b7:b5:8f:fe:31:30:12:00:54:d6:5a:4e:03:f9:
c8:79:a5:1d:c2:e2:87:b4:f9:8b:89:89:40:a3:93:9f:1e:63:
3a:a2:93:f0:6e:87:47:a3:8d:3b:77:9b:57:41:c7:56:7e:0b:
45:f3:1a:68:63:e4:45:49:af:28:72:71:2c:11:3b:39:75:4f:
11:10:4b:84:e5:3f:87:b8:39:d8:32:79:9c:93:c5:58:c6:b8:
2f:31:a4:d5:3f:77:5d:03:a8:ae:9e:6e:23:dc:2d:17:7d:40:
7f:64:c6:c2:42:44:96:a5:96:e2:76:0c:12:a5:13:5a:03:b3:
3c:22:03:1f:be:49:b3:08:6f:61:5b:ed:4e:b8:79:f2:9f:96:
d8:0c:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:14:11 2024 by rpki-client on console-fra.rpki-client.org