Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OoQbmoN9ix7Vgc6pgqu4XJUQoZk.roa
File: OoQbmoN9ix7Vgc6pgqu4XJUQoZk.roa (raw, json)
Hash identifier: pxNegxiH66Ry2LnrRYX65J3jQPK2c6rRr6EAAAFmR5A=
Subject key identifier: 3A:84:1B:9A:83:7D:8B:1E:D5:81:CE:A9:82:AB:B8:5C:95:10:A1:99
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191A208FB4F0C775231B5F95D1B847B9D57
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OoQbmoN9ix7Vgc6pgqu4XJUQoZk.roa
Signing time: Fri 30 Aug 2024 06:46:23 +0000
ROA not before: Fri 30 Aug 2024 06:46:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44378
IP address blocks: 193.19.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a2:08:fb:4f:0c:77:52:31:b5:f9:5d:1b:84:7b:9d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 30 06:46:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a841b9a837d8b1ed581cea982abb85c9510a199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:38:5f:f6:1c:3c:ff:6b:8d:36:8d:7d:14:
12:72:14:99:c3:5d:18:98:03:04:de:91:be:40:b8:
4e:c6:c5:57:c5:35:a3:1d:7a:00:50:0f:b2:6c:fc:
48:d5:58:53:0c:bc:42:90:31:54:d4:fe:6d:c9:f7:
53:8c:3c:3d:9d:bf:d0:f8:a1:23:4d:ae:e8:ad:1b:
71:00:87:f0:49:c8:d2:99:9d:fc:38:5b:2a:8e:61:
a9:62:f6:95:c9:ea:1a:7d:7c:69:8a:9f:cb:40:82:
e0:7b:10:60:d8:3b:f3:33:61:db:aa:d2:42:64:28:
b5:99:a9:61:92:4b:cb:35:98:f6:e7:da:1c:b3:56:
4d:7a:72:56:ba:81:e3:05:81:ec:93:f2:6b:e0:c7:
8c:e9:70:42:d2:1b:71:38:15:64:fa:a3:79:3d:bb:
34:b7:8e:36:62:ce:09:ca:b4:9b:f4:67:46:99:9b:
2e:0e:06:06:85:ac:89:d7:70:42:9c:a7:8c:d1:59:
d3:f2:19:8b:f8:0e:c3:7d:47:cd:42:a7:f0:42:78:
39:90:cc:18:75:10:4a:5d:69:aa:2a:8c:1c:52:d4:
94:5d:33:dc:aa:99:8c:b4:88:2d:8b:ac:c7:c2:dd:
d2:db:e0:1d:25:3b:8b:a7:22:70:64:b6:0b:32:2d:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:84:1B:9A:83:7D:8B:1E:D5:81:CE:A9:82:AB:B8:5C:95:10:A1:99
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OoQbmoN9ix7Vgc6pgqu4XJUQoZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.189.0/24
Signature Algorithm: sha256WithRSAEncryption
73:11:b4:4c:db:18:48:2f:c5:f2:18:53:85:6d:53:f3:aa:14:
4d:58:2d:c6:4e:28:51:30:b3:55:70:d0:ba:8f:6d:ab:2c:3a:
18:b5:c6:f0:b5:fe:c9:3c:e4:94:7b:de:72:76:c5:b5:ac:1e:
4f:68:bf:73:4a:a3:cd:49:bd:ee:7c:46:1a:a1:aa:5e:b5:bd:
5b:3a:df:58:4b:4a:bb:24:5a:1d:14:55:2e:81:9d:15:3e:1d:
de:d2:b6:50:5f:6f:ea:88:2a:b1:15:3b:e2:a8:3f:3e:1c:4b:
eb:6b:d5:8c:b7:1e:e3:bd:9b:2c:bc:6b:70:fe:86:34:da:66:
3c:0b:26:f0:5f:2f:42:f7:4a:cb:53:5f:72:58:25:d3:f4:2c:
16:09:ed:0b:fd:53:bc:21:13:d1:ea:e0:a5:69:c9:7a:f4:9a:
c6:31:15:3c:55:58:8e:24:78:b3:f6:05:66:e8:0d:56:c6:c3:
e6:56:4a:c6:5c:e1:3e:0e:0d:b9:ba:fc:47:17:f7:31:46:01:
0b:a7:e6:23:18:1a:49:d5:9d:88:27:6f:84:d1:69:25:a2:70:
31:3c:11:40:80:fc:53:0f:7d:bc:aa:b1:94:91:9f:0d:ee:7a:
03:55:ef:1c:7f:2f:18:5f:db:eb:e3:64:18:34:02:5e:6c:f2:
7d:06:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:03 2024 by rpki-client on console-ams.rpki-client.org