Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/_iKvOCxiDYc6PqJxrj0tqbc_u7E.roa
File: _iKvOCxiDYc6PqJxrj0tqbc_u7E.roa (raw, json)
Hash identifier: 090BNdFHGcQjGiMm3Vk8jsOHMyu3+6qWURvb26/VyJ4=
Subject key identifier: FE:22:AF:38:2C:62:0D:87:3A:3E:A2:71:AE:3D:2D:A9:B7:3F:BB:B1
Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial: 01910061F3302124F6D41A32E7F4AFFCB4E5
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/_iKvOCxiDYc6PqJxrj0tqbc_u7E.roa
Signing time: Mon 29 Jul 2024 21:25:04 +0000
ROA not before: Mon 29 Jul 2024 21:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61153
IP address blocks: 193.17.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:00:61:f3:30:21:24:f6:d4:1a:32:e7:f4:af:fc:b4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Validity
Not Before: Jul 29 21:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe22af382c620d873a3ea271ae3d2da9b73fbbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:fe:48:f6:a8:4b:66:f3:2b:f3:ad:a8:66:
b3:51:1e:d7:08:55:fd:62:b0:1b:25:a4:07:e8:63:
5e:25:69:9b:62:cc:0c:fc:ea:16:02:0a:0d:f5:0e:
ed:cf:74:19:0c:10:24:86:1b:50:ec:b4:e8:62:75:
80:8c:7d:41:bb:21:fc:c2:13:32:4e:71:71:3b:44:
e2:ea:19:01:18:ae:3b:63:b6:65:e5:d8:dc:27:37:
67:63:c1:16:57:1b:7c:33:43:6c:04:c9:31:b4:e4:
bb:68:cd:b5:3a:94:14:a3:b9:2f:2c:21:28:d1:a2:
03:f8:d8:9f:dd:a9:02:d0:6b:7f:0a:41:4d:1d:07:
3a:16:8f:9b:d4:08:e0:54:4a:c9:28:d5:c4:90:14:
4b:8c:87:04:cb:8e:f3:7e:df:c7:5f:b0:c3:0a:d0:
01:a5:83:bf:39:da:3b:57:d1:c7:da:ea:6e:66:c7:
b2:1c:cc:ee:bc:eb:b3:01:2f:86:b8:9d:cc:c8:ed:
70:35:35:58:a3:53:cd:37:5f:af:7b:4f:08:1a:f6:
fa:00:7c:5f:83:80:47:7b:3c:aa:2c:fc:4a:d9:d3:
1a:e6:82:e2:0e:1b:0b:3d:10:23:fa:e1:f6:73:4c:
84:75:bc:57:73:30:04:a0:12:2b:6c:93:0a:42:78:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:22:AF:38:2C:62:0D:87:3A:3E:A2:71:AE:3D:2D:A9:B7:3F:BB:B1
X509v3 Authority Key Identifier:
keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/_iKvOCxiDYc6PqJxrj0tqbc_u7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.96.0/21
Signature Algorithm: sha256WithRSAEncryption
cf:d8:b5:03:52:93:2d:e4:06:08:e4:c5:32:d2:de:6e:55:2b:
a8:3d:fd:dc:9a:4e:f4:27:87:08:16:71:79:18:b6:f5:e6:06:
4d:a3:fa:fb:b0:69:a2:94:f3:50:8c:05:c5:c8:ad:10:1c:fa:
db:28:05:ce:ec:87:5d:18:2e:0e:ff:52:d7:a0:70:78:e4:6b:
0b:35:8b:12:d9:09:ae:3b:92:aa:a1:fc:82:80:cf:a8:75:ba:
27:04:6b:55:85:30:52:6b:fa:ff:85:17:d4:b6:99:d7:17:8a:
d6:00:7c:f5:5e:0d:be:2e:99:eb:44:e0:38:e8:5e:80:89:52:
c9:d7:bb:f8:49:38:e8:fe:70:29:cb:15:5e:06:15:e3:93:ac:
ad:1a:66:a4:81:fd:0b:cc:64:fd:ce:7f:46:65:5a:99:79:1f:
9e:1e:03:84:e3:03:8c:5b:59:d0:b9:c6:1e:00:b9:d8:18:42:
1c:b5:7a:c3:56:a0:12:4d:72:f8:9a:d4:d7:50:46:96:7a:77:
0b:d5:30:07:18:7f:22:a1:db:3c:ba:e6:43:8a:fd:4e:ef:a6:
77:90:cc:ab:dc:9b:23:2e:01:16:1f:1f:66:41:58:ac:f5:74:
38:e0:b1:e6:1b:5f:11:2d:50:13:27:66:ff:81:b7:80:b0:f0:
c5:85:eb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:47:01 2024 by rpki-client on console-fra.rpki-client.org