Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/x9Di9udAPXedJCE_CNoedqp3Rmw.roa
File: x9Di9udAPXedJCE_CNoedqp3Rmw.roa (raw, json)
Hash identifier: HhO00N1dkBzFli98UmDMBZx2Ig3oXxZcJFttWJs335I=
Subject key identifier: C7:D0:E2:F6:E7:40:3D:77:9D:24:21:3F:08:DA:1E:76:AA:77:46:6C
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 0190DE4F53EFCB930BB2E47EE8EFFB37D2A9
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/x9Di9udAPXedJCE_CNoedqp3Rmw.roa
Signing time: Tue 23 Jul 2024 06:37:39 +0000
ROA not before: Tue 23 Jul 2024 06:37:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16611
IP address blocks: 194.4.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:de:4f:53:ef:cb:93:0b:b2:e4:7e:e8:ef:fb:37:d2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jul 23 06:37:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7d0e2f6e7403d779d24213f08da1e76aa77466c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:e5:d3:71:22:66:a3:c1:5b:d2:0a:e1:fc:
c8:f1:a3:06:57:d0:66:a3:76:27:58:76:6e:d6:e5:
c0:73:cd:3e:b7:8b:cd:f9:85:43:b1:3d:d8:aa:2d:
3c:56:55:88:ac:a8:9c:1d:5b:d0:a4:2d:3b:a9:5d:
b9:b6:09:bb:0c:52:07:cd:03:38:e2:fe:23:53:f1:
e9:e2:fb:dd:04:0c:6b:d0:d4:d0:86:7f:5e:09:c2:
ce:f9:1c:2f:e7:5c:1d:41:60:6b:be:c0:07:f6:22:
d4:37:21:cb:c9:9a:09:74:89:74:cf:c6:c9:8b:a1:
8a:91:6c:ce:f9:74:b7:a6:33:04:3d:f5:2d:9d:2e:
9a:32:71:66:5f:0e:ab:d9:4a:e4:fe:ca:e7:41:94:
87:dd:8f:ce:54:52:fb:33:28:43:dc:14:1d:ac:35:
7f:48:bc:78:91:94:98:39:4e:6a:d9:d7:65:6e:2a:
e6:d1:97:91:53:ae:4e:01:6a:4d:eb:2c:bb:b2:66:
57:c1:2a:a1:6f:1b:9b:c1:60:95:3f:99:1c:59:17:
a3:9a:4f:d0:e5:18:e1:85:ff:d1:57:72:95:0a:d9:
77:f0:a7:66:6d:5a:0a:9f:34:d9:40:5f:ba:ae:1f:
25:06:8d:70:b0:29:65:cd:56:49:83:68:5c:db:d5:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D0:E2:F6:E7:40:3D:77:9D:24:21:3F:08:DA:1E:76:AA:77:46:6C
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/x9Di9udAPXedJCE_CNoedqp3Rmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.55.0/24
Signature Algorithm: sha256WithRSAEncryption
18:0e:04:c0:a1:6e:89:53:87:b5:da:67:fc:16:76:34:1e:29:
0f:4d:04:43:56:63:36:77:2d:68:24:53:ae:ff:7d:6d:f0:a8:
1d:51:ef:55:ff:66:08:5f:cc:13:24:78:86:b6:f2:23:32:e4:
cc:26:2b:6d:2f:07:b8:ce:73:fe:e9:8c:16:82:02:e2:2c:91:
2e:5b:c8:02:c2:61:fd:98:3b:ed:b9:a9:bb:9b:9f:0e:bb:24:
97:b5:05:e1:84:b2:21:11:c4:d8:7f:db:a3:15:7c:be:fa:41:
34:8f:16:f7:a3:5d:0f:83:b0:f6:83:3d:27:30:42:f9:37:b8:
9d:1b:31:4f:af:58:c1:f4:8a:97:49:1a:84:06:d8:6d:71:26:
cb:21:d3:da:7f:cf:a6:0b:b9:ad:46:b6:dc:e1:fd:17:7e:80:
cc:e0:dd:5b:7f:d3:f4:d7:12:79:48:ce:51:bf:34:9d:56:02:
6e:b7:1b:3c:cf:83:b7:20:89:b8:de:a2:77:47:f8:48:56:9f:
ed:12:9e:9d:54:04:59:0d:e0:62:91:24:9f:41:ae:2f:1d:43:
1a:a5:97:aa:33:d2:72:34:b5:b8:9f:02:6d:9a:cd:3f:3a:a6:
57:cc:b1:19:ef:01:c4:da:c2:14:d4:23:6a:b1:1d:23:57:2f:
a2:9a:c5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:47 2024 by rpki-client on console-fra.rpki-client.org