Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9f76eHEmu-w056iXJPQw2blwzR0.roa
File: 9f76eHEmu-w056iXJPQw2blwzR0.roa (raw, json)
Hash identifier: ygw812MDD1wzzIF0ZdPo9to4ibwhXKZY92eMYurfXsM=
Subject key identifier: F5:FE:FA:78:71:26:BB:EC:34:E7:A8:97:24:F4:30:D9:B9:70:CD:1D
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B73403F697413B1411793F13C14677
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9f76eHEmu-w056iXJPQw2blwzR0.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27822
IP address blocks: 194.2.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:34:03:f6:97:41:3b:14:11:79:3f:13:c1:46:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5fefa787126bbec34e7a89724f430d9b970cd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:1a:c4:72:3c:37:02:31:6c:18:3d:39:eb:
05:9c:20:5b:a0:65:46:74:21:88:f9:e9:14:d4:a4:
60:10:4b:fa:64:78:85:11:01:57:b2:9a:a7:97:92:
29:07:09:2d:fd:e8:b3:07:35:b5:a5:73:c4:01:11:
9b:85:47:96:41:88:8a:da:51:45:d7:44:3e:2f:73:
38:eb:ca:87:48:ec:dd:81:4a:9e:72:59:de:df:20:
d2:df:35:df:0b:72:c7:48:1d:1c:d0:a7:3b:c9:ce:
4c:9e:a7:f8:5d:2c:d1:76:01:8c:06:20:94:18:e1:
f1:33:84:4e:88:c8:60:2c:40:43:33:0f:6a:e3:db:
3a:3c:3a:ae:73:5c:37:3f:5a:d7:b7:84:bc:8a:aa:
df:76:75:22:32:b2:81:37:5a:35:6c:2b:37:22:0b:
80:1a:82:4a:46:05:50:7e:52:0e:95:c9:92:ba:e6:
5a:cc:1d:54:71:47:ac:e1:bf:19:c6:07:b1:fc:db:
dc:75:52:4d:81:db:33:7f:cf:2c:78:d8:81:bf:57:
d7:84:4a:ca:0f:a4:31:06:dd:f8:48:aa:93:27:9d:
3b:e3:e4:61:f9:5e:30:15:6f:09:ac:5a:06:c8:0c:
34:a6:e0:c5:11:09:8b:54:a0:d7:18:0a:c3:7a:3a:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FE:FA:78:71:26:BB:EC:34:E7:A8:97:24:F4:30:D9:B9:70:CD:1D
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9f76eHEmu-w056iXJPQw2blwzR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.2.69.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7e:f7:dd:9f:e7:64:ae:c9:5d:64:fa:47:f5:18:7e:88:9f:
86:7c:bb:d6:30:c3:8b:a1:aa:c1:c6:6f:92:c9:6d:89:af:ae:
75:3e:ed:77:5e:5c:c4:4b:81:c0:06:16:e9:b8:20:95:ab:54:
1f:7e:54:1f:99:62:e9:17:9c:74:8b:48:0e:35:58:17:65:3e:
b5:f0:60:7c:d7:e5:13:3b:8a:ed:b4:22:a3:00:56:74:62:6a:
7c:01:db:45:28:9e:b4:10:b7:f1:70:58:db:fb:d3:91:48:bd:
29:a6:80:d0:0a:c5:68:e6:11:39:82:71:3c:ec:73:ed:62:1e:
2d:11:66:54:dd:0c:19:a6:41:24:9a:0c:94:d7:0e:d2:23:d9:
98:01:43:af:76:62:68:c8:fb:1b:72:de:05:a7:a4:c9:fb:34:
07:a4:8a:de:82:2c:15:d8:49:10:55:6b:93:4b:36:4b:c3:3f:
3f:88:e6:1a:cd:72:fb:ce:b5:20:21:68:6b:7c:62:01:de:89:
bb:1d:88:19:df:08:31:b5:2c:e3:4c:be:14:2b:66:1d:93:74:
8e:26:0c:1d:3c:19:6b:bb:4d:16:bc:1d:34:51:7a:9c:82:d3:
56:cc:53:af:4d:a0:06:39:e2:fb:0a:d3:84:a7:d6:bf:54:ad:
2f:97:58:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:58 2024 by rpki-client on console-ams.rpki-client.org