Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/9DDH3YfchDyH8LlyDluHGmrHxxg.roa
File: 9DDH3YfchDyH8LlyDluHGmrHxxg.roa (raw, json)
Hash identifier: ZPnfc6OdikB1wbOnUc5tCqGuHcx8uUe1XlNKvP46OSU=
Subject key identifier: F4:30:C7:DD:87:DC:84:3C:87:F0:B9:72:0E:5B:87:1A:6A:C7:C7:18
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 01901669286438D2CDE6712B203AB8F34E2E
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/9DDH3YfchDyH8LlyDluHGmrHxxg.roa
Signing time: Fri 14 Jun 2024 11:01:48 +0000
ROA not before: Fri 14 Jun 2024 11:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30781
IP address blocks: 193.93.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:16:69:28:64:38:d2:cd:e6:71:2b:20:3a:b8:f3:4e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: Jun 14 11:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f430c7dd87dc843c87f0b9720e5b871a6ac7c718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:98:99:fa:e9:83:0e:31:7c:48:22:d9:03:
0f:82:cd:b2:f0:42:94:00:cb:e6:13:22:f2:5b:42:
f0:f7:65:68:80:15:7c:5a:b5:55:e2:12:3e:4a:96:
8f:c9:cd:1b:34:df:de:74:b4:9d:e6:83:d9:b5:a1:
2d:6f:ff:d4:39:b5:57:12:6a:c1:8e:3a:52:81:34:
c7:cd:80:6a:92:9a:e1:25:4a:e3:22:44:49:a5:f4:
62:0c:fe:38:98:c5:fb:08:f9:d5:e7:91:ab:f1:e0:
b5:39:65:69:13:d4:18:11:52:49:cb:5f:f8:b6:b0:
fe:1a:70:00:13:f8:1a:aa:96:3c:91:da:69:19:3c:
8b:70:2d:e6:6d:b6:e9:43:5e:02:0f:74:c0:f5:46:
4d:e2:f6:43:88:fa:aa:f9:d2:cf:77:05:d9:78:d3:
65:3b:31:b7:58:d2:02:f6:9b:13:9d:c4:af:9c:c8:
1f:b5:29:04:80:4f:12:09:b5:7c:ff:37:63:5e:9e:
51:b7:9b:85:a4:f1:cc:5c:ee:c2:79:c8:cd:13:e6:
0a:f8:02:c1:82:30:23:82:da:5b:a9:1a:3e:ed:b5:
3d:b9:f9:cf:c1:e9:a4:17:48:64:3f:2e:c3:8d:66:
31:28:1b:02:36:c0:a3:c4:e8:aa:e4:cc:ed:74:74:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:30:C7:DD:87:DC:84:3C:87:F0:B9:72:0E:5B:87:1A:6A:C7:C7:18
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/9DDH3YfchDyH8LlyDluHGmrHxxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.40.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:aa:02:91:03:9a:66:be:f6:cc:68:31:df:82:43:67:02:e3:
52:7f:92:65:7f:39:ce:6f:8c:9a:a6:ba:7c:08:34:13:c4:11:
f1:1d:87:1d:7f:fc:c1:22:9b:45:e7:16:58:10:0b:33:62:40:
d7:a7:06:a0:83:6e:61:43:53:e0:ac:b0:60:10:3a:a9:af:f8:
1c:df:7d:e8:ca:97:60:a2:82:5c:d1:57:8e:ca:a0:e0:47:2c:
dc:39:82:2c:1e:0d:e5:16:b5:c7:20:4f:da:7e:ec:fe:24:ba:
1b:78:fd:1d:2f:7e:74:30:0b:18:d4:00:e3:6e:de:9e:f3:98:
aa:00:f3:f4:b9:32:2d:54:3c:f2:5f:be:58:e1:b7:86:e9:b2:
88:2a:2a:6a:71:26:45:68:39:0e:64:42:d0:9e:e9:c1:9c:46:
5c:36:1f:f9:82:9b:fb:65:a2:3a:c9:3a:24:ec:46:9f:83:e0:
93:fe:c0:93:28:dd:49:b3:52:24:13:32:80:7d:5d:82:1a:f0:
e8:aa:06:fa:2a:d4:4d:3a:f6:3e:47:63:d3:fd:2b:21:1c:16:
86:08:c0:43:95:dd:67:68:11:a4:d5:db:45:e9:cf:72:fa:5b:
ca:31:fa:70:8b:78:94:d3:ba:e6:5a:4d:81:44:65:eb:b3:9e:
a5:d4:35:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:06:01 2024 by rpki-client on console-fra.rpki-client.org