Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/9_HISp5np-rufXfGZ9CUq2lgGcs.roa
File: 9_HISp5np-rufXfGZ9CUq2lgGcs.roa (raw, json)
Hash identifier: Kw0i3jchC2gPLj/uCQsPUiJ5hKVHui+AiWevos0X1HA=
Subject key identifier: F7:F1:C8:4A:9E:67:A7:EA:EE:7D:77:C6:67:D0:94:AB:69:60:19:CB
Certificate issuer: /CN=7a3862134f141365ef887902e6057c28b2829c9d
Certificate serial: 018CC94E2A905E3559303A620325B9AC115E
Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/9_HISp5np-rufXfGZ9CUq2lgGcs.roa
Signing time: Tue 02 Jan 2024 08:33:12 +0000
ROA not before: Tue 02 Jan 2024 08:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 194.124.232.0/23 maxlen: 23
2001:67c:1984::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2a:90:5e:35:59:30:3a:62:03:25:b9:ac:11:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d
Validity
Not Before: Jan 2 08:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7f1c84a9e67a7eaee7d77c667d094ab696019cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:83:2e:9d:fa:4b:a0:52:6f:5d:f0:b1:94:
c1:b7:bf:e4:f5:ad:69:fe:33:3f:b0:76:dd:9c:67:
ab:f2:20:3d:09:64:85:b2:03:d9:b5:1b:4c:80:f9:
74:71:fe:14:51:c2:45:fd:82:0b:72:c8:04:cc:b3:
1a:dc:15:26:e5:4c:e5:d1:46:24:e7:18:db:31:1c:
d9:82:6e:8e:aa:7c:47:05:df:69:cd:97:16:88:bb:
0b:d3:65:93:42:e6:a0:a4:41:30:ac:58:17:88:5e:
82:f0:81:41:c9:d6:ca:d1:a5:cb:1d:1c:cb:6f:d4:
70:e7:95:c1:8c:a8:bd:cc:67:62:ee:1f:84:6c:85:
b6:bb:da:49:d7:3e:41:a8:30:d1:87:17:99:2b:a2:
07:36:25:26:f8:7e:11:77:2f:47:07:b9:50:b7:2f:
35:fd:6e:57:aa:ce:f6:83:ee:2a:bb:cc:4e:6f:0c:
68:c6:85:b1:d2:bd:32:ec:42:13:28:75:d5:7f:8a:
f8:c4:2f:63:94:77:f9:c5:65:55:f0:3c:7e:c9:30:
46:8d:08:53:65:91:2e:5a:49:fe:a8:e8:f6:5f:0c:
7b:02:63:8f:45:c3:23:93:5e:c1:90:2f:2b:06:07:
dc:ef:e6:7a:71:a6:22:15:27:ce:cb:49:7c:00:88:
39:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F1:C8:4A:9E:67:A7:EA:EE:7D:77:C6:67:D0:94:AB:69:60:19:CB
X509v3 Authority Key Identifier:
keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/9_HISp5np-rufXfGZ9CUq2lgGcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.232.0/23
IPv6:
2001:67c:1984::/48
Signature Algorithm: sha256WithRSAEncryption
03:f5:fc:0d:3c:47:ef:bd:af:b1:b7:40:61:25:2d:21:cc:a3:
b4:a1:55:e5:0a:9e:26:1c:9e:b4:d6:b6:59:d3:a2:c2:9a:c0:
32:41:11:f8:c3:ed:0c:b6:fc:5b:0e:64:17:ed:5b:a7:70:2b:
6e:d9:44:e7:79:b1:11:71:9d:e1:f3:20:ab:66:7b:87:d0:5c:
87:18:3a:67:db:fb:af:b6:d2:63:4a:ca:e4:21:ed:4b:51:8f:
e0:af:4b:90:73:31:d2:e7:a6:f3:33:1d:3e:4f:8f:c7:c5:37:
8a:df:dc:81:e7:1c:6b:4b:47:86:e5:12:85:cc:9f:d1:f9:81:
44:27:b6:7d:41:f3:b0:2f:81:69:10:4c:39:e7:e5:b1:f1:93:
18:06:6f:86:77:aa:70:e5:9b:9c:0b:d4:1f:9c:10:26:69:4a:
43:2c:e9:76:cd:06:dd:2a:ca:91:93:29:87:78:7f:7b:73:8f:
fb:90:24:ca:06:e3:7d:d9:f0:b1:0c:9f:ec:c4:e9:17:c2:5d:
31:f2:55:d2:11:f0:87:15:e1:59:fb:81:dd:f9:9c:ea:f2:60:
82:7b:aa:25:87:7d:fb:33:21:b7:ca:7f:14:b9:45:a7:43:47:
47:da:3d:a6:47:ee:6f:9b:76:ec:76:2c:78:66:5b:b5:e4:31:
a8:b5:67:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:33:50 2024 by rpki-client on console-ams.rpki-client.org