Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/9_tCzG-F82NZXkOFZXRwLRSY6ew.roa
File: 9_tCzG-F82NZXkOFZXRwLRSY6ew.roa (raw, json)
Hash identifier: icIJYGF1QaQZI8cQ533nXkkE0/KZEZPpMOhnXkyeGHY=
Subject key identifier: F7:FB:42:CC:6F:85:F3:63:59:5E:43:85:65:74:70:2D:14:98:E9:EC
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 0192512C93959B63A44323FAE322CFB946BA
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/9_tCzG-F82NZXkOFZXRwLRSY6ew.roa
Signing time: Thu 03 Oct 2024 06:58:48 +0000
ROA not before: Thu 03 Oct 2024 06:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31027
IP address blocks: 193.162.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:2c:93:95:9b:63:a4:43:23:fa:e3:22:cf:b9:46:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Oct 3 06:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7fb42cc6f85f363595e43856574702d1498e9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:87:28:b3:bb:80:6f:7b:c3:6b:ef:40:90:
54:15:a6:64:0a:64:c0:18:08:0a:be:7a:a5:7b:fc:
43:7e:28:18:c7:c3:7c:63:dc:2b:ac:e6:a4:a9:79:
9a:d5:a2:36:12:1d:63:30:a4:6e:4a:5c:fc:fd:d0:
42:e9:1d:b7:1d:31:5d:8d:69:3d:3b:c1:23:b4:00:
41:4c:91:48:4d:ac:bb:a9:f5:a2:68:4b:ad:a8:cd:
b6:35:d0:8d:97:96:06:40:a7:c5:57:af:e2:a8:d6:
20:cb:8b:b3:b9:9a:c4:f9:81:4b:75:95:21:ef:42:
00:eb:65:6c:f5:40:89:9e:7e:66:c5:9a:2f:f5:2d:
1a:49:0f:42:ed:de:35:ec:b0:27:57:11:a2:dd:64:
9f:f3:04:4e:a7:92:78:55:49:e2:e1:32:68:78:54:
15:aa:81:b4:83:e4:ea:ac:ae:ac:d7:14:f0:08:e4:
2f:d5:0c:dd:f1:f1:b2:24:08:43:da:6c:ec:cf:27:
cd:ad:fe:46:59:eb:c7:9c:f2:08:9f:3a:d9:04:d0:
e1:ce:02:30:92:bb:01:cb:19:a6:b5:71:63:3d:9b:
1d:29:fa:16:54:67:16:53:8c:79:aa:a9:07:66:a3:
e3:6e:b1:86:46:c8:77:88:58:fa:b5:1c:90:29:84:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FB:42:CC:6F:85:F3:63:59:5E:43:85:65:74:70:2D:14:98:E9:EC
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/9_tCzG-F82NZXkOFZXRwLRSY6ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.5.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ed:12:7b:c1:34:73:5e:ca:60:c8:17:fd:cc:49:48:18:dc:
7e:23:c8:95:3b:4a:60:98:6e:15:25:d2:2f:a1:0c:a4:11:13:
da:e4:5a:91:aa:a8:95:83:0b:e9:92:43:d0:8e:ca:6f:52:75:
be:fc:c4:36:95:90:bd:8e:f0:8c:2a:4c:70:85:fb:da:80:f1:
3b:78:b2:dd:f1:2e:b9:98:d0:6e:a9:71:84:09:c3:e5:e9:2e:
17:be:74:9c:6e:96:50:eb:0f:c0:3f:70:ee:ca:a3:d8:bd:d8:
ab:03:49:9d:b3:fc:79:db:9e:63:73:8f:3a:af:a7:c2:ec:bc:
bc:42:5b:be:62:1a:22:89:96:a8:5d:9d:81:cc:e1:cd:da:21:
c3:d6:cd:45:93:30:75:0f:39:51:08:4c:a2:ee:3d:13:36:9f:
65:f1:20:a2:29:5e:a3:e1:20:ec:dc:0f:d6:1b:ae:47:bf:a4:
73:97:ca:ad:f0:84:f3:11:5b:d6:87:15:57:4f:ae:2c:3c:32:
02:b0:ef:c7:25:5e:1c:54:e1:55:3b:82:23:d1:d1:9a:45:92:
09:cd:2f:2e:04:10:5c:f0:36:5c:b8:d9:1a:da:ac:38:ca:7f:
34:b6:d2:1f:f6:48:0c:8c:5f:3e:b8:3a:94:5f:8e:dc:98:0f:
30:d9:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:32:10 2024 by rpki-client on console-ams.rpki-client.org