Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/s9hLQF2TRkhqJnzzU09nw3sVBOI.roa
File: s9hLQF2TRkhqJnzzU09nw3sVBOI.roa (raw, json)
Hash identifier: AT1oVXUdAm+Gx+Bc5squXYoX/UhcgdmQSjMIaP0jguE=
Subject key identifier: B3:D8:4B:40:5D:93:46:48:6A:26:7C:F3:53:4F:67:C3:7B:15:04:E2
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 0191FA32088D3D090F20B5E724E028704AC0
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/s9hLQF2TRkhqJnzzU09nw3sVBOI.roa
Signing time: Mon 16 Sep 2024 09:37:48 +0000
ROA not before: Mon 16 Sep 2024 09:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48851
IP address blocks: 141.226.100.0/24 maxlen: 24
141.226.110.0/24 maxlen: 24
141.226.252.0/22 maxlen: 24
185.139.240.0/22 maxlen: 24
2a07:1980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:32:08:8d:3d:09:0f:20:b5:e7:24:e0:28:70:4a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Sep 16 09:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3d84b405d9346486a267cf3534f67c37b1504e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:a1:0f:c4:55:83:06:71:5c:f2:80:7f:1f:
45:0a:c2:df:09:02:61:14:57:40:9e:7e:df:7f:b2:
23:ef:cc:e1:0b:9c:a8:fc:35:2b:c6:73:6a:d1:aa:
82:e4:f4:87:db:55:17:7a:3d:4b:3a:0b:13:82:d7:
a2:b5:0c:29:dc:bf:f1:a4:69:77:b9:86:39:62:f4:
a0:d1:54:48:c1:fe:25:0f:0c:c9:9a:6e:d0:5c:83:
e8:80:b2:7f:c9:c3:c6:a2:b5:9f:bd:c5:a7:61:9a:
10:69:d7:ed:7e:c5:32:c9:f7:2d:9e:f8:32:b6:66:
13:ad:26:7c:05:cc:cb:9e:7e:c4:54:b8:df:3b:a7:
35:dc:97:7d:a4:4a:1e:87:c4:d9:b2:61:6c:4e:e1:
55:66:f8:03:a7:93:81:67:d7:ff:5a:69:25:d9:46:
81:29:01:72:a8:1a:54:66:32:65:91:08:f5:57:e1:
1a:05:14:ed:53:16:6f:ad:ca:42:30:ab:01:0d:03:
90:b4:af:69:a6:b9:f1:50:ed:a3:31:d6:33:72:4a:
c1:1e:c9:28:1e:9e:94:b9:67:57:61:84:8c:75:82:
69:51:bf:5a:fc:ab:b3:e6:83:9f:05:84:82:56:83:
52:d6:f3:50:db:7f:2d:da:3a:4b:63:c3:f6:a1:46:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D8:4B:40:5D:93:46:48:6A:26:7C:F3:53:4F:67:C3:7B:15:04:E2
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/s9hLQF2TRkhqJnzzU09nw3sVBOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.100.0/24
141.226.110.0/24
141.226.252.0/22
185.139.240.0/22
IPv6:
2a07:1980::/29
Signature Algorithm: sha256WithRSAEncryption
74:b5:d4:88:71:36:db:90:48:0f:eb:9c:17:23:bd:b1:31:2f:
68:80:d0:0f:7e:03:82:0c:d5:23:40:ad:6d:9c:5d:fd:9a:73:
42:55:ea:0c:25:75:3b:bf:3c:e8:6b:9a:d2:d7:f5:ee:db:21:
3f:0f:d3:e4:69:43:ae:3e:45:73:8c:cd:0b:45:32:25:29:48:
21:18:32:95:23:db:53:a5:fb:36:ea:07:31:0a:56:0b:f0:0e:
53:18:67:05:e0:bd:17:97:ec:f0:79:3b:9a:3a:4f:66:82:fa:
5f:87:77:07:d4:df:42:b7:e3:4e:5a:51:2b:8b:ce:35:05:33:
a1:38:ec:f8:19:7d:fd:a8:4c:bc:f7:fc:4d:d3:b3:0d:db:ea:
df:ba:87:ce:01:26:95:b0:84:96:83:de:6e:5e:1a:59:19:ae:
6e:3a:b2:23:43:4c:8e:25:dd:c9:a1:7e:02:0e:db:e3:02:d2:
ba:22:1c:d0:db:6b:c4:7c:c4:4b:7c:53:7a:58:96:be:9b:c1:
b8:d5:51:cc:23:d4:4c:1c:24:51:60:e9:5e:c3:c7:5e:c8:d6:
b7:e6:f4:e0:46:c1:d3:3a:45:f0:3c:50:07:ce:65:13:c6:3a:
56:04:76:bb:5c:f5:28:5d:d0:32:29:53:f2:26:c5:4a:11:e0:
46:69:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:16:24 2024 by rpki-client on console-fra.rpki-client.org