Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/A0DPw0h4Szy29E3-etWbHbqVpJU.roa
File: A0DPw0h4Szy29E3-etWbHbqVpJU.roa (raw, json)
Hash identifier: ncP5TnOi5CM9uC8TWXvE+OZIeMjWKY1WXiyQOLZ7nJY=
Subject key identifier: 03:40:CF:C3:48:78:4B:3C:B6:F4:4D:FE:7A:D5:9B:1D:BA:95:A4:95
Certificate issuer: /CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Certificate serial: 018CC9BCDEE9C655633A3D2359CF3F6B1408
Authority key identifier: F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/A0DPw0h4Szy29E3-etWbHbqVpJU.roa
Signing time: Tue 02 Jan 2024 10:34:07 +0000
ROA not before: Tue 02 Jan 2024 10:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39357
IP address blocks: 193.84.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:de:e9:c6:55:63:3a:3d:23:59:cf:3f:6b:14:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Validity
Not Before: Jan 2 10:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0340cfc348784b3cb6f44dfe7ad59b1dba95a495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7b:e9:9e:24:4a:34:ea:36:41:52:8f:03:08:
5f:99:99:d8:7a:ce:d5:46:ef:a6:64:af:ad:d2:ac:
04:40:b3:d9:1a:d5:61:cb:e0:96:9c:04:9d:b5:99:
55:a1:ef:de:3c:d9:e5:70:9c:74:0e:ab:6a:06:21:
3e:66:b5:11:8e:5a:3d:90:67:94:38:9d:24:c6:a5:
62:d7:26:7c:88:05:f2:d9:03:39:0d:b3:84:9f:26:
4b:27:f7:75:02:b8:7f:45:7c:de:ec:33:4f:fc:53:
36:be:f1:10:b7:5c:ab:b4:c8:12:b9:89:6b:e9:76:
a0:c1:1e:8d:0e:b0:b5:18:5e:a6:f5:ea:79:16:e2:
17:ff:34:7f:ec:04:a6:be:3c:26:21:56:2f:9d:93:
93:f3:97:5c:1d:f1:ca:78:54:a0:ac:23:42:bc:31:
6c:ae:30:b4:e7:9b:36:38:f9:54:75:28:a2:f1:88:
e1:a1:3f:79:14:37:e3:81:55:e3:f0:9e:37:d2:5e:
e2:9c:83:55:a1:5b:21:64:ce:f6:10:5a:1a:b5:8e:
9a:19:95:bd:ca:11:c3:b8:34:9b:f9:22:cc:96:9f:
4a:62:c4:12:49:9f:70:62:47:7a:4b:8e:cf:56:d6:
bf:fa:84:14:b0:7f:e4:bf:b0:38:eb:27:4e:ab:42:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:40:CF:C3:48:78:4B:3C:B6:F4:4D:FE:7A:D5:9B:1D:BA:95:A4:95
X509v3 Authority Key Identifier:
keyid:F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/A0DPw0h4Szy29E3-etWbHbqVpJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.86.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:76:5e:fa:ff:4d:3c:51:8d:8d:4c:80:d6:47:2d:c6:f0:7e:
09:cd:d1:78:83:ed:16:63:c2:9f:a2:70:33:a5:83:99:8d:77:
8e:15:ef:20:d6:39:35:fc:8a:a4:64:c7:f6:4a:b1:2e:5d:d7:
e3:71:d2:e4:dc:ca:20:a8:22:ec:99:6c:0b:2e:fb:c5:1b:e8:
87:fa:29:eb:6c:b1:71:f3:75:4d:08:69:f1:e1:b8:8f:d6:65:
22:3b:bb:d3:e2:d6:69:66:d5:ad:eb:1a:d6:18:f3:61:18:2b:
24:d9:36:0c:2b:45:5c:04:6f:62:da:5f:7f:53:09:c8:91:c3:
6b:8d:3d:44:40:8a:76:ec:a2:02:6c:00:50:9c:15:dc:59:7f:
98:46:67:f4:02:1e:8a:b4:88:65:45:f7:16:81:00:7b:53:e8:
84:e9:7b:67:ae:8a:40:5b:75:8a:fb:aa:e8:a1:44:f7:a9:42:
3d:03:62:02:2a:f5:7b:d6:50:5f:b8:db:8e:cc:5b:00:34:21:
94:b0:37:f1:21:00:d3:11:68:e5:88:57:37:4e:7f:fb:18:25:
8d:ee:13:d3:97:79:c8:b1:10:4b:54:a2:f8:ba:db:c9:c8:a6:
4c:fb:8e:81:05:24:ad:8b:cb:4d:54:e5:07:a6:87:47:be:72:
14:38:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:33:46 2024 by rpki-client on console-ams.rpki-client.org