Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/9TPKUsOh6ckdQD-UWC80AcW65Ho.roa
File: 9TPKUsOh6ckdQD-UWC80AcW65Ho.roa (raw, json)
Hash identifier: rAbARoYDDdjsVPZ7iUfSLngY8oYSNhDafzf5//vOgA4=
Subject key identifier: F5:33:CA:52:C3:A1:E9:C9:1D:40:3F:94:58:2F:34:01:C5:BA:E4:7A
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 01901242034A4D03BE8B85D71996A8425BB2
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/9TPKUsOh6ckdQD-UWC80AcW65Ho.roa
Signing time: Thu 13 Jun 2024 15:40:34 +0000
ROA not before: Thu 13 Jun 2024 15:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.243.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:12:42:03:4a:4d:03:be:8b:85:d7:19:96:a8:42:5b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jun 13 15:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f533ca52c3a1e9c91d403f94582f3401c5bae47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:c3:b9:b1:05:4f:75:fa:d7:82:b7:b2:ef:
69:ce:5b:0d:ae:0d:1f:56:60:a4:78:6c:0a:50:7a:
91:6b:e9:f3:b1:8c:c9:a8:aa:9f:f4:47:da:0c:42:
9e:b7:a4:8e:39:fd:27:5c:72:4b:0f:ce:20:29:4f:
80:77:6e:ef:79:2b:f8:35:32:72:1c:82:99:c1:6d:
8c:c3:a1:5b:63:51:50:26:25:06:d2:4a:ce:fe:a2:
2e:4f:a0:ed:4f:0a:88:b2:b4:c3:48:e0:a6:24:d7:
6f:50:56:d8:23:bd:8a:6e:34:67:38:fe:c0:15:4f:
ed:42:61:c0:23:c3:77:07:01:14:76:c4:05:6a:cf:
bc:f0:de:c0:6a:36:5e:2f:a0:20:a7:68:46:05:a6:
21:c3:9a:6e:94:e7:86:18:dd:c1:24:97:dd:e9:41:
ff:e5:2e:b7:f6:49:44:d5:3d:dd:dd:22:fa:34:d9:
18:34:86:94:66:33:5b:e1:f1:fa:2c:88:76:29:24:
6f:f1:f8:18:4b:16:7c:bc:f3:c2:71:ac:df:98:46:
fa:ef:9a:28:8f:86:61:b4:7a:7d:e1:59:20:cb:63:
06:05:ad:dd:be:aa:a3:8a:95:28:71:8a:3d:34:96:
91:a6:4c:99:4e:5f:7d:47:64:f9:a1:b6:23:c6:7d:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:33:CA:52:C3:A1:E9:C9:1D:40:3F:94:58:2F:34:01:C5:BA:E4:7A
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/9TPKUsOh6ckdQD-UWC80AcW65Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.154.0/23
Signature Algorithm: sha256WithRSAEncryption
66:a3:62:18:3e:18:4f:d3:99:41:f9:1a:94:e7:c3:f0:71:77:
2e:e7:b8:73:4a:ed:a3:76:fa:f0:9f:ea:fa:87:92:c2:30:cf:
ce:4a:a7:41:f8:90:7b:50:4b:59:1c:54:55:44:cc:07:ba:75:
c0:25:ad:a6:20:59:47:73:cd:bf:31:67:96:ed:25:45:1a:08:
6e:33:13:1a:59:fb:a7:7b:7e:fc:28:6e:e2:92:ce:9c:12:58:
f9:47:0f:31:12:65:ee:ad:1d:98:16:35:48:02:2e:b8:fb:9d:
11:b3:ce:eb:8f:da:0d:d3:fb:2f:74:8f:82:09:df:f5:c9:9a:
ea:52:b7:d3:cb:27:0f:64:21:79:72:7b:18:cc:f2:fe:99:3e:
69:4c:08:16:79:99:eb:92:76:79:55:6e:35:3c:60:e9:b1:00:
84:3e:0d:d8:c6:24:82:9c:c6:02:14:aa:f5:3d:f1:60:65:01:
06:62:60:d0:43:23:2a:2b:e0:f6:11:b6:7a:d5:e6:bf:54:7c:
e9:01:2c:37:37:7a:41:31:80:2a:2b:32:29:60:22:87:10:98:
6b:99:e1:46:90:0d:df:2b:e1:2e:35:77:ad:37:29:1c:c5:30:
a0:3f:00:96:14:2c:f6:1a:dd:05:53:c1:20:fc:32:76:9d:c9:
83:92:31:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:28:08 2024 by rpki-client on console-fra.rpki-client.org