Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1bRPzSb8IHbfflf9YsOg-9hnf-g.roa
File: 1bRPzSb8IHbfflf9YsOg-9hnf-g.roa (raw, json)
Hash identifier: 5lOX3Ipj8P0YWaHSa5sE9wTAvoxIvxxnfCMb7xecWsI=
Subject key identifier: D5:B4:4F:CD:26:FC:20:76:DF:7E:57:FD:62:C3:A0:FB:D8:67:7F:E8
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019256D2329FE421EE83E9410BF224296594
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1bRPzSb8IHbfflf9YsOg-9hnf-g.roa
Signing time: Fri 04 Oct 2024 09:17:49 +0000
ROA not before: Fri 04 Oct 2024 09:17:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 193.17.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:d2:32:9f:e4:21:ee:83:e9:41:0b:f2:24:29:65:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Oct 4 09:17:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5b44fcd26fc2076df7e57fd62c3a0fbd8677fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:a9:1f:c6:2f:de:bf:a0:8d:74:b4:f6:84:
eb:95:fd:82:38:e5:47:5f:2b:ca:88:0b:57:9a:08:
01:31:77:8a:58:39:ab:d2:8e:18:c2:a8:e8:e6:cb:
2b:12:90:a9:ca:6e:99:35:f2:68:df:25:81:fc:6d:
a0:25:86:95:98:55:87:dc:18:e3:67:05:fc:8a:39:
2f:b6:e9:78:e2:f2:14:6b:6a:fc:9c:ee:26:e3:35:
02:78:a6:27:26:7e:86:d4:25:bf:b0:54:de:d9:ba:
f1:37:9c:0f:b5:01:4c:00:1f:f8:3f:90:4d:72:d3:
0d:32:db:30:5c:a1:2c:64:ed:71:95:af:ba:b5:65:
7e:30:2f:0e:49:84:27:26:a9:7a:61:60:06:69:41:
d2:60:d8:03:ad:0d:f3:90:d6:f9:35:68:fd:84:4e:
4e:b6:b3:74:92:31:49:f3:9f:58:09:bc:aa:07:c9:
09:69:1a:0b:cd:0c:90:02:c4:b6:23:6a:e8:bc:58:
50:f0:76:53:f0:ad:14:14:5d:ca:05:24:9d:e6:0d:
83:92:fa:00:5b:b0:26:c6:ca:d8:95:0a:f6:ad:be:
e2:d2:4e:bf:bf:d9:7f:4e:8b:ee:05:b1:0e:d9:78:
98:fa:83:5f:db:00:12:e8:3c:ce:12:77:4d:26:17:
c9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B4:4F:CD:26:FC:20:76:DF:7E:57:FD:62:C3:A0:FB:D8:67:7F:E8
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1bRPzSb8IHbfflf9YsOg-9hnf-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8f:e2:e9:b0:40:71:18:76:52:06:eb:29:6f:dc:19:7c:40:
bd:72:38:59:ad:ba:01:3a:ce:f9:da:86:c6:53:03:8d:77:86:
26:7d:f7:97:d7:94:7e:1f:dc:98:91:67:ab:42:4c:3f:2a:f1:
13:9c:7e:c6:d0:ab:ed:bb:3d:b2:3a:38:b6:39:1e:fc:51:01:
5b:78:a2:3f:ee:04:47:86:5c:ba:d4:1a:41:6e:0b:f1:ca:15:
67:93:8a:a6:dc:43:52:eb:9b:06:8c:70:8a:aa:4b:cf:fe:e0:
cd:9f:14:c5:d0:e4:2d:62:fe:a7:ab:b2:40:9f:9d:d0:24:ba:
b0:c6:a2:2a:3c:db:5d:6a:10:ab:8f:9c:38:b9:a8:80:40:f9:
1d:f2:25:7f:36:45:03:36:46:45:2d:88:71:be:68:e0:c2:93:
1b:88:4c:40:90:86:50:9d:33:5b:a7:42:2d:6d:a6:23:d6:39:
8e:45:53:21:33:56:c9:d9:2f:a4:fc:5f:e7:83:69:8c:55:be:
22:7e:87:f8:90:fe:e3:e3:93:b8:fd:4f:9e:86:0f:df:e1:06:
d1:f9:b5:f0:28:6a:40:ba:e9:9e:c5:bb:38:39:cc:55:51:0f:
04:db:bf:03:ee:da:c2:fa:34:ca:62:13:2d:3b:1a:78:fb:fc:
e8:0c:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:55:50 2024 by rpki-client on console-ams.rpki-client.org