Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/t2a9pzNxoLLA-QYMZkLMUaz09S0.roa
File: t2a9pzNxoLLA-QYMZkLMUaz09S0.roa (raw, json)
Hash identifier: r7eWKkmQQgll7SZzWBATXRlzThOM2FHa741QewqiCKQ=
Subject key identifier: B7:66:BD:A7:33:71:A0:B2:C0:F9:06:0C:66:42:CC:51:AC:F4:F5:2D
Certificate issuer: /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial: 019093B64561A78B70867A967EB74B63DDD4
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/t2a9pzNxoLLA-QYMZkLMUaz09S0.roa
Signing time: Mon 08 Jul 2024 18:58:34 +0000
ROA not before: Mon 08 Jul 2024 18:58:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20911
IP address blocks: 195.230.28.0/22 maxlen: 24
195.230.28.0/23 maxlen: 24
195.230.28.0/24 maxlen: 24
195.230.29.0/24 maxlen: 24
195.230.30.0/24 maxlen: 24
195.230.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:93:b6:45:61:a7:8b:70:86:7a:96:7e:b7:4b:63:dd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Validity
Not Before: Jul 8 18:58:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b766bda73371a0b2c0f9060c6642cc51acf4f52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c8:50:f9:bf:41:45:45:f0:28:dc:da:ba:f6:
06:01:91:c3:d2:61:57:e5:e4:5b:78:fa:a5:4a:08:
34:00:fe:60:92:6a:04:e8:1c:0d:d5:1b:d4:f8:13:
fb:a5:d5:22:b4:8e:29:7b:e4:ce:79:d8:fb:64:6d:
4f:0d:80:f3:df:02:3a:7e:21:5b:44:b6:05:80:4c:
e4:ca:ed:51:6e:dd:9a:74:7e:92:11:4a:9d:f5:dc:
26:23:3e:eb:60:29:07:70:d3:da:86:93:64:30:4d:
c4:a1:9a:b8:77:1c:57:0e:b4:79:f5:d9:33:16:2c:
00:e8:44:ab:2a:db:a2:ca:4d:9a:f4:62:c1:92:0b:
69:37:73:f2:b0:93:dd:0f:53:37:e5:77:73:39:08:
e9:15:84:23:61:d5:25:87:10:f0:be:15:e3:e9:38:
c6:c5:e7:7e:a8:e3:41:21:c8:14:65:d7:3e:77:46:
67:c3:b4:99:d4:20:47:ac:39:42:af:34:e8:4d:42:
87:5c:74:e4:f1:67:7a:c4:e3:78:79:3a:c3:36:dc:
5b:a3:19:7c:2a:1b:9a:ee:df:1b:f5:ba:e8:26:c7:
0b:56:1b:e5:15:6b:9f:3c:f1:e5:4b:df:30:e4:a9:
61:87:77:eb:8b:93:c6:b9:77:fc:77:37:6f:42:20:
ed:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:66:BD:A7:33:71:A0:B2:C0:F9:06:0C:66:42:CC:51:AC:F4:F5:2D
X509v3 Authority Key Identifier:
keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/t2a9pzNxoLLA-QYMZkLMUaz09S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.28.0/22
Signature Algorithm: sha256WithRSAEncryption
38:12:ee:1b:d4:0b:9e:9c:51:9d:e9:e3:ba:a0:db:be:22:47:
f3:f3:4b:01:dd:1b:a6:69:eb:3d:3a:95:4f:c4:a6:9b:65:10:
c1:d6:9e:24:40:4e:bc:a6:e6:ab:71:96:c3:32:71:8c:a9:93:
5a:5a:b7:e9:33:0c:21:46:d3:85:32:c3:fe:80:6a:5e:40:03:
5d:0b:3d:d4:b9:07:1e:fc:56:da:3e:a3:dd:97:14:3c:26:14:
4c:71:8b:6b:f9:09:cb:6e:9e:a9:e4:84:7e:7a:3e:15:f0:70:
f7:31:d1:59:87:9d:ed:5e:d8:9b:b6:09:92:bf:bc:67:fd:98:
eb:f3:37:64:5f:98:51:78:21:72:2e:44:8b:1b:b8:46:be:3b:
77:c9:e0:ae:2b:b5:e8:ec:63:17:f3:ee:c0:0f:e0:af:f8:ab:
84:d1:9f:d7:28:81:31:19:6c:c5:84:31:b8:93:1c:0c:e8:d9:
d5:65:e0:81:05:5f:48:37:95:b7:c3:97:81:df:43:24:8d:91:
0c:f6:11:3d:ad:8f:04:12:80:69:3f:c8:2c:43:a3:54:2e:01:
e4:ef:52:e2:37:bf:82:8a:e4:0f:f5:5b:d1:13:a8:a0:e3:1a:
51:1c:8c:8e:f4:39:56:96:5f:f4:90:65:f2:d3:78:73:46:2f:
f4:97:a3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:32 2024 by rpki-client on console-fra.rpki-client.org