Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/kVNvXWQLQ998vHO5h80AuyigpRQ.roa
File: kVNvXWQLQ998vHO5h80AuyigpRQ.roa (raw, json)
Hash identifier: F6A2kMmuyNSzO/kBUTHkylu0QtKwxA0+OKw0JVUw360=
Subject key identifier: 91:53:6F:5D:64:0B:43:DF:7C:BC:73:B9:87:CD:00:BB:28:A0:A5:14
Certificate issuer: /CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Certificate serial: 0192F7894521226448400CD996D0BB348B49
Authority key identifier: 12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/kVNvXWQLQ998vHO5h80AuyigpRQ.roa
Signing time: Mon 04 Nov 2024 14:17:01 +0000
ROA not before: Mon 04 Nov 2024 14:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34762
IP address blocks: 193.109.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f7:89:45:21:22:64:48:40:0c:d9:96:d0:bb:34:8b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Validity
Not Before: Nov 4 14:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91536f5d640b43df7cbc73b987cd00bb28a0a514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:03:01:2f:27:70:cb:ef:55:47:0e:2b:83:
fb:f8:7f:d7:64:8b:ad:8e:cd:09:40:31:d6:e4:90:
d3:ea:7a:1b:cd:04:22:6c:70:49:83:e1:f2:6e:d0:
20:86:99:70:c0:fb:44:87:09:0c:f0:d0:59:70:1b:
df:a5:4e:d0:14:1e:6e:0d:67:a5:b3:96:ec:0c:5d:
53:fa:08:b3:b8:94:16:90:fb:d4:b0:4c:bf:5b:e6:
c6:66:86:de:6d:cd:72:18:bc:19:73:a8:37:73:36:
35:19:64:de:93:f5:36:ac:b5:f6:98:32:b9:dc:8a:
1e:b5:70:22:e7:cb:88:e3:16:78:af:ea:a5:ee:db:
4a:57:25:3c:18:56:a1:1f:56:dc:29:ee:ef:56:55:
ec:0b:2e:33:83:c3:e9:08:07:90:10:b6:0d:bc:99:
20:e7:7c:a2:ae:fa:5c:70:47:ce:25:01:34:a8:03:
3e:0d:4e:d1:a9:4e:5c:a8:5a:cf:30:aa:3a:85:5d:
be:54:a5:05:f0:85:ff:05:fd:25:d4:72:33:eb:d3:
ec:fe:dc:7c:6b:9c:1c:07:77:81:a8:27:f2:6a:9c:
e3:b4:d1:1c:a4:d9:57:ef:30:5a:e1:89:24:03:77:
60:95:66:cc:65:0f:fe:6b:df:ab:bb:f3:55:30:0c:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:53:6F:5D:64:0B:43:DF:7C:BC:73:B9:87:CD:00:BB:28:A0:A5:14
X509v3 Authority Key Identifier:
keyid:12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/kVNvXWQLQ998vHO5h80AuyigpRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.228.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:ac:6c:bc:dc:d2:4c:f4:21:6d:5e:8c:d9:2b:6c:38:50:09:
9c:7e:c1:c4:7e:16:7c:af:b4:f8:86:a8:98:0a:5a:38:dd:79:
d5:08:7c:29:65:e7:53:db:2e:91:68:55:4a:32:84:9a:57:07:
ca:49:8c:75:f1:8a:42:11:a8:e5:69:07:60:02:3d:48:4d:3b:
11:27:2d:bc:39:47:f6:5b:9e:f6:79:25:13:cd:ea:a2:f4:45:
cb:1b:fb:09:c0:25:e4:ad:e4:5a:b7:54:b8:76:86:98:dc:10:
1e:a0:8c:75:6c:49:3a:c5:4b:b4:ff:d3:d3:80:d8:14:eb:c8:
48:3d:a1:a4:47:b2:81:da:6d:e2:c6:5c:53:e9:c9:ba:ab:da:
93:8d:f2:d2:34:12:21:b0:26:39:9c:38:64:01:d5:0e:6b:b8:
19:4c:dd:2e:cf:62:76:f5:77:3a:0d:4c:a5:97:57:fb:1e:ae:
80:4c:54:a9:00:f2:0a:a7:51:29:77:78:c6:cd:ed:64:11:23:
7f:c3:c7:64:1e:24:60:00:74:3e:ba:0c:32:d1:09:db:b7:bd:
8a:d5:90:4b:85:c6:5d:a3:87:ca:b1:73:1d:0a:15:ef:59:95:
d8:a5:7c:1e:ab:54:d5:70:34:c0:f6:7a:73:b8:16:92:c2:7d:
fe:9d:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:10:20 2024 by rpki-client on console-ams.rpki-client.org