Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/P9I8oqsE0REDAso_0azvcZ6Fa30.roa
File: P9I8oqsE0REDAso_0azvcZ6Fa30.roa (raw, json)
Hash identifier: h7GgAE2jhLLo1g9R5LuZGb6aVyyhFHuVtJk4CbBA5RA=
Subject key identifier: 3F:D2:3C:A2:AB:04:D1:11:03:02:CA:3F:D1:AC:EF:71:9E:85:6B:7D
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01916A26F1F4D22C3298D457F1AFD5B17C31
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/P9I8oqsE0REDAso_0azvcZ6Fa30.roa
Signing time: Mon 19 Aug 2024 10:20:22 +0000
ROA not before: Mon 19 Aug 2024 10:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47447
IP address blocks: 185.127.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6a:26:f1:f4:d2:2c:32:98:d4:57:f1:af:d5:b1:7c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Aug 19 10:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fd23ca2ab04d1110302ca3fd1acef719e856b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:08:c1:95:35:e8:0c:e4:78:0f:81:2d:2b:
c0:df:2d:e5:63:10:27:25:92:2f:f9:d0:f1:f0:8a:
ad:58:54:a4:f1:49:8b:f5:c0:2a:bd:f1:a8:91:3f:
ec:e8:63:70:48:ec:83:9e:5f:71:b4:b3:24:59:bb:
8e:36:e2:4f:80:11:12:0d:91:ce:36:82:8a:a6:af:
90:47:48:e4:08:11:10:38:c0:1b:c2:2f:24:5e:d8:
88:5b:34:6e:3e:96:93:e7:a2:84:6d:1c:e4:4d:76:
84:29:29:5b:86:59:9a:ed:01:f2:17:00:e7:6a:fc:
54:71:8a:a8:a3:59:ac:23:cd:f7:c6:08:82:58:c4:
f5:39:24:73:9f:e9:e7:70:bd:ba:ee:95:6c:eb:65:
ae:3a:93:36:c8:6a:5b:0d:86:e8:ad:d2:fd:5e:e2:
0e:4a:4e:15:84:46:b3:8c:46:bb:b8:ff:e6:ea:d8:
1f:3e:02:ed:5f:69:7d:a0:98:f0:04:c2:d6:ba:3b:
05:ac:a8:f7:1b:d9:ce:9d:98:c0:bf:5b:a8:0b:a6:
43:22:d9:fe:59:2e:cd:44:91:bd:6a:31:0a:64:6a:
8e:7e:b2:09:45:b0:15:40:4d:e4:d0:3b:0d:9b:02:
f8:f0:58:a5:18:49:e0:f3:1f:55:e8:fd:fe:0a:26:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D2:3C:A2:AB:04:D1:11:03:02:CA:3F:D1:AC:EF:71:9E:85:6B:7D
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/P9I8oqsE0REDAso_0azvcZ6Fa30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.94.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fb:7e:46:15:3a:10:ed:7b:b0:6e:84:7f:48:af:93:ad:75:
31:38:01:25:6e:b1:0f:9b:85:9d:fb:0a:1b:98:23:7f:aa:7d:
2c:f1:e9:13:d6:76:8f:4b:cd:a7:49:bf:39:1c:d1:e0:99:a1:
7b:05:8e:1e:c7:de:5f:96:13:f2:4e:2e:39:f7:89:18:e9:8e:
c6:fa:e5:3d:61:0a:e3:a6:d6:ac:22:f4:98:b2:39:eb:c1:82:
f7:2f:9e:af:14:d0:24:16:a9:ef:05:ce:ca:ed:14:5f:62:eb:
22:05:b6:ad:e2:a9:b0:bf:d7:fd:00:b2:7c:6e:19:92:ef:cd:
19:63:14:1a:85:4d:28:c8:2f:96:f3:b1:a1:3d:06:55:51:e5:
8d:a6:df:ea:07:5a:a9:23:7f:4b:65:2a:e6:21:09:26:65:9e:
28:3e:3c:49:a5:ff:a3:10:06:3d:3b:b9:23:6c:34:39:c9:85:
85:c3:62:2f:8d:a5:08:db:98:a2:6a:ba:ed:ca:85:78:6b:51:
c8:77:ff:d3:c9:41:8b:0b:38:a5:39:83:82:0c:4c:b0:4b:a6:
7f:2d:61:2d:a7:de:e3:d5:be:75:4d:f0:48:d8:1f:7c:ac:1d:
3a:f4:a2:ee:d1:1a:0c:16:4f:ae:ad:11:46:f9:44:49:99:3f:
a0:87:dd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:45 2024 by rpki-client on console-ams.rpki-client.org