Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/xR109qOF0O9yLEYnbYK5KchW7aI.roa
File: xR109qOF0O9yLEYnbYK5KchW7aI.roa (raw, json)
Hash identifier: e9X/GFH2csmDjHADCoLBFgYSYi5xPnOX+rGvN9KuSh4=
Subject key identifier: C5:1D:74:F6:A3:85:D0:EF:72:2C:46:27:6D:82:B9:29:C8:56:ED:A2
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 018CC794AF6893C0285C1BE36D53FFED7795
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/xR109qOF0O9yLEYnbYK5KchW7aI.roa
Signing time: Tue 02 Jan 2024 00:30:59 +0000
ROA not before: Tue 02 Jan 2024 00:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35435
IP address blocks: 194.187.85.0/24 maxlen: 24
194.187.84.0/24 maxlen: 24
194.187.86.0/24 maxlen: 24
194.187.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:af:68:93:c0:28:5c:1b:e3:6d:53:ff:ed:77:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Jan 2 00:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c51d74f6a385d0ef722c46276d82b929c856eda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0d:b3:c6:06:88:b2:09:f1:fa:8c:9d:94:25:
72:41:2f:33:51:9d:b4:d2:93:14:30:07:a3:78:cd:
c4:1d:0b:38:b6:e4:6c:40:e8:f4:ea:3e:14:48:d1:
81:ce:94:4d:b4:9d:6b:7d:1a:83:cc:e4:36:02:05:
e5:ec:c9:0c:76:eb:67:94:24:66:59:c1:f2:93:b6:
6a:9e:2e:fd:54:b8:28:6a:0e:c6:e7:cd:90:50:a9:
ca:0d:f0:98:86:c9:ef:d1:30:c2:f5:1d:5b:27:56:
9f:3a:75:14:48:f0:d3:1a:2a:a7:9a:2a:15:28:58:
65:e1:62:09:9d:5f:db:f6:f1:3a:11:25:39:43:b9:
54:b9:0d:dc:70:4f:31:60:c8:32:90:57:17:10:69:
cf:83:af:c2:aa:6e:0a:f6:e1:c5:ae:dd:51:93:4a:
92:c4:97:0d:b5:55:dc:82:52:7e:1d:71:70:bc:e1:
82:94:02:ab:b7:77:d1:64:0f:4a:0a:f2:d1:5e:21:
10:a5:d6:96:7e:d5:2a:61:10:88:23:44:8e:86:4f:
48:0c:01:0f:1e:e8:c3:9e:10:d7:cc:df:46:60:ce:
11:46:59:f7:0e:4d:af:9a:c5:84:48:ba:2e:18:15:
45:c2:e8:e9:74:77:1f:26:39:5d:72:12:69:5c:45:
94:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1D:74:F6:A3:85:D0:EF:72:2C:46:27:6D:82:B9:29:C8:56:ED:A2
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/xR109qOF0O9yLEYnbYK5KchW7aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.84.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:70:76:4a:ef:03:d4:a9:fc:4e:ad:79:f0:9a:0f:87:ac:86:
95:4e:b6:f5:9a:4f:64:d1:3b:93:54:8a:a6:5b:3c:9d:92:7b:
4f:c4:11:39:0a:f6:fd:93:89:af:92:3e:0d:3c:68:0d:12:07:
cc:56:c2:71:04:52:d7:74:a6:50:ee:f2:35:cd:d4:36:90:cb:
c8:5d:41:32:0e:fb:2b:78:53:a6:d0:b2:89:d3:01:bf:d2:c5:
8a:31:fd:5e:8f:bf:84:08:09:c8:e3:ab:dc:05:7c:4f:5a:c9:
8e:fe:0d:14:73:18:04:84:51:62:e4:30:7e:de:c4:80:1a:07:
ac:cd:4f:d6:09:0b:3b:fa:02:34:ef:09:22:c2:7e:c2:b2:61:
6c:6c:10:45:27:d4:82:85:96:ee:4d:8c:be:b2:dc:aa:90:9a:
40:e9:a4:29:f7:a1:ac:c7:72:46:9c:39:db:13:79:c7:75:79:
47:82:d0:33:24:96:0a:82:e0:28:15:c1:4f:dd:ab:59:61:73:
69:a6:43:06:cc:c1:ce:1d:3d:72:55:43:0d:fd:8f:47:ff:f8:
e7:fa:99:2d:e6:41:78:fe:8d:84:e5:e7:b6:a4:50:51:4e:55:
77:04:e4:51:e3:12:73:c0:f4:42:44:db:bb:0e:61:eb:8f:a6:
5b:97:dc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:13 2024 by rpki-client on console-fra.rpki-client.org