Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ETidNRxNuNuxMf4f7_Oh3DY5M5I.roa
File: ETidNRxNuNuxMf4f7_Oh3DY5M5I.roa (raw, json)
Hash identifier: C65iz5HPvvJm/4h0DjTIn8j0lmvJjdpIKNqoxKwbgeA=
Subject key identifier: 11:38:9D:35:1C:4D:B8:DB:B1:31:FE:1F:EF:F3:A1:DC:36:39:33:92
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 0191DB5C5BE24B898E348778DC79D1198DB2
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ETidNRxNuNuxMf4f7_Oh3DY5M5I.roa
Signing time: Tue 10 Sep 2024 09:55:48 +0000
ROA not before: Tue 10 Sep 2024 09:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211439
IP address blocks: 185.169.228.0/22 maxlen: 22
193.37.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:5c:5b:e2:4b:89:8e:34:87:78:dc:79:d1:19:8d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Sep 10 09:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11389d351c4db8dbb131fe1feff3a1dc36393392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:5b:82:75:7e:e0:f2:13:f0:b1:f0:d7:2c:
6e:23:29:48:80:2c:fe:10:41:4b:2a:ea:48:32:18:
31:17:5b:7b:ab:f1:07:d8:b6:57:17:77:02:1a:b2:
12:c0:a1:3f:0c:e7:15:f0:d6:f6:7a:54:78:77:2c:
e5:c0:e5:91:75:02:1b:2e:a8:4d:a2:00:fc:cf:c9:
ab:63:3c:e3:e3:d4:41:66:81:31:d1:b0:06:92:4f:
c1:64:f0:24:f3:e1:d0:81:98:25:b7:28:2f:18:2b:
ee:20:e7:7d:83:cb:3d:c8:09:0d:67:9e:8d:b5:10:
91:fd:97:a6:b8:25:f5:17:cb:e1:45:01:5e:f5:ee:
8a:3e:2d:b9:56:f1:d9:79:79:0e:32:ff:be:a4:54:
b3:f4:ac:df:e1:69:0f:19:b5:56:2e:5b:3d:c9:b5:
47:c1:40:5a:04:96:26:ee:e2:ef:92:64:bc:62:35:
45:97:65:ef:44:c5:e6:64:62:af:7d:db:07:fe:7b:
0e:61:e2:c8:fb:87:fe:d1:af:4a:b3:79:99:32:fc:
91:db:21:39:61:bf:b0:68:94:d9:de:ed:15:d2:a4:
19:f1:7e:58:3d:e7:ad:31:28:f0:fc:fb:8a:75:69:
95:02:bd:b6:6d:e1:ac:ef:35:1f:af:47:dc:3f:e8:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:9D:35:1C:4D:B8:DB:B1:31:FE:1F:EF:F3:A1:DC:36:39:33:92
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ETidNRxNuNuxMf4f7_Oh3DY5M5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.228.0/22
193.37.220.0/22
Signature Algorithm: sha256WithRSAEncryption
13:db:90:0e:f8:3f:87:5a:44:76:3a:70:87:e2:42:c5:c7:18:
11:97:55:2f:dc:09:10:df:85:33:d0:af:26:95:04:28:46:b4:
64:4d:c2:66:b7:72:11:a2:58:ae:10:7b:d5:9a:d9:8f:56:ef:
ef:71:60:6b:47:22:b1:b3:75:78:2d:21:55:c0:4e:06:e0:e5:
4d:1b:83:76:a0:d9:3c:4a:4a:7c:40:f2:c6:df:77:6c:33:38:
1c:e7:08:91:a0:37:7a:71:36:50:94:1c:0e:5e:bd:29:ad:82:
7c:f5:db:b3:38:1b:60:2d:29:ff:96:e2:6d:f2:8c:86:bd:dd:
55:10:e4:60:05:7f:eb:56:5b:0a:72:1e:20:6a:35:a1:03:0a:
98:60:e2:16:ff:c0:d5:5f:e7:0a:ee:75:b3:98:22:6f:18:3a:
50:49:06:0b:13:1c:c9:67:db:47:69:fb:a9:05:4b:f7:2c:cf:
d0:88:2a:07:0b:bd:d3:b3:d9:06:66:a1:7d:0d:2e:ed:03:fd:
ec:24:a9:9c:c5:68:d5:e1:ac:16:98:53:8c:cc:93:c0:38:80:
6b:5b:a6:01:df:2e:e9:19:d7:56:1f:2c:a4:b7:12:0d:ab:2b:
a1:9c:0c:b2:f9:b1:63:ae:74:2c:bd:67:93:2f:f4:6f:53:e0:
c0:2c:a5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:52 2024 by rpki-client on console-fra.rpki-client.org