Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/x9gT3xJFOfS4Vk8M8fvDhykjouI.roa
File: x9gT3xJFOfS4Vk8M8fvDhykjouI.roa (raw, json)
Hash identifier: 0GSWeew2Stdv7Kj1W2S3rC+Kf4/urU7WWBkYMbHYW6A=
Subject key identifier: C7:D8:13:DF:12:45:39:F4:B8:56:4F:0C:F1:FB:C3:87:29:23:A2:E2
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 018CC64B5F92CE1554908251DF72AE5699FC
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/x9gT3xJFOfS4Vk8M8fvDhykjouI.roa
Signing time: Mon 01 Jan 2024 18:31:17 +0000
ROA not before: Mon 01 Jan 2024 18:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202863
IP address blocks: 81.94.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5f:92:ce:15:54:90:82:51:df:72:ae:56:99:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7d813df124539f4b8564f0cf1fbc3872923a2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:f2:da:cd:11:24:b0:86:1a:a2:19:af:50:
08:d8:b8:34:66:e5:68:a5:25:68:97:81:6f:e9:04:
19:d8:c3:6e:ba:7e:5b:8c:18:ee:05:00:5e:44:74:
72:24:aa:26:ed:c3:ae:51:4b:99:b1:52:e1:4a:d5:
f8:64:cf:96:84:33:d7:8e:9c:2e:9e:47:37:9c:7d:
0b:7c:49:08:5b:0e:ff:93:6d:25:42:e2:c6:5f:6c:
36:51:48:a6:15:af:b3:f1:51:03:c0:07:0f:c6:39:
aa:79:f9:5f:cb:8c:18:78:73:5b:56:a4:0b:15:e4:
10:23:f7:1f:75:14:17:93:0a:90:07:2f:72:9f:19:
a7:47:17:8a:e6:e7:51:be:4b:2b:4a:43:6c:9b:64:
32:cc:f2:ea:b4:6d:a8:19:16:a8:40:f9:de:05:0c:
fd:d0:2e:1e:dc:c7:d8:5c:a0:06:e7:13:0a:f7:4c:
1a:37:55:e4:82:60:cd:87:49:06:ac:60:6d:04:3e:
94:bb:20:7d:a8:5e:01:87:c1:cd:00:04:f7:c1:67:
e3:e6:3e:4d:97:dd:9e:cf:aa:b8:d1:37:5d:53:ad:
9d:05:34:ce:c8:fd:b7:aa:3c:bb:55:20:31:d5:23:
df:ec:7a:4e:b2:ec:5b:77:26:d3:58:4e:fb:9d:1b:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D8:13:DF:12:45:39:F4:B8:56:4F:0C:F1:FB:C3:87:29:23:A2:E2
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/x9gT3xJFOfS4Vk8M8fvDhykjouI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.234.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a6:bb:13:6c:69:d5:7a:1f:d8:b6:ea:af:bf:0c:d1:d1:5d:
b2:5d:34:84:32:ab:0e:9b:07:77:ff:37:70:ea:d1:6e:3a:ae:
33:2a:6f:20:4f:d5:fc:b6:28:04:c8:9a:8a:0c:d2:bc:c0:e3:
e1:27:48:f4:83:e3:6f:32:90:ff:4b:61:e1:33:77:5c:56:be:
95:08:b2:18:7a:af:21:e6:73:0f:c1:e2:6c:82:ec:ac:83:d2:
19:60:7c:1b:ca:52:a4:64:5b:8a:8b:0c:0d:e3:e6:c5:05:aa:
5f:69:79:9e:47:a0:7a:ee:8c:5f:33:a9:fc:b1:80:0e:19:30:
dc:ba:9b:0b:55:24:93:31:a6:2c:41:f5:0b:bf:47:43:d0:7e:
f4:6d:0a:46:bc:18:6e:62:ae:fb:2a:38:e4:8c:4c:f6:da:2e:
f3:69:65:61:7a:21:40:5f:fd:9f:b0:2f:77:f3:b5:5c:00:37:
88:d8:9e:35:c1:2b:47:21:cd:bc:87:b4:49:b7:4f:dd:9e:9c:
00:ae:f7:be:2b:be:74:9b:f7:f0:07:0c:07:7a:fc:9c:88:fd:
95:7a:e1:1b:ca:39:0f:9a:db:ba:73:2b:c2:e0:6a:8b:d0:b3:
b4:49:92:8d:b2:1c:52:4c:14:74:b3:55:85:54:b1:22:a8:cd:
29:0d:6b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:10 2024 by rpki-client on console-fra.rpki-client.org