Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/H9fN1hSmfsad3d_SnQYiD79-9ns.roa
File: H9fN1hSmfsad3d_SnQYiD79-9ns.roa (raw, json)
Hash identifier: ZWQ8LBcPKNhy3m9FigzrKGfFO4MZaUKVZCRFuRAjbl8=
Subject key identifier: 1F:D7:CD:D6:14:A6:7E:C6:9D:DD:DF:D2:9D:06:22:0F:BF:7E:F6:7B
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 018FB0744B8BA6832E183318E40BB67ED831
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/H9fN1hSmfsad3d_SnQYiD79-9ns.roa
Signing time: Sat 25 May 2024 15:52:42 +0000
ROA not before: Sat 25 May 2024 15:52:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 93.157.106.0/24 maxlen: 24
94.103.188.0/24 maxlen: 24
213.232.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b0:74:4b:8b:a6:83:2e:18:33:18:e4:0b:b6:7e:d8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: May 25 15:52:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fd7cdd614a67ec69ddddfd29d06220fbf7ef67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:51:5c:e1:fd:50:b3:96:15:73:2b:b6:21:
ee:c7:5d:81:be:4a:65:d3:30:77:3f:ad:2d:65:7a:
67:7d:e6:97:c1:13:41:0e:be:21:24:58:2f:c5:c5:
5c:56:a7:3d:5f:86:61:b1:ba:9a:ee:bd:c0:1a:05:
d7:c2:8a:8a:a9:a4:5b:9d:c3:96:f3:52:06:d7:2c:
ec:0f:fa:e2:ce:a1:cd:35:c4:a5:1d:06:d1:62:c3:
5d:fa:df:d0:2e:4d:c0:48:50:de:41:32:4b:b0:bf:
50:8a:de:ef:23:45:c0:04:66:18:47:c6:eb:17:2d:
7a:7e:c6:c5:db:eb:13:9d:cc:83:50:15:cf:a0:c6:
be:8b:1d:97:c7:19:8d:de:78:1c:1c:43:d8:0d:a3:
69:24:2a:cf:ac:9d:81:50:27:d3:59:af:cc:3a:5c:
0d:da:b7:33:c8:6c:fe:c7:2a:df:bc:26:0a:1b:ff:
a1:ed:a1:fd:f6:be:10:5a:4f:ea:ae:76:3f:38:3a:
89:df:b0:6d:6b:c5:28:55:93:c1:82:6c:4c:f1:cb:
cd:87:07:5e:19:eb:70:b7:26:52:98:7f:4c:95:a4:
43:54:f9:e3:c8:7b:2d:f2:4d:ba:87:28:c8:70:a5:
dd:ad:5d:91:97:0e:2a:f1:14:5a:92:6a:37:9b:eb:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D7:CD:D6:14:A6:7E:C6:9D:DD:DF:D2:9D:06:22:0F:BF:7E:F6:7B
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/H9fN1hSmfsad3d_SnQYiD79-9ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.106.0/24
94.103.188.0/24
213.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:31:7f:5b:b7:de:52:86:f3:2c:29:97:80:32:e0:58:ca:fe:
fa:35:52:60:80:4a:fe:97:0f:1e:9f:7a:e8:28:b0:39:b3:cb:
2d:a4:74:65:6c:66:49:f4:4b:f9:04:12:71:4a:a3:34:0b:8a:
26:fb:60:e3:55:a8:f9:36:81:2d:94:d2:35:20:cd:db:69:ae:
ce:8e:86:df:ba:e4:82:22:e3:3e:41:d2:57:94:e7:93:2f:1e:
6f:5b:b7:3b:71:38:7c:ab:ce:cf:b4:f5:c2:df:67:ea:3e:a0:
6a:1f:94:1f:b7:75:6f:c4:83:e1:cd:37:4d:d0:3e:72:ee:c0:
c8:6b:93:7b:3e:f5:c1:f3:c2:da:30:2c:6f:05:af:a1:3b:55:
c8:b9:cc:7b:1e:07:29:8d:34:c9:34:53:e3:7a:c5:81:bd:56:
46:fc:c8:d3:67:79:a2:61:90:34:3a:01:ff:d0:48:71:b9:ee:
ac:16:d3:89:55:ea:66:ab:58:b0:af:63:c2:cc:a6:eb:cb:33:
cf:be:0c:69:9e:70:a2:ac:8f:d9:f3:34:d4:62:f1:34:69:12:
cc:f3:d5:99:3f:35:77:27:49:9a:f6:00:0c:a2:dd:22:a2:d8:
2d:cd:44:49:1d:d3:95:e0:79:86:e0:e0:2f:a1:54:48:61:26:
75:d9:20:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:11 2024 by rpki-client on console-ams.rpki-client.org