Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/m0B-yxa1GUzHEGgBMEGqhww0HsA.roa
File: m0B-yxa1GUzHEGgBMEGqhww0HsA.roa (raw, json)
Hash identifier: F5XjDWjycSYCGRPqZY8uPyHb4+4wTKRV034WSxDb/RQ=
Subject key identifier: 9B:40:7E:CB:16:B5:19:4C:C7:10:68:01:30:41:AA:87:0C:34:1E:C0
Certificate issuer: /CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Certificate serial: 018CCA2A8B7378BAAC2228091CE9283A42F1
Authority key identifier: 83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/m0B-yxa1GUzHEGgBMEGqhww0HsA.roa
Signing time: Tue 02 Jan 2024 12:33:54 +0000
ROA not before: Tue 02 Jan 2024 12:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2119
IP address blocks: 193.161.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:8b:73:78:ba:ac:22:28:09:1c:e9:28:3a:42:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Validity
Not Before: Jan 2 12:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b407ecb16b5194cc71068013041aa870c341ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:a1:0a:ae:70:ff:41:bb:09:68:f2:42:a9:
3a:45:4c:a1:e5:bd:08:eb:fa:4f:ee:f9:0a:19:15:
61:a5:b3:d0:91:37:80:21:58:90:3f:a8:db:b6:f5:
4a:81:d1:9d:e7:45:d9:02:b1:66:9b:34:b0:3a:51:
4c:4e:94:3e:85:0d:12:f1:33:6d:8e:51:8a:f5:7f:
73:6f:3e:2e:fb:c2:c5:7a:de:76:f8:0b:78:59:3d:
21:a9:b7:06:f9:f0:d7:da:11:42:f3:5d:f1:87:a6:
a3:51:26:63:00:65:90:4e:fa:75:10:28:e3:d1:36:
fe:24:10:dc:7c:08:90:1e:fe:e1:42:70:36:95:84:
cd:c8:a6:24:aa:06:75:c4:5f:66:6a:d7:ce:9b:f8:
3a:c6:46:b1:c5:cd:9d:a6:16:25:2c:04:56:66:4d:
19:04:75:26:f0:bb:70:15:80:3d:4b:61:ff:24:e8:
0f:8b:e0:42:f5:f6:5a:a0:35:f2:ed:82:4b:7b:4b:
ea:9b:4a:1f:88:b8:e6:66:8a:8e:83:7b:4c:05:df:
19:a8:07:25:e2:4d:c9:eb:a2:c8:ed:2d:7e:74:9a:
08:fd:f8:79:6d:10:12:e3:bf:3a:fc:48:bf:56:52:
ce:a8:69:ee:db:d2:df:1c:98:ba:b8:cd:15:bb:02:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:40:7E:CB:16:B5:19:4C:C7:10:68:01:30:41:AA:87:0C:34:1E:C0
X509v3 Authority Key Identifier:
keyid:83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/m0B-yxa1GUzHEGgBMEGqhww0HsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.32.0/19
Signature Algorithm: sha256WithRSAEncryption
15:47:25:95:c8:29:e1:3f:1a:ef:8e:c3:a7:87:83:ba:9a:6b:
66:8f:b5:04:22:16:92:5d:58:19:89:19:a5:83:18:13:a8:61:
a0:56:05:38:1d:9c:0b:7c:3e:35:1f:d2:67:41:90:a0:c3:ed:
02:0f:d1:50:f8:8b:a2:f5:47:bc:be:7e:b8:f6:0f:9e:60:03:
5f:4c:da:39:52:96:ea:aa:53:32:12:bb:2f:92:e9:d2:02:75:
af:96:42:04:57:88:56:24:ac:00:f7:00:71:ed:e5:9f:1a:2b:
fe:57:a9:22:08:66:9a:7a:18:10:9b:5c:53:d7:e7:03:20:8e:
ca:3b:e4:be:55:3f:8a:f3:23:ab:8a:66:34:02:ed:14:af:13:
69:06:00:25:dd:dc:67:f8:60:69:36:68:3d:69:e7:de:eb:77:
02:18:53:05:db:5e:d1:5c:66:8b:90:f1:8b:de:15:11:02:ee:
4e:b5:ce:7a:be:6c:d5:f9:c2:ff:5a:1b:c3:c7:8a:16:f0:15:
27:17:4b:fe:6d:c3:83:3e:51:d6:81:90:bc:ed:ca:16:ba:82:
22:e7:6f:1a:b5:9a:a9:c7:f9:3c:87:73:69:07:90:68:df:b5:
e6:9e:a1:32:90:92:ce:92:a3:c0:74:57:a7:27:b3:cb:54:5f:
30:8a:19:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:52:30 2024 by rpki-client on console-fra.rpki-client.org