Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/xMpf3qxRtbLsqn97rZD8lpI9aPk.roa
File: xMpf3qxRtbLsqn97rZD8lpI9aPk.roa (raw, json)
Hash identifier: 6fS/DYx75RobIhOX4WS0HUw9ewWkWKVc/pX+2MYIczw=
Subject key identifier: C4:CA:5F:DE:AC:51:B5:B2:EC:AA:7F:7B:AD:90:FC:96:92:3D:68:F9
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 01929732A5A00163B38D631EC8847767CC31
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/xMpf3qxRtbLsqn97rZD8lpI9aPk.roa
Signing time: Wed 16 Oct 2024 21:18:51 +0000
ROA not before: Wed 16 Oct 2024 21:18:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 193.160.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:97:32:a5:a0:01:63:b3:8d:63:1e:c8:84:77:67:cc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Oct 16 21:18:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4ca5fdeac51b5b2ecaa7f7bad90fc96923d68f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:7a:59:34:38:3a:41:d3:e4:e1:32:eb:69:
1e:00:e9:f9:dd:cd:4c:87:5e:d5:cb:0a:97:6c:98:
4b:90:e6:41:94:3c:ec:16:38:aa:68:08:31:ee:5b:
d5:cd:f6:bc:7d:ee:58:14:f6:be:f0:e5:d3:0b:b7:
0a:19:e2:92:15:96:8d:51:40:57:7b:0d:d0:f3:e8:
56:16:6d:5c:78:6c:92:a9:a7:6c:89:87:35:c7:4f:
bb:64:75:13:7d:2e:8f:6f:0b:38:06:c0:b1:28:88:
c3:0a:f6:b0:72:ad:25:da:1e:de:2e:54:05:99:78:
c3:28:a8:c7:56:34:d6:4d:7c:44:d0:a7:13:82:e9:
92:9c:c8:a0:cc:0b:30:f4:33:7e:c6:83:85:93:07:
fc:37:c7:a0:73:22:d1:ca:da:33:12:72:ce:05:7c:
53:b7:f0:08:c7:f6:25:d8:67:18:af:61:0a:90:e4:
9f:c7:77:68:f4:bd:f8:57:8f:b5:77:64:a1:e7:fc:
dc:83:1d:81:09:01:0a:6d:c4:10:72:44:36:37:1b:
1b:ff:00:93:2f:db:5c:44:31:2c:19:f0:5b:3e:cc:
c7:d4:30:a1:03:57:8e:e0:e5:4e:59:81:7d:33:bd:
e2:c4:1c:55:c0:3d:4f:3b:4c:fd:13:28:fc:f5:5e:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CA:5F:DE:AC:51:B5:B2:EC:AA:7F:7B:AD:90:FC:96:92:3D:68:F9
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/xMpf3qxRtbLsqn97rZD8lpI9aPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.76.0/22
Signature Algorithm: sha256WithRSAEncryption
51:b2:6d:72:fe:15:a9:a6:f9:c7:01:d7:a5:11:a8:43:81:5a:
7e:9c:c2:4f:f1:6c:64:e7:8b:f8:64:6b:73:6c:06:24:c5:ed:
46:f5:20:8a:77:1e:05:ea:54:af:8b:71:61:ea:17:b0:6c:1f:
0f:eb:1b:9f:3d:d4:3f:7e:c1:a1:cd:e3:2a:67:71:c4:9d:74:
95:80:59:e4:39:b8:70:76:66:14:72:13:4d:62:81:17:20:1b:
47:e8:ce:25:3e:a2:b2:b1:db:ff:fd:d7:78:07:b3:9f:5b:9d:
43:6a:a9:cd:f7:2e:73:ca:50:93:8e:ee:0f:3d:9d:df:a4:68:
a7:3f:19:22:92:43:8d:5b:88:c1:99:b7:d3:d8:65:47:df:d8:
f2:b3:3b:5e:79:6e:69:54:d3:52:f7:d6:1f:7e:be:74:28:7e:
32:dc:21:57:3b:c5:76:e5:7b:2c:a3:c5:5d:3b:ab:0f:6c:89:
27:c4:d6:d7:fa:67:ac:b3:de:e3:bb:cb:7d:34:cd:40:02:c0:
7a:b6:b1:2b:a5:71:8e:65:fe:76:97:f1:7e:1f:5a:31:34:d8:
6e:76:5b:4a:d3:f6:cc:87:6a:25:54:cd:70:44:7f:cb:9c:8c:
2c:35:ae:7c:78:20:24:69:45:6d:7d:7c:a8:f6:c8:0d:fc:0f:
65:36:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:39:13 2024 by rpki-client on console-fra.rpki-client.org