Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/9_SWQ5aWXieKkBgGwSInWNleJmg.roa
File: 9_SWQ5aWXieKkBgGwSInWNleJmg.roa (raw, json)
Hash identifier: vCj9m+JGGawBKfTJw0Cq20yS649zJUAV4nbNuEF4Su4=
Subject key identifier: F7:F4:96:43:96:96:5E:27:8A:90:18:06:C1:22:27:58:D9:5E:26:68
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 0192D1FB8ECFD80D029A54417997F44002AE
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/9_SWQ5aWXieKkBgGwSInWNleJmg.roa
Signing time: Mon 28 Oct 2024 07:16:17 +0000
ROA not before: Mon 28 Oct 2024 07:16:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3292
IP address blocks: 2.110.0.0/20 maxlen: 20
2.110.16.0/22 maxlen: 22
91.199.190.0/24 maxlen: 24
185.158.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d1:fb:8e:cf:d8:0d:02:9a:54:41:79:97:f4:40:02:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Oct 28 07:16:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7f4964396965e278a901806c1222758d95e2668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:2c:60:14:71:9d:35:54:5b:09:05:f6:16:
f8:56:d4:6f:90:9c:de:e7:7a:fd:fb:5f:46:07:75:
a1:6b:da:0d:08:8a:86:39:1e:e3:08:f3:8d:a2:8e:
e6:41:77:e9:24:ac:c3:f4:45:a7:5f:77:64:b5:99:
71:e9:d4:09:14:23:62:a5:2c:a4:6d:00:9b:1e:3e:
cb:18:d8:2c:f7:ce:95:2d:fb:31:f7:de:a8:b8:23:
39:96:5d:9b:a1:12:34:86:22:f0:d9:5c:e6:83:db:
61:57:a1:df:e3:37:3d:6f:b4:51:95:7a:29:fb:c3:
dc:0d:14:04:da:7c:d2:b8:6f:27:75:4f:3d:d1:d6:
7a:6f:d1:5a:ac:55:56:ea:38:bd:e5:37:59:5a:da:
b4:4f:19:11:62:74:be:44:5e:f1:ba:ca:f0:56:e5:
e0:6b:00:16:b1:4e:d6:5b:31:23:02:31:69:bb:f1:
0b:b0:3a:e1:6a:86:36:7e:0f:07:7d:04:00:50:2a:
ee:eb:d4:b7:9f:1b:72:3b:c9:cb:a1:8c:d6:a1:6b:
28:e6:31:82:a8:0a:15:2c:91:45:2a:ff:19:94:a2:
27:43:89:0c:fd:3a:50:e2:80:dc:17:a4:57:44:15:
bb:8c:a7:5a:c5:85:9e:8c:c8:c4:25:c0:2e:40:5c:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F4:96:43:96:96:5E:27:8A:90:18:06:C1:22:27:58:D9:5E:26:68
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/9_SWQ5aWXieKkBgGwSInWNleJmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.110.0.0-2.110.19.255
91.199.190.0/24
185.158.163.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a8:9a:0a:32:b9:02:6c:fc:dd:2a:ba:89:29:b1:12:e0:b9:
b1:43:9b:f6:70:61:c6:6a:9d:81:d8:c9:07:80:d5:5a:84:2e:
56:57:51:1b:03:bf:39:f2:96:d0:83:81:4c:4a:82:18:1e:da:
e5:98:1d:0e:a0:b1:fc:91:0e:f1:a6:df:60:18:06:d7:6d:f6:
5d:f8:3e:aa:e0:a0:f2:75:97:b1:c9:ee:47:c5:87:33:6c:8b:
4b:0c:43:5e:a8:84:13:04:42:e5:76:79:d3:a4:b3:28:a9:8d:
fd:08:71:8f:55:e3:58:83:f9:1d:ba:da:d8:f2:56:76:3c:80:
31:b9:2c:14:ba:c2:74:9c:57:b1:5c:9e:b2:60:eb:38:21:e8:
f8:b8:77:38:de:f8:8a:f5:68:ce:c2:ce:bf:1b:14:37:e6:90:
f0:1a:6b:fa:6d:3a:d4:52:7d:df:0e:32:8c:a4:56:b6:b2:12:
f7:a2:43:b2:36:07:4a:d1:26:a3:7b:29:6f:d8:5e:80:2e:43:
ef:a5:fe:8f:26:1a:60:8a:c6:0a:e0:d0:a4:28:86:ba:91:77:
c8:62:c7:2f:c1:a8:a0:f8:23:20:f9:5e:9f:f1:4f:ee:98:9c:
51:c6:ab:2c:30:25:28:3a:d9:b0:97:ad:cf:af:5a:6b:7d:b7:
26:dc:5d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:15:33 2024 by rpki-client on console-fra.rpki-client.org