Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/AN_i7yNe-jQCObJQyPWftxJZZ8I.roa
File: AN_i7yNe-jQCObJQyPWftxJZZ8I.roa (raw, json)
Hash identifier: +1/h+7+iXe42AzZrE/iSqBa7o4R1kPWMVeYo0I+h6Bk=
Subject key identifier: 00:DF:E2:EF:23:5E:FA:34:02:39:B2:50:C8:F5:9F:B7:12:59:67:C2
Certificate issuer: /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial: 0191B7ECE9F449AF1B45871534389EC75C6B
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/AN_i7yNe-jQCObJQyPWftxJZZ8I.roa
Signing time: Tue 03 Sep 2024 12:47:22 +0000
ROA not before: Tue 03 Sep 2024 12:47:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214267
IP address blocks: 193.3.35.0/24 maxlen: 24
2a10:c440::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b7:ec:e9:f4:49:af:1b:45:87:15:34:38:9e:c7:5c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
Validity
Not Before: Sep 3 12:47:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00dfe2ef235efa340239b250c8f59fb7125967c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:bf:aa:6c:a3:a0:24:aa:db:a1:11:1a:55:
dc:97:b5:21:7a:c8:02:79:80:c8:d3:b1:05:48:83:
d7:3a:ae:82:4b:e5:6b:a6:65:43:df:24:13:15:21:
a5:5c:bc:d3:2c:1e:cc:78:ca:9b:e9:2e:f1:75:61:
8e:32:ef:d2:f2:0a:23:71:64:b6:b2:28:51:16:64:
6f:59:25:67:bb:e0:22:19:40:8a:53:b0:ba:44:fa:
a4:ca:c2:49:80:b3:e5:51:2a:ba:69:54:77:9a:ce:
c5:dd:95:e2:eb:5f:17:59:f1:b2:63:00:0c:93:db:
a2:19:27:37:f6:68:48:cf:2a:fb:13:2f:c3:f9:ab:
ad:6c:61:4e:b5:d0:03:5d:f0:ab:66:b5:ec:95:08:
b8:55:49:67:27:39:26:24:62:45:51:1f:45:fd:84:
22:fa:46:01:d1:83:5e:23:73:00:e9:ec:cf:16:2e:
c2:cf:fb:43:dc:af:ea:28:38:8e:78:c7:18:fb:c9:
d2:df:aa:99:e3:37:10:9f:71:de:e0:43:3d:19:66:
80:c6:0f:81:f1:9c:a5:0e:ea:59:f1:03:20:d4:2d:
f3:b3:4b:8f:2b:39:48:38:64:b6:b1:2c:68:fe:a7:
30:03:00:53:b7:ea:aa:e2:70:a4:75:06:11:1d:9f:
df:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DF:E2:EF:23:5E:FA:34:02:39:B2:50:C8:F5:9F:B7:12:59:67:C2
X509v3 Authority Key Identifier:
keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/AN_i7yNe-jQCObJQyPWftxJZZ8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.35.0/24
IPv6:
2a10:c440::/29
Signature Algorithm: sha256WithRSAEncryption
61:64:bb:81:20:39:11:6f:e6:34:28:34:f6:ba:7c:54:3c:b4:
7e:10:38:9f:33:93:b8:2c:48:0e:c0:77:8e:76:43:21:12:2f:
8b:24:f3:c8:44:01:a7:4e:90:aa:c5:00:f2:e7:c7:f0:19:1e:
3d:b4:f5:b6:9f:ad:c2:bb:c9:a8:5a:ed:30:8a:9c:9d:94:57:
27:88:e2:e8:8a:15:3a:be:e5:01:c0:34:a6:b2:00:ed:6b:f8:
f7:8a:bc:f2:98:56:8b:21:8e:ec:2d:34:83:2f:54:fa:c8:31:
ad:5f:1f:c0:64:18:f0:dc:82:50:5a:c7:68:fb:41:48:0a:6c:
01:9a:37:82:3a:73:95:e7:39:79:07:b8:3a:f5:45:48:25:cf:
33:2c:ba:9a:fe:a8:c0:0b:b2:08:d4:ac:c8:be:9d:0a:54:96:
33:e6:3d:ff:83:ad:79:79:7b:44:fb:d1:b7:26:7b:74:47:27:
52:90:64:e2:d2:a5:50:26:0d:aa:48:c2:96:8e:10:82:b6:be:
b5:48:43:df:da:fa:77:5b:ef:6c:6d:3b:93:dd:b1:e9:4e:00:
fe:38:fe:95:77:be:ce:16:dd:12:3f:51:97:09:31:cb:60:1e:
ab:7c:95:31:bf:e8:a0:ad:a1:53:f4:c2:a6:8f:a9:d1:0c:b8:
eb:3a:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:38 2024 by rpki-client on console-fra.rpki-client.org