Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/A_-jGqP1HyK1iFzPQ3aqEInSyro.roa
File: A_-jGqP1HyK1iFzPQ3aqEInSyro.roa (raw, json)
Hash identifier: EFbcs6iwpPfdwJcBCdWAlQRJwRLJrNW8jcALcOOQSqs=
Subject key identifier: 03:FF:A3:1A:A3:F5:1F:22:B5:88:5C:CF:43:76:AA:10:89:D2:CA:BA
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 018CC6B8FB7ECDA3700EC23966212834FE0B
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/A_-jGqP1HyK1iFzPQ3aqEInSyro.roa
Signing time: Mon 01 Jan 2024 20:31:00 +0000
ROA not before: Mon 01 Jan 2024 20:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12353
IP address blocks: 193.109.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:fb:7e:cd:a3:70:0e:c2:39:66:21:28:34:fe:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Jan 1 20:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03ffa31aa3f51f22b5885ccf4376aa1089d2caba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:36:0e:d6:78:67:4c:8e:df:c3:07:ab:08:69:
ba:db:f9:e1:70:ea:32:5a:8f:69:91:46:ce:26:2d:
bd:7c:cc:21:3e:bc:b9:11:e9:54:99:8d:43:10:7d:
fd:ec:a3:df:f9:cd:fa:eb:f4:c1:a5:4e:8c:f0:9d:
08:27:ae:8e:87:5a:7f:25:04:91:8a:e8:02:4b:30:
08:9d:18:90:08:51:08:f2:46:63:90:fe:45:64:03:
8a:0b:ec:49:5c:f4:30:1a:2a:0c:74:ae:21:45:c3:
3a:2e:95:cc:a7:ff:ca:06:7f:b8:0b:75:fc:4c:b6:
b2:df:a1:c5:20:ac:e2:13:5c:14:5b:f1:95:75:15:
d1:73:28:1e:ae:50:c8:62:cf:92:77:a7:3e:8c:61:
53:ce:82:ff:63:95:ca:18:d2:fa:97:04:fa:a1:49:
6f:47:a9:5c:98:a1:31:37:90:9f:a9:46:63:28:6f:
98:ba:1e:b0:1e:48:45:54:22:80:77:9c:b9:47:86:
30:f2:28:28:ec:27:46:ad:9f:13:ae:44:70:06:86:
a4:f0:75:94:36:d0:ce:19:4d:c4:8a:48:7b:67:e0:
5e:94:cd:f5:18:bb:23:2e:61:f5:be:de:86:5c:ee:
66:4c:3d:2c:97:46:25:92:6c:68:7c:61:0e:48:51:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FF:A3:1A:A3:F5:1F:22:B5:88:5C:CF:43:76:AA:10:89:D2:CA:BA
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/A_-jGqP1HyK1iFzPQ3aqEInSyro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.93.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:7a:4e:3b:66:8e:2f:52:39:9c:0b:3b:4f:25:aa:77:4a:c0:
70:9e:65:59:f4:e1:8f:37:e7:37:b9:11:2a:7b:1e:8a:9c:f6:
cf:a5:e0:8e:d6:e0:93:bc:24:20:1c:e9:60:5c:8c:61:21:92:
ba:8a:17:f2:07:9a:b0:3a:9b:f2:77:a2:fb:be:b8:6d:c4:27:
f6:c7:9d:8d:a1:6f:32:81:89:49:54:42:62:a4:4b:5b:f4:24:
31:ea:f7:74:dc:e5:68:7b:cd:91:6d:13:5f:11:aa:a0:77:67:
38:16:b0:26:01:7c:da:73:e9:ed:50:c4:bb:5a:b4:84:92:56:
64:be:be:30:85:61:61:73:64:8d:29:a8:62:db:aa:14:55:7a:
37:3d:f0:a4:9f:da:e4:1e:a1:9c:e8:72:c2:bd:c7:55:79:75:
27:04:76:f5:b4:46:da:b0:20:89:51:cf:62:39:ee:24:2b:d7:
18:a8:52:d1:b4:ea:fb:a0:de:80:5f:d7:de:cd:45:ca:ae:c5:
e1:91:14:8b:cd:d0:80:a4:71:95:e5:c3:e8:34:f3:99:c2:ee:
d6:e7:aa:5f:60:bd:b4:38:63:aa:c9:f4:a2:50:94:65:7a:e2:
42:7d:62:5c:54:80:78:8e:fe:13:48:df:10:ff:4b:d0:9b:41:
4a:f9:09:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:46:39 2024 by rpki-client on console-ams.rpki-client.org