Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/9g9fKbn3w3U2tzzb1HrXkKNsW34.roa
File: 9g9fKbn3w3U2tzzb1HrXkKNsW34.roa (raw, json)
Hash identifier: UfWLzGMg7ODeOwp1ECHVVAYX+JH+zEk4HkHMJ74pNrM=
Subject key identifier: F6:0F:5F:29:B9:F7:C3:75:36:B7:3C:DB:D4:7A:D7:90:A3:6C:5B:7E
Certificate issuer: /CN=e70557b324959217d9259becd1a0549b6ffa9f65
Certificate serial: 0191CA6945FB24CC5D64420A138036315AD2
Authority key identifier: E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/9g9fKbn3w3U2tzzb1HrXkKNsW34.roa
Signing time: Sat 07 Sep 2024 02:56:22 +0000
ROA not before: Sat 07 Sep 2024 02:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39277
IP address blocks: 194.117.230.0/23 maxlen: 23
195.2.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ca:69:45:fb:24:cc:5d:64:42:0a:13:80:36:31:5a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e70557b324959217d9259becd1a0549b6ffa9f65
Validity
Not Before: Sep 7 02:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f60f5f29b9f7c37536b73cdbd47ad790a36c5b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:70:9d:24:35:33:ca:09:98:c5:03:60:2c:
e6:84:6d:82:4b:31:e7:8f:dc:2d:6a:ff:f8:51:b4:
b1:04:59:1a:95:a9:c0:2e:9a:2c:ae:65:e5:28:b5:
80:b2:1c:28:ab:11:ca:cd:00:66:5d:9d:c2:e9:3f:
2e:b9:41:fa:07:aa:ff:4d:1d:1c:d5:81:c2:b9:36:
21:33:5e:87:60:e8:79:38:0c:f8:69:e1:9c:c2:a2:
c8:24:6f:07:cb:73:c2:e5:b4:c2:f9:c5:9a:e2:41:
23:d7:5d:a0:ab:86:86:65:e6:16:f1:14:af:e3:eb:
bd:72:92:56:80:e0:2d:68:4a:2e:bc:c7:f4:ec:fc:
7b:8e:4e:69:b6:50:c0:58:ad:41:c2:d1:33:cf:ee:
f7:95:d2:39:52:24:50:0a:d7:45:58:5e:9c:d2:43:
79:80:f7:da:a6:c7:0c:4e:d5:d4:19:7d:80:93:30:
b6:4b:a6:70:5d:90:97:31:56:b9:b1:a0:93:15:48:
a1:dc:b4:21:2b:c0:b9:6e:ba:ba:6f:05:e3:03:a4:
1a:e8:1b:fc:2c:5c:5e:53:ad:f1:cf:a0:6c:94:81:
86:8b:be:09:f1:da:19:10:cd:cd:6f:97:b2:32:02:
61:da:4e:d8:bd:e7:b1:f7:10:06:b0:62:ab:5a:b1:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0F:5F:29:B9:F7:C3:75:36:B7:3C:DB:D4:7A:D7:90:A3:6C:5B:7E
X509v3 Authority Key Identifier:
keyid:E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/9g9fKbn3w3U2tzzb1HrXkKNsW34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.230.0/23
195.2.246.0/23
Signature Algorithm: sha256WithRSAEncryption
12:aa:2e:16:94:bb:a9:df:cb:80:ce:e5:7e:fd:3b:e2:ff:58:
62:ba:44:50:7e:eb:80:84:8e:4b:0c:7a:19:1d:73:13:3e:a8:
54:13:ca:66:2a:2a:d0:4d:3b:4e:b5:24:ab:01:71:d1:bd:41:
5e:96:a4:e8:6b:76:75:2c:2f:58:ae:00:0b:7d:c0:d9:17:1e:
53:ec:18:11:b6:77:0a:20:f0:de:bc:ad:0f:07:81:20:bf:15:
f9:0b:6e:57:9d:d6:2e:ed:c4:4e:f1:49:96:08:66:54:45:fb:
93:f0:a3:6f:27:9a:f6:c0:00:19:e9:e4:94:1e:e6:1c:c6:78:
73:17:48:24:26:c5:4a:8b:33:a6:5a:8c:19:26:d4:f4:4d:d8:
67:68:64:19:af:62:ad:bb:13:ea:1d:80:5a:61:a7:ce:05:be:
04:65:0a:a4:1a:e9:89:e9:5b:43:0b:6e:1b:b4:40:72:d6:2e:
e9:9c:fd:cc:87:cd:c3:47:ea:11:39:6c:f8:17:07:0b:11:be:
ee:6d:71:e4:e6:ee:f1:cf:c2:59:d5:b0:3c:1b:83:a9:b0:a8:
cc:00:c3:f1:42:2d:e7:11:1a:3b:6f:12:2d:ca:e1:06:24:30:
07:31:86:6a:a0:7f:76:6d:8e:b6:2b:c0:bf:0d:a5:4f:f9:0a:
ba:19:6a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:22 2024 by rpki-client on console-fra.rpki-client.org