Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/8NK6jGskjJsYSP7hHi6Bk2SoCJ8.roa
File: 8NK6jGskjJsYSP7hHi6Bk2SoCJ8.roa (raw, json)
Hash identifier: WYDQiVPzs99q4grw1wMM5kz97epePYeB/FCyTbVtqtQ=
Subject key identifier: F0:D2:BA:8C:6B:24:8C:9B:18:48:FE:E1:1E:2E:81:93:64:A8:08:9F
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 019296D284F003DA3A5B89A501871773E75E
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/8NK6jGskjJsYSP7hHi6Bk2SoCJ8.roa
Signing time: Wed 16 Oct 2024 19:33:51 +0000
ROA not before: Wed 16 Oct 2024 19:33:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51561
IP address blocks: 193.161.9.0/24 maxlen: 24
193.161.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:96:d2:84:f0:03:da:3a:5b:89:a5:01:87:17:73:e7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Oct 16 19:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0d2ba8c6b248c9b1848fee11e2e819364a8089f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:91:e6:f7:37:83:2d:fd:9c:68:db:73:81:
ed:47:8d:62:57:86:9e:2c:3b:74:a6:e6:d5:bd:fe:
9f:90:8e:24:6f:60:fc:f1:14:3f:9c:cf:51:08:78:
c5:84:92:14:1b:fc:17:dc:b6:39:dc:06:0e:4f:de:
85:67:31:86:49:4f:d5:50:6a:11:c3:e6:c0:c7:36:
4c:90:24:fe:94:c6:3e:db:9f:6b:2e:59:18:4c:39:
d8:8a:28:8c:29:a1:3d:75:4d:56:b0:4c:9d:a1:06:
f2:d7:6f:74:e1:19:bd:18:2f:8e:4a:9a:29:54:50:
73:d7:32:65:cb:a4:cf:ec:ef:bf:ea:bd:bd:a7:8b:
23:4a:15:ac:d1:4e:36:e2:9f:5b:35:1b:82:09:ed:
83:9d:ca:83:d7:fd:ab:83:a8:68:96:ef:28:3a:dc:
68:93:b0:b7:6a:88:b5:f8:ec:27:9a:f6:7c:67:f2:
d3:bd:94:28:59:e7:2b:cf:d8:86:47:09:f4:29:e7:
68:b9:f7:e5:d1:6a:49:d1:97:90:63:4f:f7:d2:d8:
92:bc:90:5d:84:75:23:92:e6:98:cc:d0:95:08:08:
b1:cc:4c:7c:5c:b5:fb:8a:9d:59:97:e2:38:6b:37:
f6:12:79:26:92:16:82:58:09:8d:c7:6c:9c:1e:8c:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D2:BA:8C:6B:24:8C:9B:18:48:FE:E1:1E:2E:81:93:64:A8:08:9F
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/8NK6jGskjJsYSP7hHi6Bk2SoCJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.9.0-193.161.10.255
Signature Algorithm: sha256WithRSAEncryption
91:1a:b0:d4:ca:bb:ec:f1:07:89:4d:b3:02:b4:7f:60:ea:2e:
a5:32:5d:4e:5a:12:ec:90:a5:b0:4f:73:2d:ba:33:6e:f7:d3:
06:f6:bb:be:0a:2f:6e:f7:f5:da:d3:17:fd:6b:6d:de:37:c0:
ee:70:44:78:3c:1e:6b:79:5b:46:ad:90:23:89:b6:b7:af:f6:
90:ff:77:3d:b2:86:8d:78:29:f7:d5:0b:fd:6f:1c:15:f3:dd:
20:03:15:44:d3:c6:e9:ec:4c:88:cf:81:7e:e2:99:41:08:27:
ba:d9:7d:1b:9b:8e:1a:2c:c6:0e:2f:15:bb:ae:fc:cd:d8:8b:
c4:de:5c:31:fc:b5:f7:f0:8d:ef:bf:8c:e7:f8:cb:3e:2d:08:
eb:03:fa:8a:91:84:fb:96:d7:83:3f:16:0b:ae:c6:12:36:51:
1f:88:13:da:9a:4b:5d:c6:88:c4:97:21:c3:1a:11:c6:a9:cf:
f0:5b:33:26:98:21:30:ee:b8:58:02:50:1c:4a:0b:a8:ca:02:
bf:53:f0:a1:44:cd:3a:e4:6d:50:6a:87:08:d7:15:6f:d2:6c:
67:8d:61:48:23:4c:bf:6a:25:d1:f3:c8:43:85:fd:1d:4e:76:
e9:44:19:8b:f5:4e:f1:1e:33:61:5d:1b:fd:53:6e:d6:cc:67:
ad:c4:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:42:12 2024 by rpki-client on console-fra.rpki-client.org