Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/IEw8-_aw4AeRNTBQ8MOATKN7TRI.roa
File: IEw8-_aw4AeRNTBQ8MOATKN7TRI.roa (raw, json)
Hash identifier: Un0WJMotz0Hvk4oFZHxfErEx3ET1ioD90EpX8l4zlwc=
Subject key identifier: 20:4C:3C:FB:F6:B0:E0:07:91:35:30:50:F0:C3:80:4C:A3:7B:4D:12
Certificate issuer: /CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Certificate serial: 0192761AAAD8B16595CBCFA5534A7159CD18
Authority key identifier: 9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/IEw8-_aw4AeRNTBQ8MOATKN7TRI.roa
Signing time: Thu 10 Oct 2024 11:05:11 +0000
ROA not before: Thu 10 Oct 2024 11:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197698
IP address blocks: 193.8.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:1a:aa:d8:b1:65:95:cb:cf:a5:53:4a:71:59:cd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Validity
Not Before: Oct 10 11:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=204c3cfbf6b0e00791353050f0c3804ca37b4d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:07:98:bb:62:6d:7c:40:f7:bf:bd:20:06:
68:af:0a:86:41:aa:3d:66:99:ed:e3:1f:9f:bc:2f:
c7:49:ee:46:5d:a7:28:f3:4a:d8:94:5f:29:29:3d:
3e:eb:d7:25:06:94:67:07:32:84:57:fb:75:ac:c7:
38:e7:dc:84:eb:b4:74:af:b2:fe:b2:ef:31:2b:5f:
38:55:c7:3d:fb:3f:9a:ae:b1:c5:27:21:db:e5:1e:
4f:13:88:8d:51:12:5d:47:dd:77:0f:8a:f5:7c:60:
bc:9e:bf:d4:b2:57:89:de:60:ac:1f:e8:27:af:56:
0c:f9:71:07:d8:1b:90:92:e1:ff:97:8d:ae:9a:e1:
83:39:c3:ff:b9:01:98:7c:3d:f9:3c:4e:12:2b:7e:
85:c8:4b:c6:5e:87:eb:89:dc:fe:5a:4e:b8:5b:af:
48:db:34:86:a9:43:e5:19:13:e2:f8:fa:bb:4d:e7:
e7:5e:6b:0c:80:f5:ce:28:fd:80:ac:42:ad:a3:12:
3a:56:f5:69:4c:10:2b:6c:35:28:8d:87:7b:34:65:
a9:03:17:07:c0:dd:62:4c:fc:96:87:06:60:e4:8f:
93:2e:d0:2f:30:96:dd:ef:8f:51:c5:20:36:e1:36:
6a:d1:2a:d2:db:46:6a:e8:8d:66:20:30:86:b1:b8:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4C:3C:FB:F6:B0:E0:07:91:35:30:50:F0:C3:80:4C:A3:7B:4D:12
X509v3 Authority Key Identifier:
keyid:9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/IEw8-_aw4AeRNTBQ8MOATKN7TRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.86.0/23
Signature Algorithm: sha256WithRSAEncryption
90:39:f1:06:c1:6f:77:35:b0:26:f1:d6:51:ce:a2:9c:92:d4:
c5:b0:b0:63:31:48:4d:b3:f1:bb:38:c1:cf:5c:34:9d:26:35:
a1:2f:cf:5a:66:bb:df:d2:8a:fc:8d:4e:df:95:0e:c4:1f:c9:
c7:1c:97:aa:df:c5:64:96:53:25:dd:d8:a6:e1:c6:69:20:db:
fd:80:87:83:e3:03:0e:37:7d:a3:8c:22:df:32:eb:dc:ef:10:
30:40:00:5f:65:59:0b:2e:de:5c:9d:bb:c4:ff:7b:12:f2:7f:
e0:0a:18:b8:94:f2:71:05:fa:1b:d3:d3:d2:46:8d:c4:10:b4:
62:62:e3:27:28:84:67:07:cc:1a:d0:a3:7a:e5:a2:68:3e:89:
d0:5d:09:67:34:6e:0f:34:c4:df:c4:ec:c0:27:6c:74:02:2b:
29:5f:5e:44:8b:6a:ec:fb:c1:11:d3:67:c9:0c:a1:04:1c:b3:
a8:99:15:96:d5:ca:28:93:99:02:e9:34:1b:a4:a7:ea:c9:5e:
55:6f:52:d7:a0:46:b6:a2:0b:ce:07:cf:17:a0:a5:c0:5d:fa:
5e:2f:ef:50:7c:1e:34:1b:7e:c4:bb:b1:12:c6:db:01:ba:cf:
e4:f8:3a:39:47:f5:eb:cd:56:1a:1b:b6:ea:67:c0:ba:05:6b:
ae:0f:be:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:27 2024 by rpki-client on console-fra.rpki-client.org