Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/1-JNNS1mFQGJm-BQGwLz1QYiUOPI.roa
File: 1-JNNS1mFQGJm-BQGwLz1QYiUOPI.roa (raw, json)
Hash identifier: FqkUvbZ2H4aVsC+aHL6fEVdU/yb1gke5M2ubrf/E0ms=
Subject key identifier: F8:93:4D:4B:59:85:40:62:66:F8:14:06:C0:BC:F5:41:88:94:38:F2
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 018CC8016A021BFEEC9A584B22AA139AA773
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/1-JNNS1mFQGJm-BQGwLz1QYiUOPI.roa
Signing time: Tue 02 Jan 2024 02:29:44 +0000
ROA not before: Tue 02 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8328
IP address blocks: 193.172.126.0/24 maxlen: 24
193.173.100.0/24 maxlen: 24
193.172.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6a:02:1b:fe:ec:9a:58:4b:22:aa:13:9a:a7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8934d4b5985406266f81406c0bcf541889438f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:81:41:20:f4:24:98:c8:21:c3:a3:1c:27:a0:
9e:9e:38:47:c5:9c:a8:18:53:46:30:54:b3:8f:d9:
c4:a1:54:71:88:98:bb:b7:56:c2:9c:c8:8f:d2:58:
ab:f9:6a:8a:57:b3:2e:8f:a5:71:45:6e:ec:df:aa:
ab:01:76:76:9f:58:3f:26:ec:27:af:9f:6e:d5:88:
47:b9:21:bb:09:c6:c1:e4:2a:61:7e:43:cd:1b:0f:
87:32:52:0d:b5:97:1c:58:9a:ce:48:f8:fc:0b:40:
aa:04:e6:e1:03:39:ec:a4:e3:05:3d:24:28:2b:22:
a1:ce:71:42:db:6c:78:66:f1:60:35:2c:b7:2f:a2:
90:4c:82:86:99:51:80:27:fd:43:7d:1a:f9:2b:e1:
1e:ca:24:2c:fc:e1:06:0a:68:a6:c0:c2:df:33:78:
93:a2:e6:0f:67:6a:eb:bf:e8:b8:5a:63:4f:33:be:
67:5b:52:89:86:73:d0:d5:2b:3d:f8:9f:5c:5a:69:
93:49:a0:26:3d:50:ee:b6:28:b4:66:bc:81:9b:13:
b6:fb:a0:60:c9:f6:43:01:34:f7:4b:c3:04:70:f1:
18:7b:e8:36:05:e5:1b:ee:82:5b:19:53:6f:79:5e:
0f:95:9f:b1:66:25:31:fa:43:bf:ae:fb:62:07:36:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:93:4D:4B:59:85:40:62:66:F8:14:06:C0:BC:F5:41:88:94:38:F2
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/1-JNNS1mFQGJm-BQGwLz1QYiUOPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.172.126.0/24
193.172.193.0/24
193.173.100.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a2:df:b3:5b:ac:c6:8e:ac:74:1b:42:d1:c3:56:4f:9f:a1:
8f:99:ea:fd:16:cf:ce:68:b1:fa:65:f5:14:4f:47:33:ee:42:
5f:dd:40:c7:2a:73:34:5a:ec:29:24:5e:87:5e:10:7f:2f:95:
4e:7f:59:c5:65:34:34:b9:d3:54:bf:33:02:9a:da:d7:b7:11:
c8:7e:80:d0:18:c8:74:aa:44:c0:4c:4a:f2:ca:a2:95:ce:d4:
2d:d5:df:cc:86:26:d0:79:1a:d0:d2:71:f2:a1:a2:05:0e:b4:
5a:b9:88:2a:24:4d:d4:34:2b:e5:fe:93:9f:97:2e:61:34:d7:
e4:05:ce:10:c4:79:4a:57:57:30:70:12:9f:8b:c5:4b:91:7e:
b3:bd:0d:cf:27:bb:65:8a:51:c3:be:cd:91:22:b1:ae:af:a6:
29:3a:11:90:9a:e2:53:77:63:23:73:aa:fc:37:db:ae:81:42:
32:1b:5d:11:5f:56:70:f6:3b:45:cc:b8:97:88:36:a8:5e:b9:
85:0c:92:80:69:4c:ea:bf:a7:33:fd:f1:85:93:bd:24:7d:45:
2a:6a:b7:12:ea:0c:cf:2e:f9:2c:db:e4:11:27:13:6f:32:55:
97:5f:e3:a6:96:f8:a7:86:3f:01:84:eb:f7:7e:b0:5a:ec:18:
f2:56:3b:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:07:05 2024 by rpki-client on console-fra.rpki-client.org