Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/E91MkQvI1BpwRvYEJEj3FV4HTiM.roa
File: E91MkQvI1BpwRvYEJEj3FV4HTiM.roa (raw, json)
Hash identifier: dWpiR5XtjwLZS2Ajf5QMRzZUj8gf50Hcty3K+CAltRQ=
Subject key identifier: 13:DD:4C:91:0B:C8:D4:1A:70:46:F6:04:24:48:F7:15:5E:07:4E:23
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 018CC8702BB16A442AE9DC4DCC171F1176E4
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/E91MkQvI1BpwRvYEJEj3FV4HTiM.roa
Signing time: Tue 02 Jan 2024 04:30:43 +0000
ROA not before: Tue 02 Jan 2024 04:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212352
IP address blocks: 193.243.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:2b:b1:6a:44:2a:e9:dc:4d:cc:17:1f:11:76:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Jan 2 04:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13dd4c910bc8d41a7046f6042448f7155e074e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:94:10:1c:72:13:61:d1:7b:1e:8b:52:a4:
33:3e:89:f5:47:3a:29:9e:cc:75:fd:ad:cf:6a:00:
78:dc:84:1c:9b:12:af:84:9e:2a:33:ac:cc:0c:fa:
fb:8b:a4:5c:90:dc:3a:0a:c3:19:51:e6:0a:0d:ce:
e0:b0:96:03:9a:63:5a:0d:18:9f:9c:d2:24:da:da:
a5:41:18:e2:03:5f:a0:5a:d7:33:ad:1f:c2:41:19:
1f:b0:cc:01:20:55:20:4c:2c:17:98:f1:42:37:41:
4e:68:69:34:fb:77:37:4e:27:6f:08:3b:3c:99:30:
61:c1:4d:b2:e8:e4:ac:7b:b2:e4:53:2a:7f:e9:38:
44:d5:4f:4d:21:9a:8b:62:b5:54:90:e7:fc:02:b3:
15:bc:22:e9:73:ac:17:d0:c6:7e:8e:a7:d9:ca:80:
c2:1f:53:c6:ea:a2:ef:63:ff:51:e3:7e:0f:7e:d9:
6f:67:25:19:b8:4f:b5:2f:8e:1b:23:b4:c3:df:bf:
d6:57:1f:2c:33:5b:2e:58:5f:c7:5e:47:7d:6e:1b:
33:bc:03:4b:b4:b8:46:a6:08:33:6c:5b:33:2b:09:
3b:cd:a0:9a:1f:74:c8:c1:9b:d4:9a:9d:96:c2:1c:
2c:49:8d:24:aa:3f:31:ea:87:bb:e6:7f:3e:e8:81:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DD:4C:91:0B:C8:D4:1A:70:46:F6:04:24:48:F7:15:5E:07:4E:23
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/E91MkQvI1BpwRvYEJEj3FV4HTiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:39:82:d7:f8:ab:62:b0:3a:8b:fa:6c:16:89:5b:05:61:da:
3f:b7:82:13:22:86:f9:e9:a5:29:2e:4a:2c:ad:7a:21:49:f5:
ad:54:aa:37:26:b4:51:23:21:5a:bc:b2:ae:0b:39:94:a0:01:
a0:5b:79:3b:84:03:f9:a5:a0:51:ef:19:99:62:02:43:a2:2a:
9f:d0:2a:da:60:ab:5d:6c:d1:c7:07:94:1e:bf:d2:48:f1:31:
6c:f4:09:10:f8:fa:07:42:36:3e:78:42:2e:5a:d2:ce:b0:27:
c6:2e:20:93:d2:d8:bb:36:58:8b:e1:a1:2e:4c:48:a6:b7:d0:
ec:46:36:ee:5b:3b:69:91:7c:92:bc:0b:0f:cd:2d:30:39:e1:
d0:06:f6:56:d1:33:59:58:71:e4:c1:4c:be:ec:d1:7d:2f:0d:
f5:ba:6c:cf:c0:fe:37:9d:0b:95:5d:ea:99:ff:eb:38:d7:cc:
d8:13:14:6d:6b:19:30:9f:64:a1:ae:44:bd:25:0d:b9:4d:b5:
12:88:7a:73:55:37:cf:c2:91:af:79:e1:67:a1:0a:05:a2:37:
cf:6b:f8:b2:5c:ca:d5:2c:ad:e8:d1:41:c6:e2:89:e4:de:be:
b5:0a:37:b4:a2:7b:ba:85:b5:b2:51:04:b2:bf:8d:49:48:2b:
42:b7:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 23:31:12 2024 by rpki-client on console-fra.rpki-client.org