Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/c9PNdf9NOo0xmV_qtc44JJiIUfE.roa
File: c9PNdf9NOo0xmV_qtc44JJiIUfE.roa (raw, json)
Hash identifier: 6aZ4mNiAKLkspmVhbxNRyMclcVqOfDHkTbxeM+Gn3Uc=
Subject key identifier: 73:D3:CD:75:FF:4D:3A:8D:31:99:5F:EA:B5:CE:38:24:98:88:51:F1
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 018CC79364A331B407909D528C1AC178D24B
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/c9PNdf9NOo0xmV_qtc44JJiIUfE.roa
Signing time: Tue 02 Jan 2024 00:29:34 +0000
ROA not before: Tue 02 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207710
IP address blocks: 85.28.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:64:a3:31:b4:07:90:9d:52:8c:1a:c1:78:d2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Jan 2 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73d3cd75ff4d3a8d31995feab5ce3824988851f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:92:23:2a:8b:11:bf:b0:90:ef:8c:d5:63:45:
8e:13:56:95:b9:85:f3:28:c2:ab:c3:25:bf:d0:bf:
fa:8e:c9:9e:7f:05:f4:48:da:95:6a:65:ba:86:d0:
91:3e:ee:b2:a6:ff:cc:75:74:e5:ae:82:10:2f:4e:
94:2c:43:70:d3:30:ae:2b:bb:67:8c:cc:10:a6:9d:
c3:2d:e1:ad:7f:38:eb:70:6e:29:80:73:df:b5:87:
2c:68:b2:8a:eb:21:5e:9e:f7:e6:0d:d0:d9:7f:87:
0b:5b:46:ad:03:65:7b:96:84:df:45:c9:2c:c0:5c:
f6:c7:e3:7c:f0:84:8d:36:d9:ab:55:b2:4a:94:63:
9c:df:11:06:2f:d7:f2:1f:6e:5e:3c:4f:82:f3:d3:
b5:a9:d3:58:81:9d:da:36:61:e2:2a:20:d2:fb:7f:
86:cd:91:e4:ae:2b:09:50:f5:cd:7e:92:d1:3e:88:
ca:a0:cc:9c:44:7e:eb:c7:bf:27:70:69:96:b7:93:
b1:fc:63:f8:bf:1e:c2:b9:c1:d3:1c:9a:c5:bc:21:
79:14:cb:4c:11:ec:ac:2f:6b:6b:d0:81:cb:c1:8a:
c0:92:8f:a9:aa:6e:ed:26:b6:15:07:b7:b0:fa:3b:
69:df:3f:e4:56:98:97:68:13:de:15:06:d5:dd:3c:
04:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D3:CD:75:FF:4D:3A:8D:31:99:5F:EA:B5:CE:38:24:98:88:51:F1
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/c9PNdf9NOo0xmV_qtc44JJiIUfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.59.0/24
Signature Algorithm: sha256WithRSAEncryption
56:34:e1:0f:23:88:35:a3:15:07:06:f6:46:48:17:36:94:a6:
07:23:11:48:e8:0f:5f:f1:0c:d2:5c:74:2a:bf:dc:af:03:1c:
65:8e:3e:5c:0d:ac:cc:cb:5b:b7:e4:69:03:0e:3a:65:0b:80:
18:5c:49:1c:6c:cf:8f:2e:a8:54:63:05:cf:4d:3f:a1:56:c1:
d0:47:d5:bd:ba:51:be:e1:6c:a7:17:a1:59:3a:46:9c:7d:7f:
eb:0a:e3:94:b8:32:b2:73:64:32:2b:41:e4:e7:fd:9e:11:c2:
2b:17:b3:f2:13:05:74:33:4c:8b:48:29:8a:cc:8c:c3:d6:07:
f1:90:9c:1f:ec:80:ef:fc:82:2e:c4:45:22:bd:05:a6:41:59:
4d:ac:d5:e8:a3:06:59:7a:45:1a:6a:a7:be:b5:e7:49:a1:35:
1e:5d:98:2f:7b:15:25:3b:97:8c:81:e5:71:bf:9f:7b:73:f9:
8d:6d:80:b2:f9:85:a5:46:1a:72:ba:7c:ed:0a:e3:e3:37:98:
00:30:bf:00:d7:20:dd:0d:d7:26:49:b0:5f:30:02:13:03:22:
49:dd:07:6d:05:15:f4:af:b6:cf:21:b0:56:f9:a5:e4:82:c1:
4c:c9:c6:9f:77:a9:3e:2f:53:d0:90:08:0f:7b:24:33:ab:b3:
8e:82:6a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:01:14 2024 by rpki-client on console-fra.rpki-client.org