Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/1-a2V69mXTrfOoxII60MLYiqGmzo.roa
File: 1-a2V69mXTrfOoxII60MLYiqGmzo.roa (raw, json)
Hash identifier: OgukPL/ebGncqodC/dHqHzfAF413Mn527DccrvuLZAo=
Subject key identifier: F9:AD:95:EB:D9:97:4E:B7:CE:A3:12:08:EB:43:0B:62:2A:86:9B:3A
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 018CC4250956FB2620E5EE2C85BF72940267
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/1-a2V69mXTrfOoxII60MLYiqGmzo.roa
Signing time: Mon 01 Jan 2024 08:30:10 +0000
ROA not before: Mon 01 Jan 2024 08:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12302
IP address blocks: 194.102.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:09:56:fb:26:20:e5:ee:2c:85:bf:72:94:02:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Jan 1 08:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9ad95ebd9974eb7cea31208eb430b622a869b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:7a:7b:5f:36:aa:e5:87:f3:dc:77:07:99:
ec:e5:92:8a:89:60:35:35:9d:78:06:a9:c3:cd:9b:
77:2e:26:fd:3e:63:fd:13:d8:6e:d6:3d:fe:83:43:
c0:bd:c2:3c:bb:55:0c:8e:f9:f4:6d:c2:b4:3a:3d:
e4:33:88:f0:b7:5a:5f:75:d3:59:40:bd:09:95:0f:
e8:ef:76:ef:db:73:49:62:e8:4a:15:a3:bf:8a:92:
0d:6b:2f:4c:9c:2b:f6:ab:b8:9b:54:d2:17:b5:a4:
d1:91:c2:af:46:5f:02:4f:ab:52:29:1f:e7:77:e8:
c9:cb:e6:08:63:e7:ef:ab:80:18:dd:a2:52:70:51:
20:f4:f6:4e:18:46:e5:6a:82:76:c7:f8:c7:fd:d0:
ab:ac:41:16:d3:d6:2c:dd:0d:9c:51:da:09:cd:7b:
cf:72:3d:31:e1:74:ae:84:bb:41:a9:54:5f:56:05:
41:6b:16:b6:30:09:a3:ae:e5:99:7c:77:53:d0:7c:
bc:4e:ef:30:1d:e6:2e:00:ba:70:95:dd:3a:37:17:
90:db:21:e1:b4:f1:05:52:b2:1d:bc:fd:3e:b6:3b:
00:f7:f9:d3:56:70:e1:c6:50:ff:79:c2:c1:6b:a4:
f6:e9:40:9a:c2:4d:9b:b3:2b:9e:3a:61:72:df:24:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AD:95:EB:D9:97:4E:B7:CE:A3:12:08:EB:43:0B:62:2A:86:9B:3A
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/1-a2V69mXTrfOoxII60MLYiqGmzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.127.0/24
Signature Algorithm: sha256WithRSAEncryption
41:39:74:0d:48:37:5d:93:c7:fe:58:39:c3:70:80:0f:bd:4c:
a4:21:cb:3b:6b:a9:72:51:86:3b:82:46:38:b4:a2:1c:0f:33:
f2:55:0c:db:c0:cc:ea:c9:b7:11:90:b4:f6:3e:72:0b:eb:6f:
85:ea:e7:8d:fa:7c:e5:0f:84:3b:94:91:9d:60:d8:6f:e5:5a:
a7:bf:a4:21:33:bc:dd:b7:1d:07:56:22:05:cc:a2:52:d5:bd:
e8:00:23:02:55:9c:e0:94:9d:8d:7a:b3:c4:91:10:72:e8:e4:
f6:c4:32:09:df:96:06:3e:d5:a5:be:18:31:cf:59:31:2d:1b:
8a:6d:86:92:e9:b6:f4:28:5c:2d:d4:e5:08:6d:9c:39:93:13:
2a:3f:19:28:cc:d5:d7:e8:d9:8f:86:0b:f9:5e:a1:10:20:d5:
70:a9:94:82:60:55:54:33:d6:89:9a:bd:58:09:ce:27:6f:84:
ba:ab:bc:3d:06:23:07:cd:21:e4:1b:d4:e7:8e:f0:74:89:98:
c2:e3:5c:bf:fc:8b:fa:f0:ca:37:59:b6:80:b2:93:fa:f9:f0:
45:3f:72:5d:29:50:ea:02:ef:e9:93:c6:d1:e3:7b:d8:a0:af:
16:3e:0a:f2:18:c3:34:57:6e:d3:6e:32:e4:af:d2:6a:47:6b:
e8:b8:0b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:18:36 2024 by rpki-client on console-fra.rpki-client.org