Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/_-a2uCBtXNLRkYZNlUKgwy_SbZU.roa
File: _-a2uCBtXNLRkYZNlUKgwy_SbZU.roa (raw, json)
Hash identifier: kdaRcCnY9+6a7aMKO3v6oSd2SOzX+DrYAJlaq1mXU9Y=
Subject key identifier: FF:E6:B6:B8:20:6D:5C:D2:D1:91:86:4D:95:42:A0:C3:2F:D2:6D:95
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802D202F2B9B9331E9E5533041B48B4
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/_-a2uCBtXNLRkYZNlUKgwy_SbZU.roa
Signing time: Tue 02 Jan 2024 02:31:17 +0000
ROA not before: Tue 02 Jan 2024 02:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215973
IP address blocks: 93.119.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d2:02:f2:b9:b9:33:1e:9e:55:33:04:1b:48:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffe6b6b8206d5cd2d191864d9542a0c32fd26d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:dc:98:d5:08:9f:ae:9f:95:7c:73:70:55:
bc:c1:be:5b:ec:89:fa:95:77:b0:da:66:76:58:36:
be:07:0d:e8:55:3c:9c:31:2f:83:61:3c:3b:fd:87:
bd:6f:23:b4:2b:a4:12:03:84:38:cd:fb:e3:d9:8d:
a2:71:75:83:d4:18:0d:3c:9c:62:13:7f:f5:5e:5f:
56:3f:4f:37:8f:b1:ac:b6:43:42:58:88:f9:b1:53:
68:78:b0:4c:2f:2d:ef:2d:ce:08:6f:cd:d1:e5:03:
0e:3c:77:ce:2a:3b:d2:26:6f:c1:20:0d:b2:81:d2:
83:ca:37:b8:a5:87:76:bc:26:a2:03:c8:55:73:b0:
97:f9:be:67:c6:4e:69:5b:a9:df:6a:3b:7d:76:e4:
b5:4f:fb:4d:cb:79:37:3a:ec:b6:2d:11:62:dc:ab:
c7:f7:a7:6c:82:18:09:ea:ac:1d:58:82:eb:2a:93:
89:51:4a:34:58:53:2d:e1:e9:86:8d:37:d8:11:be:
bb:1d:16:87:de:ae:e2:86:4a:59:c4:22:a0:7a:ee:
72:aa:db:49:90:b3:a0:f9:77:82:5e:b1:96:5e:65:
8c:18:4c:52:62:cc:c6:b1:25:41:9c:a7:99:a0:e2:
92:05:d4:c9:ad:de:64:df:9c:8d:a3:5d:09:cd:d2:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E6:B6:B8:20:6D:5C:D2:D1:91:86:4D:95:42:A0:C3:2F:D2:6D:95
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/_-a2uCBtXNLRkYZNlUKgwy_SbZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.171.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:dd:90:c5:85:b9:14:b8:ab:4b:fe:36:0c:17:8d:f4:6d:1f:
20:18:59:d3:fe:bc:7c:8f:67:e2:d0:59:99:0c:c4:83:06:1e:
0c:70:ad:24:cb:fb:7b:4e:50:19:84:e0:ea:45:49:66:6e:ec:
9c:b3:88:57:dc:3b:ce:6e:75:f5:e3:77:94:14:91:1c:6a:16:
16:77:6b:78:96:92:dc:71:20:e1:88:89:e2:12:b5:32:f8:ee:
c6:34:a9:05:65:56:0f:d5:d3:96:29:f9:78:cf:84:f3:9b:7b:
9b:11:a0:ef:ba:e6:44:aa:39:9a:3c:1c:8a:a9:7f:06:77:2d:
51:6c:74:dd:a5:5e:38:78:22:a3:e6:23:43:ca:dd:ac:17:04:
8f:4a:c6:7f:ab:c1:e6:64:e1:11:82:4c:f0:2b:0e:5a:cb:6f:
90:6c:af:11:9a:e4:05:02:46:c1:e8:95:ea:7d:11:d1:eb:40:
8e:9e:10:64:60:cd:e3:83:66:68:61:38:b2:ec:fc:41:10:7e:
03:82:16:96:62:00:09:db:12:b8:1d:70:8d:bd:93:b7:64:6b:
95:b6:ac:83:0a:c3:01:61:1c:e8:e5:48:4c:6b:40:ce:60:95:
84:55:86:10:f2:3d:16:e3:6f:dc:53:b3:24:2d:f9:bc:c3:de:
10:de:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:19 2024 by rpki-client on console-fra.rpki-client.org