Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/C0MYN6nf6yFTbInpgMHGANJM0Uo.roa
File: C0MYN6nf6yFTbInpgMHGANJM0Uo.roa (raw, json)
Hash identifier: B89hPA9De9TLoOkJcSxXiaUpGgSpbgOE1lDb7UGF+/w=
Subject key identifier: 0B:43:18:37:A9:DF:EB:21:53:6C:89:E9:80:C1:C6:00:D2:4C:D1:4A
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01926A77308E45BE7E4DA807E97E269B2C1A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/C0MYN6nf6yFTbInpgMHGANJM0Uo.roa
Signing time: Tue 08 Oct 2024 04:50:48 +0000
ROA not before: Tue 08 Oct 2024 04:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214109
IP address blocks: 193.47.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6a:77:30:8e:45:be:7e:4d:a8:07:e9:7e:26:9b:2c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 8 04:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b431837a9dfeb21536c89e980c1c600d24cd14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:53:8c:33:c2:f9:e6:b1:7e:71:a4:cb:58:
99:7a:3a:3d:73:d0:90:bf:6a:df:d8:34:2f:3e:86:
43:72:ec:77:33:b7:25:e7:75:07:98:de:20:7a:a4:
2d:a8:dd:1c:27:60:d9:44:8a:3b:29:df:11:a3:8e:
0f:ad:77:c0:7c:cc:a4:d9:ba:dd:45:ee:38:80:01:
af:27:1c:95:71:ed:3c:6e:50:8e:e3:31:d6:c6:84:
f5:e7:90:9b:6a:4e:e9:1f:04:f0:29:6d:95:a1:00:
89:85:e1:74:9d:34:cd:ad:1a:69:c0:9c:e1:af:ed:
e6:97:71:f8:49:c7:7f:90:34:55:32:a8:d9:da:09:
40:b8:60:e4:cd:bc:72:5b:2f:9a:fd:38:06:e9:23:
e6:cf:5b:b6:d2:9b:8c:9f:6a:46:36:56:e3:72:5c:
8e:23:88:51:e0:6a:35:a0:0e:40:b2:97:10:2a:8f:
51:2e:e9:8a:3b:62:63:f5:81:20:da:09:0e:16:12:
7b:5f:5c:4a:40:42:85:f7:4b:ff:04:79:1f:ad:e6:
98:3c:96:56:09:8a:4f:61:c8:88:70:07:01:01:73:
3e:06:ab:18:3b:7e:18:f6:3f:b2:6f:c4:43:18:eb:
c9:d1:6c:29:7b:d4:80:91:1d:f3:0f:f1:39:d4:db:
fc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:43:18:37:A9:DF:EB:21:53:6C:89:E9:80:C1:C6:00:D2:4C:D1:4A
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/C0MYN6nf6yFTbInpgMHGANJM0Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e1:09:8e:d3:ea:5b:22:d3:73:6e:22:9c:66:8e:9b:c8:3a:
a6:f2:58:1f:9b:3b:62:3e:e0:90:88:2e:c4:e1:55:de:2e:25:
50:0f:19:b8:e1:aa:fd:5c:2f:98:72:b6:9c:d3:9a:2f:ed:92:
3e:69:f0:3c:63:1e:a7:b6:73:82:47:34:f7:85:9d:cd:ab:81:
8d:65:0a:89:dd:80:08:86:9a:f1:fe:8c:1d:f9:57:ed:7b:fd:
4f:9e:7b:6b:16:ce:cc:ac:8b:87:dd:c4:14:a0:18:d5:40:e2:
aa:4b:b9:30:24:c8:94:1a:a3:a0:32:31:39:8a:2a:a6:9f:f8:
ca:b2:c1:d6:86:25:2f:dc:18:a0:51:fe:98:7d:db:ca:ca:94:
1c:30:bb:04:59:0e:30:85:ca:93:3e:56:97:b2:d4:f3:b5:ff:
f6:21:ea:f4:01:51:4b:97:af:69:58:ad:52:ba:93:a8:60:70:
b7:59:26:66:de:31:93:71:02:9b:23:52:64:66:5b:f1:6d:79:
50:fd:08:93:21:5e:59:c2:5c:a8:c6:7c:22:df:0d:a3:e8:14:
a9:01:88:9f:ca:5e:3b:fd:75:17:00:1a:cb:23:20:09:62:8e:
f2:a0:14:c1:13:12:9f:17:a1:a7:db:a7:01:9f:8f:ce:6b:53:
70:e9:7e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:01:58 2024 by rpki-client on console-fra.rpki-client.org