Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/sNJsm6_8vBC5pMkIk32OuVpr3hQ.roa
File: sNJsm6_8vBC5pMkIk32OuVpr3hQ.roa (raw, json)
Hash identifier: MaaQuKe7LSgZ3q4Jk/eCa9JF+h0e2e+LkCn8Gd0I/OE=
Subject key identifier: B0:D2:6C:9B:AF:FC:BC:10:B9:A4:C9:08:93:7D:8E:B9:5A:6B:DE:14
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0193493377D416A23FD10362E2DDA85A8E31
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/sNJsm6_8vBC5pMkIk32OuVpr3hQ.roa
Signing time: Wed 20 Nov 2024 10:52:09 +0000
ROA not before: Wed 20 Nov 2024 10:52:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35273
IP address blocks: 193.43.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:33:77:d4:16:a2:3f:d1:03:62:e2:dd:a8:5a:8e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Nov 20 10:52:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0d26c9baffcbc10b9a4c908937d8eb95a6bde14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:9c:29:a3:2e:c8:6d:21:aa:ac:8f:db:cf:
11:80:8f:7c:c4:53:3d:4e:d9:e6:34:1b:aa:af:9f:
82:dd:d2:34:eb:b9:4a:a6:99:bf:cc:ff:95:47:ee:
ae:e9:e1:f4:9e:a7:42:e1:5d:b0:4a:8e:2d:9a:91:
2e:1d:6d:e4:51:ea:d4:f3:62:1e:a6:a3:dd:76:67:
b6:ed:33:e0:42:2b:07:b0:f7:00:03:54:a9:99:68:
f1:4d:07:7c:18:93:8c:2c:59:cb:a3:9e:2c:39:e4:
d6:c8:bb:a6:09:6e:83:9a:b1:de:26:36:49:60:18:
08:fc:37:fb:48:bf:40:aa:ba:cd:b2:b2:09:3f:e3:
62:2a:77:1d:4b:6d:14:db:18:97:69:5b:d8:20:0a:
cb:61:c2:73:ef:2f:f3:65:3a:bf:2a:ec:d9:f0:8e:
14:cb:5e:22:4f:61:e5:ee:62:2b:00:55:c2:73:fe:
dd:7b:23:96:79:d9:98:d8:ce:ef:c8:59:b6:76:45:
ce:3b:1a:36:55:1e:92:24:03:1b:54:03:df:c1:73:
cb:80:7f:61:fb:80:d8:8f:58:98:2b:88:83:99:3e:
9d:b6:5a:6e:d5:89:bf:d8:3a:ef:64:c6:2a:44:ca:
1e:7e:92:eb:6f:fa:21:95:ca:3f:df:fe:9c:52:31:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D2:6C:9B:AF:FC:BC:10:B9:A4:C9:08:93:7D:8E:B9:5A:6B:DE:14
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/sNJsm6_8vBC5pMkIk32OuVpr3hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.252.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:49:a1:e6:7b:4a:b0:6f:64:d2:7f:b0:3e:9a:10:5f:5f:1b:
68:9b:a9:e4:32:19:54:7d:22:77:e4:0f:cb:00:30:f9:a0:01:
8b:a9:3e:82:79:cd:c8:5a:10:a4:7b:2d:ed:9a:a1:2f:05:45:
48:22:c3:8c:ce:73:31:9d:b0:df:ce:8f:06:44:14:cd:0a:7a:
0a:fb:4d:fb:86:f5:0d:d0:40:9b:60:1b:9f:0c:e0:ce:42:88:
85:28:30:79:1f:91:b0:e3:a2:1a:93:31:f9:79:e2:4c:f0:15:
5a:82:28:6e:87:cc:ee:60:ab:d9:59:96:3a:a6:de:cd:43:a1:
40:88:24:63:75:07:86:d1:1a:71:96:ff:ed:64:9a:93:25:8e:
91:03:8a:66:d4:3b:61:28:5f:53:32:37:4b:47:e8:39:a8:f1:
d4:bf:21:f3:42:30:85:c6:69:6f:25:36:87:61:c4:87:59:a4:
bd:5f:4a:1b:be:fe:97:f8:43:2d:df:13:9a:b9:4c:b6:8e:ae:
58:1d:fc:ca:5c:d8:a2:a1:9b:07:80:41:d3:f9:c2:af:ef:93:
ba:6a:a3:24:54:44:88:b1:bb:f3:22:3f:07:0b:46:6d:e6:5c:
c5:2b:03:b4:3f:77:4b:bb:0a:1d:65:b0:f3:33:a8:76:d5:4f:
3c:3a:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:06 2024 by rpki-client on console-ams.rpki-client.org