Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/2O7t16Hu3qC7RwN474xYbrHd66s.roa
File: 2O7t16Hu3qC7RwN474xYbrHd66s.roa (raw, json)
Hash identifier: k4bZJzQxoqC921lp9e6vhUbcHPjTIQqOlXt0s9p/0V0=
Subject key identifier: D8:EE:ED:D7:A1:EE:DE:A0:BB:47:03:78:EF:8C:58:6E:B1:DD:EB:AB
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019176309C853C977908C59ED6F2031C5836
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/2O7t16Hu3qC7RwN474xYbrHd66s.roa
Signing time: Wed 21 Aug 2024 18:26:22 +0000
ROA not before: Wed 21 Aug 2024 18:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 195.64.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:76:30:9c:85:3c:97:79:08:c5:9e:d6:f2:03:1c:58:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Aug 21 18:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8eeedd7a1eedea0bb470378ef8c586eb1ddebab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:0e:96:22:a2:94:e5:4d:b0:e0:69:63:5b:
97:6e:db:ec:db:25:b9:8e:c6:8d:f6:bf:9c:29:6c:
83:98:a3:fe:45:a5:20:8a:76:f3:79:ff:b3:06:26:
42:11:af:b7:ca:aa:af:75:85:56:b3:29:75:e5:99:
64:e6:c6:67:c9:7c:3c:04:fa:e1:f0:4e:30:02:92:
af:38:9c:91:b0:0a:bd:fb:72:a4:64:17:7f:ea:4d:
2b:d4:38:a4:f8:e9:0f:54:98:b3:b2:4e:4a:70:4a:
7f:6b:02:5a:f6:e3:91:b0:8f:cf:26:e8:fc:4b:55:
00:9e:67:b6:a6:72:8c:f0:fe:4b:d8:fd:63:1e:94:
a6:7a:d5:43:92:63:07:5e:fb:20:21:a0:93:a7:24:
53:2c:f6:61:db:23:53:01:e9:60:87:5d:89:99:b3:
0e:cd:8e:20:2a:84:fe:b4:a4:1c:1b:c3:cf:58:ff:
fc:6d:cb:ec:c0:24:53:52:a3:24:1f:22:89:4f:e1:
3d:dd:19:b6:2f:f2:68:87:9f:1a:5d:2c:fd:af:9e:
62:89:c7:77:9d:de:39:c1:bf:45:5a:3f:4f:75:90:
dc:11:72:15:d7:3d:05:80:c2:b4:92:50:39:a3:59:
ab:28:2f:96:68:38:5e:0b:7b:20:e2:f7:eb:0c:29:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EE:ED:D7:A1:EE:DE:A0:BB:47:03:78:EF:8C:58:6E:B1:DD:EB:AB
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/2O7t16Hu3qC7RwN474xYbrHd66s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.108.0/24
Signature Algorithm: sha256WithRSAEncryption
14:dd:c1:43:49:0a:97:c0:64:13:63:fd:3a:af:0d:79:bd:fa:
c7:8c:c5:c9:df:b5:f1:db:da:f3:c9:53:43:67:b1:b5:9b:a4:
87:e9:7f:f8:7c:c1:df:96:29:d5:71:44:8a:9d:82:85:59:be:
1e:40:ca:49:01:0a:be:92:8c:fa:7d:74:cd:7d:8c:0e:70:2b:
18:bb:55:82:65:38:ba:f1:0f:10:7a:c1:23:55:3f:89:55:d2:
01:d0:5a:f6:7b:58:7f:0f:61:01:2e:5c:05:97:35:6a:fa:e1:
79:40:0b:71:7b:db:56:24:ef:40:12:e5:fe:45:b9:84:f3:7d:
4e:52:cc:7f:c8:5b:8a:4b:70:fd:cc:2b:ac:8e:4e:9e:96:c8:
b2:54:83:92:59:bd:1a:40:b7:69:97:7c:72:cc:39:44:0f:ec:
1e:d3:a4:bb:3a:66:e1:cf:5e:83:14:ae:fa:c4:be:82:84:9e:
86:aa:c9:96:d5:a8:a6:92:62:4a:8b:80:98:7b:4b:29:68:1e:
20:2a:39:a1:d5:01:6d:93:b1:bf:58:ae:c6:ec:da:89:bc:cc:
9d:58:38:3f:0b:3e:4e:df:47:14:5e:1b:03:9c:d9:8d:05:8b:
14:6b:d8:5d:48:1f:5f:8a:aa:ff:e9:3d:f1:4c:73:2b:60:67:
13:3b:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:30:03 2024 by rpki-client on console-ams.rpki-client.org