Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/A9QJfbhzaLaZkN-mtB8WFKyIxKc.roa
File: A9QJfbhzaLaZkN-mtB8WFKyIxKc.roa (raw, json)
Hash identifier: x5nx6BbRCNgelYNHvZ6yGN+4aXJepgS6vfHCa2co2c4=
Subject key identifier: 03:D4:09:7D:B8:73:68:B6:99:90:DF:A6:B4:1F:16:14:AC:88:C4:A7
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 0192DC6BFBC74CE4A7FFD6865C428AE2A6BE
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/A9QJfbhzaLaZkN-mtB8WFKyIxKc.roa
Signing time: Wed 30 Oct 2024 07:55:17 +0000
ROA not before: Wed 30 Oct 2024 07:55:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201634
IP address blocks: 193.228.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:6b:fb:c7:4c:e4:a7:ff:d6:86:5c:42:8a:e2:a6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Oct 30 07:55:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03d4097db87368b69990dfa6b41f1614ac88c4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4a:34:4a:f4:c5:03:44:7c:3b:37:35:16:8a:
9b:7b:03:8b:85:c4:63:89:93:67:aa:27:ac:cd:2f:
9b:95:95:4b:e7:60:50:8c:65:e7:2b:89:5f:77:33:
80:16:19:24:a7:e3:68:9c:d4:07:2e:ba:d7:df:ce:
2f:80:b3:88:6c:65:69:21:c8:4b:14:d4:1d:58:f7:
80:66:c8:b9:43:07:01:49:16:61:b7:30:55:67:48:
58:eb:c6:42:57:3a:59:45:df:8f:fc:88:8c:26:71:
01:85:7c:c5:c5:11:49:21:9b:60:84:cb:4e:55:0c:
88:a5:da:f5:f7:82:c1:76:39:01:e9:42:90:ab:aa:
e9:41:ec:3d:70:a4:df:51:c0:dd:95:06:8e:dc:3f:
24:21:96:a4:78:85:1b:6e:4b:d0:fe:c1:6e:77:67:
5b:d2:ad:96:c7:34:ce:a9:b5:33:af:27:fd:29:fc:
c6:b2:b6:78:99:75:cc:2c:3e:54:73:cb:cf:6a:20:
55:3c:cd:f2:c8:c4:00:0b:22:77:2d:93:2d:c2:c5:
05:67:5e:e1:65:1d:14:21:31:50:8b:1c:05:ed:b6:
b6:de:2f:5b:1d:6c:df:37:b1:a7:46:d0:29:f7:74:
b3:de:c2:e9:07:cb:8c:7a:31:42:40:e2:bb:bc:f2:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:09:7D:B8:73:68:B6:99:90:DF:A6:B4:1F:16:14:AC:88:C4:A7
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/A9QJfbhzaLaZkN-mtB8WFKyIxKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.90.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:9d:39:58:bc:49:a0:d1:e3:1e:34:98:b9:4b:f2:1b:99:07:
0b:df:d6:8e:36:33:f3:b1:d6:c5:78:fb:e8:d8:f6:a7:9c:de:
12:0b:0e:be:09:f8:b2:ff:ea:ab:24:33:0a:9a:e1:70:b8:34:
3a:5b:64:80:fd:1d:01:3d:be:dd:53:4e:cc:d3:d7:48:d3:c8:
10:cd:f2:6b:da:c8:72:3f:cb:d0:ab:57:b1:52:d2:ce:d9:d0:
d0:b2:87:19:80:95:47:9e:84:e8:33:ea:ee:30:ec:75:36:0b:
f3:1b:98:06:6c:9c:c3:60:76:73:87:0f:a6:e1:ad:70:c7:60:
ae:51:84:4f:41:ba:3c:40:3c:d1:8f:c5:a3:cd:44:f9:49:02:
a4:33:39:58:82:5c:68:07:2d:72:2e:1f:ca:79:d1:74:b3:45:
b6:db:5b:a5:5c:22:1a:05:a6:5c:b0:ba:7f:38:be:3c:95:df:
f9:f9:33:e1:2a:64:1f:57:58:f1:be:d0:4c:03:ae:11:bf:eb:
a5:51:60:0c:d6:c9:f0:50:f4:f3:56:6b:db:89:eb:17:7e:d8:
4d:70:99:d7:6d:52:4f:76:c3:77:b9:6a:05:21:8c:22:31:79:
8f:97:72:b1:3f:3e:f3:dc:98:be:1e:9d:79:e9:fd:57:b2:f4:
07:f7:93:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:34 2024 by rpki-client on console-fra.rpki-client.org