Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/2dF1iV6oPEBwnwiQaOFNNkkH3qg.roa
File: 2dF1iV6oPEBwnwiQaOFNNkkH3qg.roa (raw, json)
Hash identifier: q+x/I6jFWtkl516yF46WZfM+yN6SuvVeVziTovQpDzM=
Subject key identifier: D9:D1:75:89:5E:A8:3C:40:70:9F:08:90:68:E1:4D:36:49:07:DE:A8
Certificate issuer: /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Certificate serial: 0190B5A69FB3EAA20E5287465F66898DFD07
Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/2dF1iV6oPEBwnwiQaOFNNkkH3qg.roa
Signing time: Mon 15 Jul 2024 09:08:34 +0000
ROA not before: Mon 15 Jul 2024 09:08:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214870
IP address blocks: 193.151.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b5:a6:9f:b3:ea:a2:0e:52:87:46:5f:66:89:8d:fd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Validity
Not Before: Jul 15 09:08:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9d175895ea83c40709f089068e14d364907dea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:16:d0:0f:4d:95:b4:02:39:68:0d:0d:52:
0f:02:23:9f:71:47:fa:6e:6e:b2:3b:01:e0:0a:e6:
9b:13:9d:6c:39:3a:34:3e:b9:01:ef:02:b4:f7:20:
b7:7f:1b:62:c8:84:51:b0:15:b7:42:30:2f:00:a9:
67:04:78:42:c8:6d:c9:c7:c3:f1:f0:31:42:86:10:
0e:55:ff:3b:3c:5b:a0:56:5d:71:8d:4e:a1:eb:df:
a8:a0:22:86:c8:a4:de:50:73:6a:70:ef:0c:e5:46:
68:f5:9a:7f:72:d6:08:ea:8d:4d:6f:88:1c:c7:d0:
5e:dc:a7:ce:49:af:7c:b5:77:e1:82:c7:76:35:f8:
2c:41:95:d0:2a:0b:49:c8:fe:bf:d4:af:25:54:35:
9a:34:92:28:83:8f:ee:da:c0:e3:db:6b:07:38:6d:
39:53:22:a5:59:91:a2:5c:c0:40:4b:d3:78:a8:18:
00:76:eb:e7:9d:f1:23:db:73:7f:5a:0f:84:88:80:
3b:cf:b9:20:d5:65:5b:54:c7:0c:0d:88:11:3f:01:
04:01:e1:11:d9:7c:6f:17:c1:d4:41:44:83:01:7c:
17:c6:bb:0b:63:39:0e:a8:9c:8f:b2:3b:06:ba:3e:
56:16:63:f9:0a:89:8b:dd:0f:db:f2:36:aa:be:34:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D1:75:89:5E:A8:3C:40:70:9F:08:90:68:E1:4D:36:49:07:DE:A8
X509v3 Authority Key Identifier:
keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/2dF1iV6oPEBwnwiQaOFNNkkH3qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.245.0/24
Signature Algorithm: sha256WithRSAEncryption
72:89:5d:23:26:5d:5f:01:34:36:00:3f:49:c8:cf:e7:7b:c3:
28:97:e3:04:d0:90:37:b2:0d:3f:77:2a:79:d6:5a:6e:d5:d7:
d5:69:d1:e8:e3:65:c8:c0:f6:34:45:f0:6c:c7:4b:ae:b3:96:
cf:84:90:28:1c:cc:07:d9:41:11:ba:7f:f4:19:63:9b:2f:d7:
a4:ff:d6:07:18:d3:6e:72:c8:72:e1:8a:00:55:07:ec:68:01:
42:44:e8:db:1d:2f:01:76:d8:93:fc:cd:13:19:bc:01:59:3b:
bc:5d:f5:cf:e6:f0:f4:e3:22:63:35:4e:9d:9b:a6:1f:06:fd:
30:47:b0:15:65:60:c9:15:91:78:2a:5c:26:78:7b:c1:1b:c1:
2b:a9:2c:62:50:a2:11:2a:01:ff:1c:38:bb:08:13:1c:eb:f9:
c2:5c:cc:51:ef:96:c7:38:5c:3c:79:8c:ac:df:61:c4:ce:97:
a4:47:b6:fc:26:ea:2a:63:c0:f7:74:66:aa:9d:5f:4a:bc:1e:
27:65:c0:3d:b2:fa:e0:18:e1:32:28:ec:de:0e:d9:f6:1e:25:
1a:63:71:db:c1:5b:d6:12:d2:b0:96:5f:e9:40:c8:d0:6a:0e:
8e:34:9c:09:2f:db:b1:de:f2:cf:92:ef:d6:8c:f8:9e:08:49:
ca:20:f6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:24 2024 by rpki-client on console-fra.rpki-client.org