Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/yEQtbxiQDdhGP6PHdHiBPRf8bio.roa
File: yEQtbxiQDdhGP6PHdHiBPRf8bio.roa (raw, json)
Hash identifier: LCx66x6IxRqT4h5vtjdhQwzYSYvkANVHyfp6lEwDnWc=
Subject key identifier: C8:44:2D:6F:18:90:0D:D8:46:3F:A3:C7:74:78:81:3D:17:FC:6E:2A
Certificate issuer: /CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Certificate serial: 0192F60341957958046A90E3F7E69EB0A927
Authority key identifier: E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/yEQtbxiQDdhGP6PHdHiBPRf8bio.roa
Signing time: Mon 04 Nov 2024 07:11:01 +0000
ROA not before: Mon 04 Nov 2024 07:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210949
IP address blocks: 193.42.101.0/24 maxlen: 24
193.42.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:03:41:95:79:58:04:6a:90:e3:f7:e6:9e:b0:a9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Validity
Not Before: Nov 4 07:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8442d6f18900dd8463fa3c77478813d17fc6e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:5c:07:9a:19:74:84:86:36:a0:11:c8:65:
a0:96:6b:5c:ac:32:47:92:b6:b6:2e:2b:39:be:7d:
78:c0:43:df:9a:db:98:48:c0:4f:fd:6b:ea:97:bd:
f9:67:cb:9f:24:40:52:31:6f:a5:61:e9:16:f6:ed:
bf:e0:e8:db:43:03:b4:6c:11:f4:b7:8a:ab:1b:78:
2f:a0:71:dd:8d:1e:9e:2f:c0:a0:5a:55:95:64:f5:
cc:64:a3:51:ae:d4:4c:bc:69:36:92:b0:69:c1:c1:
f8:d4:7a:df:da:e3:f5:27:8e:0b:b8:14:a2:e2:8f:
06:b4:80:d0:c2:05:fe:da:5e:f6:be:45:12:c1:06:
6c:92:56:e8:e4:78:f1:57:af:70:64:2d:3b:2d:5a:
d0:86:a9:39:31:28:a4:1b:8e:5f:93:17:38:5f:ed:
31:01:1b:28:30:fd:4e:4d:f9:02:3a:20:f4:f7:1f:
ec:87:61:5e:37:68:4a:be:12:6b:d4:15:c5:ed:d5:
95:90:ad:fd:af:11:69:4e:7e:fa:b2:8b:ca:c8:17:
02:19:4d:58:f3:8b:88:f3:ce:ce:15:e8:11:d5:08:
98:d8:3c:3e:98:9f:53:1a:07:18:95:cf:b6:80:3d:
15:92:e4:60:30:a0:58:3c:cc:40:17:83:ec:79:fa:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:2D:6F:18:90:0D:D8:46:3F:A3:C7:74:78:81:3D:17:FC:6E:2A
X509v3 Authority Key Identifier:
keyid:E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/yEQtbxiQDdhGP6PHdHiBPRf8bio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.101.0/24
193.42.103.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1c:00:e6:99:70:72:24:a3:8c:5f:9e:35:2a:26:65:9f:cb:
97:5d:59:90:70:ce:7e:76:2f:7a:36:fb:75:09:30:7d:4d:c8:
96:88:4f:11:73:99:9f:1b:be:16:1f:f4:6a:eb:1b:7a:a8:03:
7b:6c:20:75:01:c4:41:44:cf:73:05:58:e2:de:2c:08:d8:9c:
43:04:47:01:0e:98:14:0b:e3:43:fe:aa:e8:b0:d7:63:66:d3:
1f:00:32:0c:96:65:bd:37:55:aa:2b:ae:fd:33:34:14:9d:43:
59:ed:bb:dc:c5:ef:10:e6:f9:fd:7f:d9:bf:f3:2d:95:9e:37:
ba:34:36:c3:cf:6c:6a:3e:59:d3:d8:be:9b:ce:66:1f:f1:c9:
49:0e:f1:b7:3d:5a:a0:16:6a:30:64:a5:d0:7d:77:db:a8:3e:
fc:71:a0:2f:68:d8:5a:4f:31:b0:6d:7e:28:af:4d:37:63:76:
3e:d8:86:f1:15:71:98:5f:06:21:35:b3:61:52:99:44:69:a4:
f7:f3:77:44:9c:5d:91:f2:e8:bc:1f:c4:46:3e:23:84:03:14:
2b:9d:43:bf:39:31:31:a4:e5:39:8a:f0:be:c7:f8:5c:0a:5b:
d3:3f:d5:9a:6e:06:19:39:cb:a1:39:6e:07:78:94:8f:f7:c5:
76:83:66:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:03 2024 by rpki-client on console-fra.rpki-client.org