Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/9HtA6JF91meCX4GT5Ui0lnlulFw.roa
File: 9HtA6JF91meCX4GT5Ui0lnlulFw.roa (raw, json)
Hash identifier: QCiZrHauYqQ1CmPSvJAMB8M6PC9n/lwiM3x6Ozu5n88=
Subject key identifier: F4:7B:40:E8:91:7D:D6:67:82:5F:81:93:E5:48:B4:96:79:6E:94:5C
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 018F2F8AFC976A0A55A08738C70B9D52F9A9
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/9HtA6JF91meCX4GT5Ui0lnlulFw.roa
Signing time: Tue 30 Apr 2024 15:06:28 +0000
ROA not before: Tue 30 Apr 2024 15:06:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3561
IP address blocks: 130.193.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:8a:fc:97:6a:0a:55:a0:87:38:c7:0b:9d:52:f9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Apr 30 15:06:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f47b40e8917dd667825f8193e548b496796e945c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d7:c6:93:93:d7:08:4b:1e:65:9b:5f:38:52:
3e:9a:a6:3b:42:df:87:b9:da:cd:7b:67:70:7a:f6:
fe:39:66:c4:8c:cb:f7:e9:36:cd:9b:fb:69:82:38:
f4:c2:36:74:a6:79:99:5a:13:89:d3:0c:64:20:54:
b3:f0:d2:33:4c:c5:4d:1e:fd:a2:de:ef:51:14:08:
f5:e2:f8:55:d8:8f:d4:42:2c:01:df:c4:87:dc:cd:
cd:f4:7e:f8:82:02:c5:50:60:b5:90:44:49:89:0d:
22:85:5a:ad:60:3c:9b:9b:71:89:2c:b6:be:ca:bd:
5a:18:4a:ec:59:eb:cf:ae:01:26:89:28:d0:1f:ac:
50:fd:61:07:e7:1f:58:47:05:f2:a4:93:95:2f:82:
27:8f:fa:6f:53:b0:d5:bd:9a:0b:6f:c6:a4:04:f7:
3d:89:78:0f:72:f3:8f:f3:7c:79:15:e9:f5:f7:1f:
d0:ca:fe:88:86:f5:6b:e5:6c:70:5f:13:93:fc:e7:
ab:5d:60:1a:a5:8e:ef:29:8c:ab:75:1c:76:f5:13:
7f:07:75:ec:6b:55:60:d5:73:bc:c2:29:f9:1e:5e:
3a:af:0b:83:c9:f5:d3:25:85:e0:04:12:de:8b:6b:
1b:db:e7:d2:33:60:e0:af:b8:31:f3:c7:f4:eb:a7:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7B:40:E8:91:7D:D6:67:82:5F:81:93:E5:48:B4:96:79:6E:94:5C
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/9HtA6JF91meCX4GT5Ui0lnlulFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
78:1a:7b:4c:68:a0:ec:52:a0:13:be:8a:99:2a:cc:07:5f:de:
0c:90:6d:55:6b:00:cb:3c:56:d2:5a:e1:5d:c8:d0:14:e4:20:
ff:67:56:da:57:f7:f6:fa:21:99:66:15:97:04:f9:26:59:4f:
23:bf:a4:be:97:7a:fb:cc:46:cd:10:ec:49:6f:22:43:a2:70:
17:ee:bc:d2:d1:ad:32:aa:5a:59:17:04:f4:b6:0e:b5:14:4f:
13:6a:b2:79:b0:4c:59:36:57:1a:be:a9:73:d4:45:02:7e:1a:
3c:e2:da:19:79:91:b9:95:ff:70:59:52:48:8d:be:50:6c:cd:
bd:b9:00:cb:39:49:99:7e:97:da:46:ac:f5:e7:88:51:0e:c0:
d6:89:1f:08:56:0c:04:47:bb:2d:2f:1a:2f:91:a7:be:dc:30:
db:6c:c0:31:6e:ff:e7:75:b9:de:50:05:6d:93:99:12:eb:c0:
2e:82:8a:de:cf:23:ab:6e:be:93:fc:67:3e:9d:8a:41:1c:61:
bb:be:d8:03:94:38:1e:74:8c:99:04:c2:3f:4a:3b:28:a1:89:
cd:be:5b:1e:e8:a6:6a:7a:58:e6:5a:95:7c:e7:98:92:3d:84:
d3:9d:8c:99:b1:bf:f3:9d:56:e5:36:7d:aa:41:73:8c:ec:73:
7f:f4:18:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:57:21 2024 by rpki-client on console-ams.rpki-client.org