Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/K7tKAbOgQzV7HiZkjMNavvtXrM0.roa
File: K7tKAbOgQzV7HiZkjMNavvtXrM0.roa (raw, json)
Hash identifier: 6QHmAUmp871o0AoG8EuyoKlKQAgJKvCDNN9Rgs+eyos=
Subject key identifier: 2B:BB:4A:01:B3:A0:43:35:7B:1E:26:64:8C:C3:5A:BE:FB:57:AC:CD
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 018CC9BC2C696D82B2D7AD58CBF35BBE0DC5
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/K7tKAbOgQzV7HiZkjMNavvtXrM0.roa
Signing time: Tue 02 Jan 2024 10:33:21 +0000
ROA not before: Tue 02 Jan 2024 10:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41099
IP address blocks: 193.9.15.0/24 maxlen: 24
195.10.215.0/24 maxlen: 24
193.9.255.0/24 maxlen: 24
195.10.222.0/24 maxlen: 24
193.16.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:2c:69:6d:82:b2:d7:ad:58:cb:f3:5b:be:0d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Jan 2 10:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bbb4a01b3a043357b1e26648cc35abefb57accd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:83:76:b4:91:00:43:29:ea:88:81:1a:db:
bb:f6:a7:63:55:5f:e1:7c:67:2a:32:5e:ba:31:1f:
19:03:08:5c:9e:9a:09:e7:82:a9:71:76:55:4b:2d:
b2:d7:e2:5c:64:12:77:3b:b9:7d:46:76:02:60:0f:
da:c3:41:f2:65:67:94:64:f9:1b:b9:a9:e3:06:61:
ea:46:9d:ea:86:8f:1f:8f:2d:84:80:d4:3e:99:7c:
b2:a7:0c:37:50:f2:bb:89:47:9a:d9:d1:57:b4:e4:
dd:2b:1b:9a:a6:7b:8b:a2:77:74:be:b0:6f:0c:c1:
a4:c5:43:db:7f:9f:8e:08:58:f3:5d:40:31:49:3d:
e1:f5:e3:4e:22:e0:fa:7d:e6:7f:e6:2a:52:fa:94:
e7:57:cd:fc:05:ba:3f:f5:5f:a0:0b:54:8e:da:bc:
08:4f:f0:21:22:72:17:ba:94:1d:67:37:3a:04:33:
1a:36:d9:ff:00:c7:7c:0e:f6:99:6a:d0:10:d3:e3:
c6:90:88:cf:f0:2a:49:e8:46:30:61:41:7e:5b:62:
af:85:a0:1e:bd:78:0b:09:85:8f:00:ea:2b:4b:07:
87:f4:c0:65:45:22:26:d9:a1:ef:62:8e:07:f3:da:
c3:3a:89:14:99:c2:a6:0a:85:19:f4:f8:f5:a8:8d:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BB:4A:01:B3:A0:43:35:7B:1E:26:64:8C:C3:5A:BE:FB:57:AC:CD
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/K7tKAbOgQzV7HiZkjMNavvtXrM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.15.0/24
193.9.255.0/24
193.16.0.0/24
195.10.215.0/24
195.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
95:22:20:c9:42:82:48:47:06:b6:10:1c:33:09:23:3a:78:c4:
b4:0d:ee:92:81:28:96:5e:6e:33:1b:ca:d6:d4:01:2b:a1:e8:
98:9c:17:e8:33:9f:6b:53:94:8e:c6:8d:0c:4e:09:b3:f4:63:
ca:fd:50:31:c8:6f:d0:df:f1:86:df:e1:df:f3:46:fb:0c:43:
2e:ea:75:e0:86:e5:8d:d3:80:c9:cb:3c:48:2e:04:e7:7b:83:
61:4a:d0:30:99:65:e0:c9:76:2d:67:75:86:b2:12:0e:0b:d5:
82:a1:3d:d2:c7:5f:d4:58:6a:cb:7a:24:e1:53:93:4d:75:87:
0b:86:96:69:47:01:b7:f9:60:18:8a:81:f7:30:fb:ad:a5:c3:
77:2b:e2:87:66:dd:ef:ac:35:d9:67:7b:77:ed:f9:99:71:3a:
3d:fe:ef:15:91:89:4d:31:d9:d1:fe:f1:87:57:a6:44:61:56:
39:59:ef:9b:08:59:bf:1f:4e:a1:57:c5:f0:2d:db:e8:c1:cb:
21:6f:60:63:d9:40:70:fc:9c:62:95:27:f3:76:84:0b:b4:74:
f6:a5:03:9b:dc:5a:91:b8:bb:8a:e3:56:ef:56:4e:0b:c8:96:
69:a9:01:cc:1b:48:c7:bb:a2:70:e0:ba:1f:53:ee:fd:45:c3:
5b:3e:1e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:34 2024 by rpki-client on console-ams.rpki-client.org