Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/nJxP-BV9jATd89OOfTKxlfQ4UQ8.roa
File: nJxP-BV9jATd89OOfTKxlfQ4UQ8.roa (raw, json)
Hash identifier: wpwGV7RtBawwydLdzKFrCNUGFH9Ekl4Zc9Dbnr5awNQ=
Subject key identifier: 9C:9C:4F:F8:15:7D:8C:04:DD:F3:D3:8E:7D:32:B1:95:F4:38:51:0F
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 018CC94D349B41A1E8714CCAE1D83941FE14
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/nJxP-BV9jATd89OOfTKxlfQ4UQ8.roa
Signing time: Tue 02 Jan 2024 08:32:09 +0000
ROA not before: Tue 02 Jan 2024 08:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16013
IP address blocks: 193.92.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 21:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:34:9b:41:a1:e8:71:4c:ca:e1:d8:39:41:fe:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 2 08:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c9c4ff8157d8c04ddf3d38e7d32b195f438510f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:32:ee:22:01:7b:4b:a1:c8:51:a0:09:ed:
1c:0b:e0:b2:03:ed:b6:21:dd:48:83:75:45:d6:cf:
b8:55:5d:8f:b3:16:37:e0:9f:f2:5a:6a:9f:4b:e1:
5e:7e:f8:e9:6a:1b:a7:3c:29:62:d5:0a:d6:c7:d2:
03:40:cd:c1:48:22:a1:43:fb:65:b0:ed:de:a9:1d:
a2:e9:4d:88:fc:bf:a4:2b:47:64:d4:1e:1d:c2:4b:
d6:75:b9:0d:af:be:31:bf:1c:ac:c9:a5:a7:2c:39:
4f:f5:3f:82:ac:99:56:c7:78:f6:5c:15:5d:bf:6c:
f5:94:ee:5d:19:12:9f:2e:68:07:bd:8d:51:83:8b:
fc:c9:34:2d:da:86:17:64:cf:77:c2:a6:69:cf:d0:
82:40:ba:e5:4e:6d:7e:51:ae:c2:8a:73:3e:eb:68:
c2:8a:ae:70:b2:0a:88:69:22:5a:58:5e:e6:6a:7c:
a3:86:5d:63:69:ac:b5:09:e6:4f:fb:c4:62:03:d2:
be:3e:ef:3e:25:39:6e:bc:3a:bc:53:ec:7e:6d:96:
09:ae:49:4b:d6:20:f4:f6:81:0d:9f:4a:ee:33:83:
46:1a:7e:13:d0:47:0f:ae:b9:38:39:55:79:d2:e2:
cc:fc:a1:f9:e5:ea:50:22:d7:b0:28:8f:d7:4e:45:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9C:4F:F8:15:7D:8C:04:DD:F3:D3:8E:7D:32:B1:95:F4:38:51:0F
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/nJxP-BV9jATd89OOfTKxlfQ4UQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.92.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:37:5c:44:9d:59:22:9b:50:75:2a:71:31:db:71:2d:05:c1:
b7:3b:a8:30:a1:60:30:b6:15:0a:c2:e2:43:18:53:94:50:50:
a5:e1:eb:77:da:ce:1f:7e:f0:ec:78:06:3b:9c:1c:c1:83:53:
6a:7e:ce:a3:5e:ba:48:0b:08:cf:ec:e1:bb:77:54:1b:30:83:
47:7f:b2:ac:11:88:7c:0a:2f:3a:25:a5:48:cc:e4:1e:3d:c5:
20:54:e8:b2:8e:1c:2b:2d:af:d3:1c:dc:41:b7:75:14:d8:a9:
8b:67:30:17:ce:79:fa:f6:00:da:19:6b:1c:e4:aa:31:79:61:
2a:f9:0e:d3:c5:88:a4:22:b4:6d:cc:eb:3b:5c:80:d8:a1:9f:
08:81:c3:cf:30:28:2e:b1:1d:99:bf:96:43:36:50:fd:c8:32:
17:98:ac:e0:f4:cb:0b:d3:22:28:93:ce:3e:47:bd:49:54:5f:
b8:2f:29:2d:0d:4e:5f:6c:8d:52:27:b0:c1:40:16:ae:07:1b:
ca:e0:d2:95:2e:93:26:81:4d:9f:0a:e2:bd:29:81:3a:a1:a9:
a9:44:48:0a:72:db:ff:2e:97:e8:13:b6:77:d5:34:96:49:0f:
ec:18:36:bc:ff:ab:4a:03:ef:96:dc:07:bd:6e:7c:af:e9:bd:
14:4a:11:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:16:14 2024 by rpki-client on console-fra.rpki-client.org