Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/7nf24L1dmduALW62BntWSkES9Fs.roa
File: 7nf24L1dmduALW62BntWSkES9Fs.roa (raw, json)
Hash identifier: R207YH9R6cBzJ7b4j3s57TAkz3VgyD5ZtZ/+HhO6qAE=
Subject key identifier: EE:77:F6:E0:BD:5D:99:DB:80:2D:6E:B6:06:7B:56:4A:41:12:F4:5B
Certificate issuer: /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Certificate serial: 018CC26D5F2117C7266D1335DDAF855638E0
Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/7nf24L1dmduALW62BntWSkES9Fs.roa
Signing time: Mon 01 Jan 2024 00:29:56 +0000
ROA not before: Mon 01 Jan 2024 00:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3215
IP address blocks: 193.222.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5f:21:17:c7:26:6d:13:35:dd:af:85:56:38:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee77f6e0bd5d99db802d6eb6067b564a4112f45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6a:42:46:e8:86:84:b4:06:73:a8:4a:5b:d7:
7b:ba:24:76:1a:35:4f:8f:53:4c:1a:d7:53:61:ef:
22:f4:5c:ef:9b:de:d9:50:3a:87:22:81:c8:fe:d3:
dd:47:70:9d:31:c5:92:da:ca:26:fd:59:6e:99:11:
96:69:94:04:05:3c:af:52:61:66:29:53:43:f0:83:
66:f5:fa:79:31:88:85:db:54:37:8c:a0:42:ee:43:
b1:43:02:d1:60:20:b7:ba:7e:62:39:c6:06:f0:ff:
19:c4:90:fe:c8:c3:cc:ae:d1:f0:ea:04:ee:58:e3:
82:ea:b7:32:b0:6d:01:67:36:4e:62:22:8b:b4:64:
41:e2:6a:be:70:05:23:39:e6:69:b5:c7:69:4b:13:
41:7c:82:93:9b:48:b7:78:8a:48:9c:2f:55:06:a0:
f0:cb:a4:81:41:e8:83:cb:27:cb:81:60:a2:53:76:
9a:25:e4:b8:9f:6c:ab:9d:91:a5:52:be:2e:cf:37:
80:bd:3a:bb:f1:38:54:1c:20:c0:c8:04:31:cc:c2:
7f:0c:c5:20:9f:9a:d0:a0:f9:5e:ab:fb:0b:f1:9d:
d4:f5:30:1e:5e:90:79:af:33:b4:65:88:13:27:c4:
70:a9:ec:c4:07:54:34:8b:58:a4:8a:6a:fe:10:e7:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:77:F6:E0:BD:5D:99:DB:80:2D:6E:B6:06:7B:56:4A:41:12:F4:5B
X509v3 Authority Key Identifier:
keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/7nf24L1dmduALW62BntWSkES9Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.134.0/24
Signature Algorithm: sha256WithRSAEncryption
89:30:32:36:8c:82:ef:2d:92:6a:c9:85:ac:5c:f1:f3:f8:7f:
31:be:20:29:49:7f:38:aa:fb:c3:7e:17:48:d2:b1:1d:44:73:
d7:5b:89:14:5a:84:df:b5:86:6c:49:f2:3b:dd:a4:f9:c8:6a:
09:85:a8:c8:4e:b7:d4:8e:ef:20:7b:9a:80:a1:4c:3e:f5:2f:
98:41:04:36:20:9a:36:be:c4:1d:18:ea:f8:a6:ff:51:ef:ab:
12:74:7d:9a:68:85:8e:71:19:68:de:bb:e8:2e:d8:e0:06:b4:
0e:32:b4:46:ad:0e:ca:0f:61:71:35:12:f9:9b:0c:92:b3:03:
8f:4c:8e:58:84:b6:95:39:bd:af:0a:e6:a4:4b:40:5c:0f:4c:
b2:6d:b7:c0:e0:80:a7:5a:4e:ef:7a:aa:dc:a0:28:5c:97:93:
02:07:4c:b6:ce:6a:fc:98:12:d6:ce:8b:c3:c7:a5:45:00:cd:
39:ac:56:82:fa:f6:3a:0d:18:b7:05:70:3b:9b:bf:94:93:a5:
74:eb:9d:2d:28:dd:2f:8d:ab:d8:ad:30:52:94:5a:29:81:67:
fa:8f:f3:aa:4e:a9:7c:90:1d:f7:e3:93:c0:e6:be:9f:85:2d:
24:fc:de:1f:10:55:2f:3a:e9:9d:08:9d:2c:2a:40:90:d0:d7:
7a:66:ac:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:03:36 2024 by rpki-client on console-fra.rpki-client.org