Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/4a6iQSvmvg8gOP04moQqcH05Uak.roa
File: 4a6iQSvmvg8gOP04moQqcH05Uak.roa (raw, json)
Hash identifier: UbnKkUZyQ0IJvq6h2Y4CmdeAWyyT4Ghwzqwm8KLeZeE=
Subject key identifier: E1:AE:A2:41:2B:E6:BE:0F:20:38:FD:38:9A:84:2A:70:7D:39:51:A9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 0192710BA1C1209E892B139B6CD76ADD2D68
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/4a6iQSvmvg8gOP04moQqcH05Uak.roa
Signing time: Wed 09 Oct 2024 11:30:40 +0000
ROA not before: Wed 09 Oct 2024 11:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1759
IP address blocks: 193.143.99.0/24 maxlen: 24
193.143.100.0/24 maxlen: 24
193.143.101.0/24 maxlen: 24
193.143.102.0/23 maxlen: 23
193.143.104.0/21 maxlen: 21
193.143.112.0/23 maxlen: 23
193.143.114.0/24 maxlen: 24
193.143.116.0/23 maxlen: 23
193.143.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:0b:a1:c1:20:9e:89:2b:13:9b:6c:d7:6a:dd:2d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Oct 9 11:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1aea2412be6be0f2038fd389a842a707d3951a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:8d:8a:8d:e4:15:3c:41:7d:03:4d:87:b7:
63:ea:2b:5c:e8:e7:60:03:05:a7:cf:45:ae:2a:88:
b9:18:cd:eb:34:c6:e8:f8:de:b1:09:ff:d1:6a:5e:
c3:76:19:5b:eb:5c:ce:b1:14:f5:95:98:6d:82:9b:
65:05:9e:49:6e:dd:e6:5b:f5:37:ed:a8:44:db:17:
67:d6:87:d2:61:61:b0:e0:a1:8f:e3:ad:d1:56:37:
8e:6f:04:88:24:1e:7b:9a:c0:56:81:95:d8:36:01:
b0:14:0c:cd:f2:98:52:35:3e:62:c9:c3:9c:27:da:
d3:db:a8:83:c2:d3:b2:10:0f:36:34:bb:94:c3:65:
f4:2a:23:c6:2a:2f:38:f1:94:f7:58:7e:5f:1a:a7:
f2:87:5f:10:1f:68:4d:8b:05:f6:c0:c0:2d:a5:a3:
fd:56:9e:33:b4:e3:76:8c:96:d8:08:5a:6e:db:84:
d8:9c:6b:34:b2:aa:a2:cf:3c:b9:0f:65:c3:60:b7:
b9:76:1e:fa:5b:ce:ab:4f:63:bc:e8:ef:25:58:62:
92:ee:b8:ba:23:9d:ab:9e:31:e3:9b:b0:57:8b:37:
d6:b9:b4:4e:ca:46:6a:57:21:c0:24:3b:8e:7e:d5:
be:6f:c1:8a:1a:96:cd:a9:92:5d:b7:78:de:50:de:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AE:A2:41:2B:E6:BE:0F:20:38:FD:38:9A:84:2A:70:7D:39:51:A9
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/4a6iQSvmvg8gOP04moQqcH05Uak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.99.0-193.143.114.255
193.143.116.0-193.143.118.255
Signature Algorithm: sha256WithRSAEncryption
87:89:c9:56:49:ab:96:c5:dc:22:5d:c0:00:f2:5d:84:5f:c8:
58:bb:b1:eb:db:f3:56:7e:6f:c1:4b:23:f6:54:0d:08:86:f9:
4e:e3:f7:eb:10:ec:1d:35:f9:4d:06:dc:a4:f5:8f:09:99:95:
c0:6f:8d:4f:f5:f7:53:b5:8d:56:c2:42:dd:7f:23:a2:66:2d:
b7:d4:0b:0a:b2:77:6b:df:4f:dd:cc:5d:0a:78:d2:f7:d2:c7:
d2:16:84:48:c5:29:14:06:71:16:ff:cf:a6:69:83:11:50:39:
65:54:20:aa:0c:35:ec:ec:c5:28:db:49:cb:2b:b0:f4:5f:8c:
fa:3c:2b:c1:48:8d:90:4a:91:55:0e:eb:c6:8e:5f:c3:84:45:
af:bb:e4:ae:07:bd:ca:ca:65:82:5b:8a:01:49:b1:24:5b:ad:
64:42:90:ec:60:cf:88:e7:ea:89:0c:09:a3:33:84:ab:90:85:
cc:e4:de:a0:79:fb:d8:51:0d:40:9f:5e:96:6e:2c:86:04:71:
a2:4a:93:f6:85:75:92:e7:58:67:a1:74:3c:a5:f7:45:6d:db:
4b:18:10:b9:96:46:d5:07:b9:ee:e3:cc:46:b8:3c:d3:f4:c1:
02:ca:28:5e:60:52:0e:39:b9:78:f1:3d:fd:c4:bc:73:f6:cd:
68:72:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:37 2024 by rpki-client on console-ams.rpki-client.org