Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/9z515J3w1VsfvbZTZ8W24IsAto8.roa
File: 9z515J3w1VsfvbZTZ8W24IsAto8.roa (raw, json)
Hash identifier: u4ojrMBCTHwzQQAWw7R9HEAZo1Ux4KH83qShsy/IGLg=
Subject key identifier: F7:3E:75:E4:9D:F0:D5:5B:1F:BD:B6:53:67:C5:B6:E0:8B:00:B6:8F
Certificate issuer: /CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Certificate serial: 018CC2DB4874250732529BC6C9D332FD8392
Authority key identifier: 3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/9z515J3w1VsfvbZTZ8W24IsAto8.roa
Signing time: Mon 01 Jan 2024 02:29:59 +0000
ROA not before: Mon 01 Jan 2024 02:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50097
IP address blocks: 193.104.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:48:74:25:07:32:52:9b:c6:c9:d3:32:fd:83:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Validity
Not Before: Jan 1 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f73e75e49df0d55b1fbdb65367c5b6e08b00b68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:04:93:31:5f:a0:32:13:2b:33:78:70:4f:0c:
49:ac:c8:8a:82:bf:3b:ae:5d:6c:ae:54:ad:45:00:
11:bb:97:ca:b4:cc:39:04:48:dc:33:51:76:69:af:
ec:ff:c7:87:94:b0:16:9e:e8:64:5c:62:12:35:93:
d8:88:d1:a1:a3:ff:4d:ae:41:cf:cf:87:52:ca:fa:
f0:65:94:fb:41:10:36:bf:06:a7:81:2c:82:62:5d:
b2:3a:b3:08:88:37:79:8d:04:44:59:79:38:01:40:
f8:f6:b5:e2:bb:37:99:03:fa:40:f9:56:5b:0e:31:
29:43:dd:3f:4c:c3:c4:63:4c:c3:76:89:16:79:6a:
9b:5c:42:f9:53:0f:f7:ae:80:14:5b:e9:73:a5:ef:
83:86:89:48:d7:7e:f6:8f:bb:26:75:88:03:70:9b:
b2:f4:6a:70:11:61:a9:a7:06:e7:9d:7b:85:80:6a:
db:e5:c7:63:85:2f:11:94:38:c6:54:0f:71:1a:c8:
5b:82:e5:44:f4:9f:ed:5a:3d:81:54:0e:e9:07:3c:
bb:19:ab:a2:a9:a4:a5:c3:55:b0:0f:3d:7b:73:4f:
17:b1:75:96:a6:83:cc:5e:93:c8:4e:ba:65:98:1f:
38:b5:af:2d:20:11:ab:b5:81:0d:94:5c:0d:6c:08:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3E:75:E4:9D:F0:D5:5B:1F:BD:B6:53:67:C5:B6:E0:8B:00:B6:8F
X509v3 Authority Key Identifier:
keyid:3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/9z515J3w1VsfvbZTZ8W24IsAto8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.17.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:74:6c:7d:f6:90:bf:a0:67:dd:6b:de:3b:ab:a5:2d:23:28:
3c:c7:a0:eb:d0:36:aa:b1:61:f4:f1:d1:ed:e9:00:e6:c3:a7:
8a:e0:c4:ec:12:b5:ae:36:5d:7d:59:b6:28:a5:7d:e3:ea:72:
e5:7d:58:27:e4:2a:38:e6:ea:d3:89:01:54:4f:24:a1:7c:e4:
80:a5:13:fd:8c:a8:f8:14:e5:7d:17:ba:f6:d1:3d:26:d9:5a:
5a:a9:1f:52:49:45:39:a7:8c:b6:f8:f3:08:92:d8:95:7c:25:
e9:b2:4e:49:d0:a0:46:cd:5a:7f:fa:d6:14:99:89:b2:16:ed:
6f:ef:9e:15:b8:40:32:c9:a8:b6:df:29:ec:0d:ec:8e:90:ee:
83:12:f3:54:5f:80:49:6b:e1:64:60:39:83:f9:4e:54:ce:15:
bc:f5:9a:2b:80:53:33:ed:57:d2:70:70:38:97:f2:e1:9b:b1:
d4:d3:bb:08:e3:15:1c:04:57:9b:b2:10:8c:00:ef:8d:21:5f:
a4:f7:74:17:6a:7c:74:3e:ba:d6:43:fb:88:84:93:78:ba:32:
3f:09:d3:5e:39:37:16:ca:f8:62:52:9b:c9:47:a8:34:58:46:
ca:59:93:a6:18:1d:04:9d:53:44:a3:d7:ba:58:8a:fd:6d:fa:
74:17:81:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:20 2024 by rpki-client on console-fra.rpki-client.org