Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/6ZOEIetqZw_mDy4L0kBaMDcD-p8.roa
File: 6ZOEIetqZw_mDy4L0kBaMDcD-p8.roa (raw, json)
Hash identifier: mJyME99du5HLJA2O4JjAoxgcwD2WW076AxTQuiNxcmw=
Subject key identifier: E9:93:84:21:EB:6A:67:0F:E6:0F:2E:0B:D2:40:5A:30:37:03:FA:9F
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 018CC64A4466B468A92243B21EFAEA8BDC9D
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/6ZOEIetqZw_mDy4L0kBaMDcD-p8.roa
Signing time: Mon 01 Jan 2024 18:30:04 +0000
ROA not before: Mon 01 Jan 2024 18:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21203
IP address blocks: 193.109.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:44:66:b4:68:a9:22:43:b2:1e:fa:ea:8b:dc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Jan 1 18:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9938421eb6a670fe60f2e0bd2405a303703fa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:84:33:1a:d2:7e:3c:1c:bb:dc:d4:3d:89:0d:
bf:d5:22:76:a4:cc:10:47:fe:2d:42:18:db:c9:97:
a1:64:f4:a1:a0:c2:b8:2c:84:68:6c:e7:04:d5:cc:
45:da:50:94:68:21:21:5c:ce:6a:90:53:fe:44:b2:
14:4a:3b:43:bb:12:b3:41:56:00:42:ee:9a:95:78:
44:23:4e:45:30:98:d2:1d:5f:20:3c:3a:b1:0b:a7:
17:80:32:20:07:44:16:bc:90:99:53:50:79:bf:e1:
71:5a:c8:6e:ab:0a:cd:00:9f:80:15:c4:07:bf:94:
be:be:8a:66:db:65:ff:72:4c:12:ed:30:b2:b1:80:
99:65:15:1c:41:7c:b3:52:c4:ff:18:6c:2e:65:2d:
5d:91:fc:1b:3f:b5:d3:31:d9:56:41:58:ab:5e:12:
fd:ac:a1:d4:c2:cf:c9:f1:cd:dd:65:a0:05:9e:69:
b6:3e:fe:6d:e2:ca:c7:97:55:34:a4:fa:d2:ab:91:
1d:9b:e9:a0:67:9a:d3:5c:78:6f:10:57:0e:35:df:
6f:79:d9:e6:41:5e:31:0d:ef:27:22:d6:0d:ed:7d:
67:c8:a5:87:f6:9b:cc:14:ef:70:71:17:c6:e5:53:
8d:93:80:1f:ac:45:37:0a:58:92:fc:41:36:f5:d2:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:93:84:21:EB:6A:67:0F:E6:0F:2E:0B:D2:40:5A:30:37:03:FA:9F
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/6ZOEIetqZw_mDy4L0kBaMDcD-p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e1:a9:b4:f6:88:41:4c:03:64:35:18:3c:07:4c:c8:5b:9d:
be:d5:6c:d3:38:91:3c:6b:a5:e3:72:dc:d6:fb:9c:b1:08:0c:
5a:4a:05:00:e8:3b:f3:56:2b:da:d2:27:16:8b:fe:1e:65:73:
85:28:3d:0f:42:ba:5c:b4:4f:27:28:39:67:c2:7a:c5:7f:fd:
84:68:c3:b7:5d:75:94:fe:5c:82:b4:01:e8:0e:87:c0:8e:e3:
e8:3f:61:71:c7:9b:f6:69:36:9e:c4:3e:d6:2e:0f:db:1e:88:
fd:7c:48:af:1c:a1:3b:f0:b9:16:77:35:dc:27:f4:eb:1b:3f:
c3:0a:77:dd:5b:bf:43:21:5c:97:16:d1:a3:7e:aa:da:bc:ad:
01:c0:0b:20:34:b7:f4:09:17:df:83:f9:9c:6f:29:58:78:90:
ea:d5:dd:69:ac:99:be:c2:f1:b0:e0:a4:8b:14:72:2c:f9:0b:
d0:57:81:6c:5c:bd:e5:a3:ba:68:bf:d8:b8:38:e7:52:a2:86:
c0:f1:30:91:47:c5:d4:29:9b:2a:04:83:5e:3f:04:0b:21:d8:
21:75:3a:a7:98:b1:09:9c:42:1e:5d:23:09:57:ca:15:ca:07:
fd:89:14:64:75:c7:71:24:52:11:04:94:79:71:6a:fd:53:aa:
82:11:fa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:06 2024 by rpki-client on console-fra.rpki-client.org