Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/aWZDtT01LTTyIdJ2c0R3kyNLfxc.roa
File: aWZDtT01LTTyIdJ2c0R3kyNLfxc.roa (raw, json)
Hash identifier: Tq+IHeJBXwsRgiggkX/TY2Guckvmyzd+QEJGpkkMnXc=
Subject key identifier: 69:66:43:B5:3D:35:2D:34:F2:21:D2:76:73:44:77:93:23:4B:7F:17
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01915B12299ECFEE0447F64762C738324EBD
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/aWZDtT01LTTyIdJ2c0R3kyNLfxc.roa
Signing time: Fri 16 Aug 2024 12:03:22 +0000
ROA not before: Fri 16 Aug 2024 12:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22427
IP address blocks: 80.93.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:12:29:9e:cf:ee:04:47:f6:47:62:c7:38:32:4e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 16 12:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=696643b53d352d34f221d27673447793234b7f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b6:93:99:01:bf:45:e6:c1:18:1c:11:9c:2b:
64:64:f2:87:f1:10:bd:8b:ea:85:dd:a5:69:14:6f:
ec:de:7e:48:20:14:95:60:34:44:19:cf:77:70:dd:
2c:d9:33:29:21:a3:0f:f7:3a:5f:28:a3:a3:d3:ba:
93:ae:05:20:0e:c6:3a:8f:ce:20:ba:44:fd:b2:8b:
a1:d2:73:4d:66:b4:9d:10:d8:69:91:b1:f8:95:38:
40:18:76:7a:a8:ab:10:96:70:01:65:a5:ec:ad:5c:
a4:d5:51:67:6f:c1:0c:19:8a:0a:cb:2c:4e:04:f9:
90:e8:d7:8d:d5:df:a1:6d:a2:a8:1b:b0:7a:f8:f7:
0c:0b:2a:71:14:54:59:d1:3f:fc:0e:56:dc:93:b1:
f0:a6:ea:b1:c4:83:03:f5:b2:60:47:f6:79:8a:11:
8b:41:ba:15:ab:a8:e8:ed:1f:47:16:02:64:14:d9:
3a:0a:9b:9b:45:12:42:f4:ba:67:d0:6f:9b:0d:2a:
54:23:5e:f0:e7:21:8a:12:2a:01:8d:3b:f0:62:ac:
5a:7c:e3:a0:31:fe:3f:c0:03:97:70:38:0e:93:b4:
95:49:50:ee:22:69:53:09:fa:af:2b:82:e1:6f:46:
f0:fa:a7:d3:5b:ea:95:cb:15:d1:2a:e5:5b:4a:e5:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:66:43:B5:3D:35:2D:34:F2:21:D2:76:73:44:77:93:23:4B:7F:17
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/aWZDtT01LTTyIdJ2c0R3kyNLfxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.197.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:4c:35:c2:2b:16:b4:e3:1c:80:e7:6b:1c:5e:04:dd:a4:3d:
b6:ae:23:de:e0:85:c8:a2:38:31:93:ef:ab:bb:70:c1:b6:17:
bc:56:95:2b:ae:49:c4:a9:77:77:b4:8b:51:d6:8c:c1:17:6f:
b4:53:99:9c:be:de:49:c2:15:44:d7:23:94:c5:a8:53:6f:56:
b6:89:b5:63:a6:62:bd:82:1f:c3:66:d3:af:3e:eb:de:48:4e:
a0:e5:f3:d9:12:20:0e:18:de:85:71:f9:f1:51:e3:6f:bc:36:
01:34:99:12:11:e2:9e:f4:65:6d:24:49:a7:8a:45:97:f9:aa:
5c:ec:cf:d6:d0:61:40:25:97:c8:a5:c6:de:9e:10:ec:f4:09:
31:83:11:bd:27:ae:bc:1e:8b:4d:88:fb:a4:d7:5b:c1:73:83:
e7:d3:0e:59:ed:69:8d:12:a3:75:32:68:f1:80:7f:e3:29:8b:
9a:ce:61:56:08:ff:18:b2:49:d6:02:a2:c4:ff:b3:83:b9:c9:
06:87:eb:77:78:49:6f:2d:e2:71:d9:87:52:de:23:37:31:51:
94:8a:df:d5:d9:f3:6e:34:a2:33:36:1b:51:7e:38:b3:93:30:
c9:29:9a:66:16:6b:32:cd:6b:18:04:ec:bc:36:24:cc:09:45:
ab:f8:dd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:25:15 2024 by rpki-client on console-ams.rpki-client.org