Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/RMtRh7hA4Izv7CELZYhidM87M9I.roa
File: RMtRh7hA4Izv7CELZYhidM87M9I.roa (raw, json)
Hash identifier: qbI3+tlLk7l8eSeB/X1zjpiNeq2nSp1gn7t3ApZ0Mn4=
Subject key identifier: 44:CB:51:87:B8:40:E0:8C:EF:EC:21:0B:65:88:62:74:CF:3B:33:D2
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 019341A40A72C1BFBA8A3C398D472061B84B
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/RMtRh7hA4Izv7CELZYhidM87M9I.roa
Signing time: Mon 18 Nov 2024 23:38:09 +0000
ROA not before: Mon 18 Nov 2024 23:38:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 193.25.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:41:a4:0a:72:c1:bf:ba:8a:3c:39:8d:47:20:61:b8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Nov 18 23:38:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44cb5187b840e08cefec210b65886274cf3b33d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:ec:c5:17:76:10:49:27:db:07:60:54:21:
e8:43:59:f7:6c:96:e6:7c:76:c0:ad:f1:1a:11:03:
06:83:0f:04:93:5f:8f:e4:16:09:f4:80:53:30:50:
96:db:25:5c:6c:a1:ec:d5:ef:1f:2c:0f:13:20:28:
03:07:7f:f1:80:31:d0:86:08:18:24:13:09:98:46:
62:67:ed:06:7d:cc:81:7f:71:b1:66:6a:2e:1a:b5:
c5:b3:9b:2a:1e:40:dd:ad:50:c4:0a:f8:7a:58:92:
a6:1d:0f:46:44:d4:68:03:ba:4d:20:59:35:9a:e0:
a2:5c:c1:98:ba:eb:6d:3a:92:70:e0:49:9b:f8:35:
09:5d:84:fe:38:33:eb:fe:96:5c:03:70:32:e5:ae:
b2:ea:bc:74:a0:b7:c0:d2:43:63:6b:c4:79:29:d7:
04:61:45:d6:84:9b:de:25:e2:e6:02:5d:76:d4:f6:
8e:20:ae:bd:9b:48:ad:3f:34:8d:77:0c:59:1e:f5:
0f:44:71:0a:03:07:c2:cc:f4:c9:ba:94:33:d1:61:
a9:93:71:3a:37:3f:d2:5d:cb:bd:8c:9f:4f:6b:a2:
2e:40:ee:06:c9:f0:cf:96:f6:c7:3b:64:89:1b:ac:
85:07:6c:b7:7b:00:44:4f:44:2b:9a:be:5b:d5:f0:
fd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CB:51:87:B8:40:E0:8C:EF:EC:21:0B:65:88:62:74:CF:3B:33:D2
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/RMtRh7hA4Izv7CELZYhidM87M9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.167.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5b:d1:dd:27:86:05:3e:b5:fd:81:cb:4a:88:30:05:00:5a:
3f:ed:a6:70:c6:c8:1c:8f:3a:1f:66:b1:94:d1:d5:93:46:70:
66:5c:f3:68:9a:93:56:4f:ba:28:75:b0:1f:56:96:a5:2b:13:
b3:d4:06:01:5e:05:47:91:e0:5c:f9:4c:8e:19:52:b7:27:44:
31:3f:08:62:a5:ad:3a:fb:70:9f:91:9a:d0:ab:4d:99:3a:d1:
df:09:98:bb:19:9e:ee:5b:64:ea:04:96:c6:15:50:59:b1:73:
78:c2:80:c1:20:3b:44:d1:ec:13:67:1d:93:d9:1b:7a:2f:f6:
35:70:64:ea:da:19:96:4c:0d:06:9d:8c:59:93:16:24:0c:22:
b8:e5:25:8f:57:1d:73:20:ce:bc:ae:cd:83:f2:32:d8:d0:4b:
12:d0:e2:02:19:31:52:8b:a4:f5:cd:78:b2:eb:4f:82:1a:27:
ad:55:e4:45:4c:ab:c9:41:57:11:18:c5:c1:8e:d8:52:66:e6:
25:78:af:ce:f7:29:cd:2e:f2:e6:ac:c2:62:1e:ad:fd:17:2f:
00:d5:55:24:cf:64:99:8a:69:91:0c:be:21:61:65:55:b6:24:
00:0f:22:33:f4:19:27:e9:c1:20:55:e4:74:34:ee:83:e6:92:
12:a5:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:50:50 2024 by rpki-client on console-fra.rpki-client.org