Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9DEx48UfqHb35m4cjo-zf_f9Xgc.roa
File: 9DEx48UfqHb35m4cjo-zf_f9Xgc.roa (raw, json)
Hash identifier: Ep/dJBIvsb7nQp9ulik8vpgGKj3iCBBQVCbnqzHNn6I=
Subject key identifier: F4:31:31:E3:C5:1F:A8:76:F7:E6:6E:1C:8E:8F:B3:7F:F7:FD:5E:07
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0191930DD4B3F39DB1E423520983A60BDA4B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9DEx48UfqHb35m4cjo-zf_f9Xgc.roa
Signing time: Tue 27 Aug 2024 08:57:22 +0000
ROA not before: Tue 27 Aug 2024 08:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50764
IP address blocks: 192.36.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:0d:d4:b3:f3:9d:b1:e4:23:52:09:83:a6:0b:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Aug 27 08:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f43131e3c51fa876f7e66e1c8e8fb37ff7fd5e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:32:b6:1b:48:78:64:e7:39:70:74:e4:64:
a9:07:a3:0e:8a:83:44:fc:c3:d7:bc:62:16:76:0c:
04:b9:81:01:c3:90:e6:19:36:4b:96:3e:7e:89:a7:
7b:a4:d2:35:6f:7a:e6:e7:6d:fb:e5:d3:1e:7c:67:
0c:e8:f7:94:de:2d:bd:be:45:d4:50:31:58:ea:3c:
fc:79:40:d5:86:b3:6f:03:5f:a5:c9:8b:60:19:8c:
56:eb:a6:5e:20:86:46:72:8a:a7:73:64:c7:3c:a8:
ad:ce:a7:75:2e:de:76:6b:ed:85:9d:4a:28:3e:15:
31:ee:bf:b5:c9:e7:3c:81:4c:eb:56:d0:69:68:08:
78:60:d4:73:3e:3d:c4:55:23:a5:df:b5:4c:f8:e1:
90:0f:80:26:82:16:f4:3b:4c:08:61:13:07:19:0f:
36:e2:ff:ac:4d:af:c1:91:c4:4b:da:a6:5c:28:54:
80:54:0d:d2:71:66:46:dc:28:28:11:ce:82:97:97:
45:79:0a:87:e1:67:42:c4:8d:93:b9:f2:34:37:3d:
01:83:64:17:59:1a:fd:79:ff:ad:3a:61:d3:d3:f6:
f1:a2:1e:16:21:47:c1:ea:fc:c6:b6:6c:59:a3:73:
ba:b9:d5:67:4e:00:c1:a7:71:ce:5e:c3:3b:58:3b:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:31:31:E3:C5:1F:A8:76:F7:E6:6E:1C:8E:8F:B3:7F:F7:FD:5E:07
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9DEx48UfqHb35m4cjo-zf_f9Xgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.43.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:68:51:38:6b:4c:c3:6d:c1:6c:77:5b:8d:33:b8:a2:e8:c4:
06:50:ac:08:b6:ae:35:cb:d9:c9:95:41:88:62:61:c8:f2:8c:
08:f0:34:49:ad:5e:59:3d:56:fe:a5:c9:31:92:da:34:10:e9:
cf:bf:5f:c4:30:a5:01:cc:40:0e:ab:4d:93:ef:9d:49:0a:95:
07:ff:91:b5:97:c1:4b:40:e7:32:23:31:0e:12:8a:f3:36:ba:
e8:aa:d4:12:54:35:31:25:94:5b:92:67:01:42:d8:e4:d7:d3:
5e:4a:82:14:42:c8:27:3e:f4:c8:d1:d3:c1:a1:27:77:50:d3:
37:11:95:98:ed:8c:75:2f:e5:12:5b:3e:67:41:a4:2a:d0:5b:
b7:9f:5c:88:f0:dd:59:d7:3a:e2:1c:70:f8:9f:40:03:76:d8:
9d:26:61:79:73:40:c4:b8:6b:42:64:ef:c5:1a:92:a2:ac:0b:
13:b0:e2:52:c8:ed:d1:6c:f0:d2:9f:11:40:a0:8b:87:1b:25:
5b:04:ce:51:07:4b:c3:e3:f3:5b:56:94:03:96:40:68:9e:4b:
a8:cc:c8:f0:58:ee:b8:be:ad:df:0a:63:be:b4:79:5a:49:2c:
1f:7e:7e:a6:f1:09:2a:d5:77:ba:63:89:39:90:fc:a3:3d:d4:
ff:e5:e5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:30 2024 by rpki-client on console-fra.rpki-client.org