Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CS9jvWS_hprK1qggZDpf_qPJLjc.roa
File: CS9jvWS_hprK1qggZDpf_qPJLjc.roa (raw, json)
Hash identifier: d76aQrNIM0h4tbmY66X9dKumlv6aefCfRterLgHOf6I=
Subject key identifier: 09:2F:63:BD:64:BF:86:9A:CA:D6:A8:20:64:3A:5F:FE:A3:C9:2E:37
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01926C95896D7705EB581776F088B439B29A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CS9jvWS_hprK1qggZDpf_qPJLjc.roa
Signing time: Tue 08 Oct 2024 14:43:12 +0000
ROA not before: Tue 08 Oct 2024 14:43:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395189
IP address blocks: 194.68.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:95:89:6d:77:05:eb:58:17:76:f0:88:b4:39:b2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 8 14:43:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=092f63bd64bf869acad6a820643a5ffea3c92e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:0d:37:2a:5a:7a:50:7e:af:05:e8:75:ac:
35:8e:67:9d:91:fd:68:12:c4:f3:ae:43:39:4a:29:
8e:5f:9c:09:41:f7:eb:66:85:b2:9f:46:5c:15:24:
3d:7b:b6:85:98:99:e2:53:9d:69:d2:48:b2:9e:0f:
10:d5:93:2c:2f:62:80:df:29:e9:16:b3:35:23:92:
9a:94:1b:18:64:00:d3:5f:1b:01:5c:2c:b6:2e:b4:
17:58:12:d4:9b:f8:21:dc:3d:2d:06:6b:2d:16:f7:
b2:94:b2:26:32:96:5d:dd:1f:94:c3:48:80:11:00:
4d:74:d9:ad:dc:75:f0:a4:17:04:0f:a4:03:60:a6:
99:3e:aa:50:0a:bd:7d:9e:a7:40:3d:86:10:c1:ed:
3a:60:90:b1:87:a8:03:b1:34:8d:5c:9f:c5:af:b8:
c2:af:75:c0:ac:8a:27:23:05:79:b8:67:64:fc:d7:
d8:1e:9e:ed:e3:55:30:08:28:3e:8c:37:72:3a:27:
5c:31:f2:a3:93:91:7e:fd:e4:99:42:1e:e8:67:10:
c8:e8:3f:af:80:19:68:86:ff:99:56:b2:b5:df:0e:
f7:a9:51:70:f6:5c:c1:33:03:12:98:5d:b2:26:26:
d5:bf:b5:0d:cd:6b:79:cf:0d:f4:14:78:aa:9f:f3:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2F:63:BD:64:BF:86:9A:CA:D6:A8:20:64:3A:5F:FE:A3:C9:2E:37
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CS9jvWS_hprK1qggZDpf_qPJLjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.36.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b8:f9:18:49:62:50:68:2b:d9:3b:33:6f:9b:64:72:b3:ff:
0c:ea:e2:21:11:43:f3:c3:4f:94:f0:f6:1c:ab:57:95:4b:42:
6a:5a:11:90:ba:43:5a:24:5e:d8:d2:07:bd:4e:6d:71:75:b9:
d3:95:6f:da:9c:73:09:3d:4b:5d:4f:ba:ee:2b:fb:eb:15:1b:
ec:dd:34:dd:aa:be:15:93:1e:f4:9f:63:a4:8a:76:81:30:cf:
fe:13:a3:d5:d5:cd:50:dc:c5:c9:5e:7c:4f:68:4d:f6:7b:e7:
e1:58:56:30:ef:4b:e8:77:2e:cf:f0:fd:d9:bc:ae:64:79:46:
83:dd:83:05:0a:0a:3c:db:7d:3f:8d:cf:80:ea:7b:3c:45:93:
fd:ac:a0:dc:2e:44:90:6a:13:64:ff:06:49:57:69:41:b8:e8:
0c:61:20:24:fd:43:0d:93:ff:77:f4:12:f3:72:ef:8f:8d:c1:
dc:ec:7c:2c:9c:fc:34:d5:ad:ac:b7:a7:e1:a2:73:09:6b:b6:
78:9f:7a:a4:c4:cd:1b:54:60:b6:d6:f0:c9:8a:99:3e:aa:0f:
e6:db:b1:4e:83:19:d8:57:1a:ae:f3:81:40:80:28:ec:ae:c3:
20:a5:93:3d:a6:e4:14:11:a4:5d:d5:b7:7c:91:1f:f1:c4:7c:
39:15:59:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:30 2024 by rpki-client on console-fra.rpki-client.org