Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/Cr3DQsjlQ8ahYfB2ii4XV01-PnM.roa
File: Cr3DQsjlQ8ahYfB2ii4XV01-PnM.roa (raw, json)
Hash identifier: kaD9Lk1QSAEgEXIW8MrWsmqAT5h2NCCK9D/pGCbqCRc=
Subject key identifier: 0A:BD:C3:42:C8:E5:43:C6:A1:61:F0:76:8A:2E:17:57:4D:7E:3E:73
Certificate issuer: /CN=0e44f133f387593aafa2beab38884904fac9bd19
Certificate serial: 019363210AE5B5DD85426CD4A32F8DF8566E
Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/Cr3DQsjlQ8ahYfB2ii4XV01-PnM.roa
Signing time: Mon 25 Nov 2024 11:42:10 +0000
ROA not before: Mon 25 Nov 2024 11:42:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42999
IP address blocks: 193.200.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:21:0a:e5:b5:dd:85:42:6c:d4:a3:2f:8d:f8:56:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19
Validity
Not Before: Nov 25 11:42:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0abdc342c8e543c6a161f0768a2e17574d7e3e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:03:ff:81:48:01:0d:4a:d9:80:ca:9c:1e:
72:21:aa:3b:1e:52:a3:42:72:be:87:fc:e5:3b:0c:
63:b3:3e:66:9b:67:5f:91:24:6a:27:e9:3d:dc:1e:
f9:fb:34:a7:7c:db:3c:f6:ed:d6:e1:e6:8c:74:46:
70:3c:0f:78:5d:e6:2b:49:bf:ef:af:ea:58:63:4f:
24:c1:dc:73:57:53:4d:17:fc:83:63:e8:e3:52:28:
20:24:9c:d3:45:ee:6f:b0:4d:56:3d:df:a7:13:9d:
c6:34:49:bb:fa:c7:36:a6:60:c2:3b:1a:72:81:cf:
00:fb:07:98:61:3d:d5:62:66:79:40:5d:fd:d8:47:
e9:70:05:4c:ad:77:38:34:3b:d1:22:cd:7d:aa:18:
e3:c5:e8:8a:cb:5a:77:05:ee:e6:93:84:22:89:a2:
d6:e0:6b:a3:c4:c5:5f:43:15:77:4b:25:0d:c6:fa:
79:f1:3b:fa:b1:16:2d:c9:27:5e:62:1b:a2:96:be:
66:07:df:11:eb:86:3d:07:32:51:50:20:7b:5a:3d:
ed:5c:e9:31:a4:73:15:ec:15:76:63:db:b8:08:f2:
da:64:23:a2:ba:24:5b:ba:dd:e2:4a:b9:7e:59:f5:
0b:fa:71:4d:b3:b3:54:16:41:31:cb:03:55:fa:64:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BD:C3:42:C8:E5:43:C6:A1:61:F0:76:8A:2E:17:57:4D:7E:3E:73
X509v3 Authority Key Identifier:
keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/Cr3DQsjlQ8ahYfB2ii4XV01-PnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.188.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:90:71:cc:0a:d1:c8:6a:70:b4:f4:bf:a8:8b:c1:81:33:5e:
93:6f:3e:48:8d:e6:12:b6:bf:70:e5:12:bc:55:ea:5c:9b:35:
a4:b2:fa:c9:55:c6:26:6c:3f:f3:28:86:81:df:b4:5e:fd:59:
5b:36:62:ea:70:5a:fb:a6:d0:aa:3b:bf:c0:f8:d6:11:37:f5:
75:67:79:67:b2:ee:74:b2:b8:d4:00:42:f9:e5:34:ec:10:7c:
aa:7e:8b:57:35:0e:80:7b:0b:37:29:6d:16:3c:fc:ca:50:60:
c1:6f:c5:e6:ae:19:b1:43:77:e5:dc:1a:cd:c4:76:3d:c9:b7:
9c:59:06:6b:2f:07:0e:93:80:77:7b:44:ef:bc:20:c3:ab:18:
85:49:a5:d3:5b:5c:47:3a:08:01:d5:61:98:61:88:ef:88:d8:
5d:84:ae:87:90:05:93:59:7c:77:ed:25:76:74:e9:f2:ae:21:
81:c6:a9:1d:32:ca:1a:97:75:44:d4:f6:0d:6b:03:a6:f1:e7:
af:dd:11:9f:29:36:5c:31:5d:91:e2:7a:a7:6d:37:c6:ff:6e:
9d:e9:21:37:1e:b1:aa:f3:27:fb:b8:c2:b2:26:28:f3:0c:73:
07:44:52:af:4c:11:0f:5e:f4:ac:7f:9b:ad:c0:a9:64:32:fb:
35:fa:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:36:32 2024 by rpki-client on console-ams.rpki-client.org