Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/AJ2s27gwNtCQDhqjJExCxUaPJCs.roa
File: AJ2s27gwNtCQDhqjJExCxUaPJCs.roa (raw, json)
Hash identifier: EBWV1AR6hXl9uMMchuATdzHoFSZ5zoKk/l9TjH33qek=
Subject key identifier: 00:9D:AC:DB:B8:30:36:D0:90:0E:1A:A3:24:4C:42:C5:46:8F:24:2B
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0192E6A452374E982923BEE35BC64ADF8D90
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/AJ2s27gwNtCQDhqjJExCxUaPJCs.roa
Signing time: Fri 01 Nov 2024 07:33:01 +0000
ROA not before: Fri 01 Nov 2024 07:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199218
IP address blocks: 94.190.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e6:a4:52:37:4e:98:29:23:be:e3:5b:c6:4a:df:8d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Nov 1 07:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=009dacdbb83036d0900e1aa3244c42c5468f242b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:f2:75:12:ab:00:ce:ab:2a:f8:99:b6:37:
d4:6d:7a:e8:e0:bb:32:e6:36:18:85:2e:2f:6e:d8:
51:35:09:a2:6a:98:75:e0:af:a6:e4:bf:0f:1b:7c:
c8:6b:a9:af:fd:70:af:fe:5d:d3:ee:40:c9:21:65:
f5:03:43:59:db:5d:69:cd:08:6c:1f:0a:b8:15:c0:
71:3f:68:6d:33:a6:dd:fa:05:39:8d:90:0b:06:df:
ab:66:80:4e:7f:fd:0e:db:5a:1e:5b:f6:e7:26:54:
98:5e:1e:2d:5d:52:39:6b:3f:76:f0:43:e7:5a:6e:
a5:b4:70:71:11:e1:b1:4d:fe:1e:67:c1:2f:23:20:
af:5c:b7:a5:a8:11:cb:7a:12:09:8d:5c:d0:4c:a8:
6b:38:76:0e:61:e4:de:22:c4:fe:8b:88:74:00:ac:
81:f9:4d:32:d1:44:44:2b:d0:b9:30:87:c3:4f:a4:
40:aa:c7:4c:93:5d:f4:9c:05:79:5a:6c:81:8e:08:
ca:ed:77:56:37:35:c3:4c:81:b2:b1:19:b2:1d:f5:
ba:6a:1e:91:2d:a3:55:63:79:4e:b0:e6:d8:29:63:
61:b2:00:ec:9e:49:8b:f1:ca:74:74:96:1b:1d:90:
80:30:a9:3a:9d:e3:bd:3b:40:ba:b3:bf:c1:32:bc:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9D:AC:DB:B8:30:36:D0:90:0E:1A:A3:24:4C:42:C5:46:8F:24:2B
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/AJ2s27gwNtCQDhqjJExCxUaPJCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.195.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6c:60:10:18:88:fa:c5:4b:77:45:72:07:b3:3e:28:6b:a1:
79:6f:93:76:4a:45:64:d3:0b:48:8f:92:5e:c4:39:9a:49:09:
1d:f6:cd:59:bf:93:ef:af:0d:e5:5c:ba:e0:01:36:d3:f1:4e:
d8:5a:9a:75:7b:f4:df:3f:1b:f6:25:85:a0:7e:76:f1:ab:0a:
3a:b5:51:a2:00:25:0f:32:36:7d:90:ab:c7:22:1a:59:9f:5b:
45:8a:ba:2e:84:bb:9a:7b:d4:f2:0e:92:5f:98:ae:81:58:89:
6a:3c:61:e4:1c:7e:23:ee:fd:2a:d2:66:3e:d0:ff:e0:f9:ff:
bf:42:cb:38:a1:e4:b8:35:f4:38:e7:c7:c2:5b:3c:b9:34:e3:
b0:cb:14:4d:a0:08:cb:52:a5:49:05:24:3d:2c:d8:70:6d:f1:
a7:01:36:26:2d:c0:05:4f:0a:be:c1:27:10:ea:58:42:f8:66:
13:09:e4:22:75:d8:39:78:11:33:c9:32:af:46:75:d0:11:f0:
c9:b0:ca:00:64:78:e6:92:5a:4e:41:58:41:db:d3:f8:d2:34:
7a:dc:0e:f0:e6:24:44:b0:f2:ec:df:cd:ff:6d:52:7b:72:16:
49:ef:33:79:be:36:6b:71:1c:27:7d:64:8f:93:ac:25:cd:58:
0c:aa:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:59:08 2024 by rpki-client on console-fra.rpki-client.org