Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/SECxHFTT3v-MmVWmiKLJPO68jXU.roa
File: SECxHFTT3v-MmVWmiKLJPO68jXU.roa (raw, json)
Hash identifier: iq2/OA//9CwOvGyBOZMSnL8+eEqI+i/1rE952BMxtik=
Subject key identifier: 48:40:B1:1C:54:D3:DE:FF:8C:99:55:A6:88:A2:C9:3C:EE:BC:8D:75
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 018CC7275778F8D3D02F6BFF1389C1341561
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/SECxHFTT3v-MmVWmiKLJPO68jXU.roa
Signing time: Mon 01 Jan 2024 22:31:33 +0000
ROA not before: Mon 01 Jan 2024 22:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43298
IP address blocks: 193.84.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:57:78:f8:d3:d0:2f:6b:ff:13:89:c1:34:15:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Jan 1 22:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4840b11c54d3deff8c9955a688a2c93ceebc8d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:a9:e1:3b:2f:7b:19:e5:d4:fa:35:70:3d:
00:a6:57:fc:ba:b2:ef:25:36:69:79:5e:c1:69:e5:
13:04:6a:a8:c2:04:c0:e6:33:fa:70:7f:5f:a7:ff:
74:4f:6d:14:8a:a0:67:49:8e:a9:53:57:ff:c6:8b:
07:14:57:a3:24:ce:f5:13:99:0a:ec:91:7a:62:05:
ae:6e:4b:fb:80:7d:b0:ff:3d:4d:d7:c7:9e:f8:de:
77:7d:e5:4c:0c:1f:dc:8e:49:73:6e:4c:18:50:74:
23:59:ae:84:a4:35:a2:af:8d:ab:c7:72:f8:1d:74:
3c:73:1d:99:2e:50:a8:0d:ea:0a:d9:09:bf:16:f8:
14:fb:b9:a2:5c:ee:9e:8c:10:bc:7b:a7:fd:8b:8a:
07:99:3d:09:b6:97:b5:6d:dc:97:55:21:92:b4:41:
ad:40:3f:4d:5c:99:af:24:bf:29:ee:32:ff:33:99:
2c:22:6c:0e:c8:f6:05:9c:8d:37:80:33:65:04:22:
02:19:86:a6:bb:79:4e:b0:e4:c6:75:e7:92:19:10:
7d:d0:e3:f1:bb:73:df:c2:59:ef:cf:52:ba:0c:23:
64:0c:73:91:66:9e:20:53:9e:08:41:82:7c:35:ed:
fe:08:2f:f0:ca:5f:a0:3c:cd:8f:74:87:24:9f:ea:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:40:B1:1C:54:D3:DE:FF:8C:99:55:A6:88:A2:C9:3C:EE:BC:8D:75
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/SECxHFTT3v-MmVWmiKLJPO68jXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.78.0/24
Signature Algorithm: sha256WithRSAEncryption
04:57:e4:76:87:9d:c6:3c:65:bd:85:b0:88:f6:dd:3d:92:c4:
9b:ad:74:97:b5:20:ef:a2:c2:e4:65:b1:85:aa:3b:8c:d7:be:
de:90:ec:49:80:5c:a4:ea:c1:04:dd:2c:49:ba:0d:5a:98:b7:
b5:9d:19:5f:ac:1d:4f:56:a2:60:fa:9c:30:92:0c:2a:90:d9:
53:cd:28:4b:64:d3:be:ec:10:81:d9:3b:b3:38:82:01:f3:e9:
f1:c6:9e:47:5a:af:55:03:c5:a1:a5:fb:6a:1d:5f:5a:65:52:
b4:85:d5:0b:64:b5:ac:f0:95:e9:e2:99:f9:4c:ad:85:a7:40:
20:ad:3e:c9:a9:c8:92:7d:da:cf:60:53:ad:04:67:be:de:fe:
28:fe:9d:1b:60:3c:07:7d:16:32:09:d4:b1:a3:30:55:a9:5f:
64:77:e8:b8:75:67:96:10:f8:f3:6a:02:be:f1:68:e8:4d:f2:
89:bd:3e:58:2e:68:33:b2:f3:95:90:6a:96:8b:3a:d3:fa:d2:
36:03:3f:38:f5:13:5d:5a:32:b0:55:05:b6:4f:27:29:6e:b0:
1f:83:75:ad:44:42:56:5d:b2:2c:56:55:b6:d4:04:ad:25:55:
dd:3a:f6:74:32:30:37:e5:70:5c:29:a0:fa:79:ba:b2:2e:c6:
60:3c:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:59 2024 by rpki-client on console-fra.rpki-client.org