Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/v9I9xUFIRkq5w281dxsxJoHifGg.roa
File: v9I9xUFIRkq5w281dxsxJoHifGg.roa (raw, json)
Hash identifier: VgH0/TWBil6lJcVjuhlJc9jRDCiNXVgRhvPSAP7Y0dM=
Subject key identifier: BF:D2:3D:C5:41:48:46:4A:B9:C3:6F:35:77:1B:31:26:81:E2:7C:68
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 018D416590BDF5988ADE2CFE47734DA046D8
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/v9I9xUFIRkq5w281dxsxJoHifGg.roa
Signing time: Thu 25 Jan 2024 16:13:11 +0000
ROA not before: Thu 25 Jan 2024 16:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211439
IP address blocks: 193.106.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:65:90:bd:f5:98:8a:de:2c:fe:47:73:4d:a0:46:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jan 25 16:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfd23dc54148464ab9c36f35771b312681e27c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:3b:6f:a3:04:4c:56:74:5a:1c:64:a2:49:
f6:4f:84:11:56:dc:0f:dd:9e:b0:37:12:53:07:a3:
2d:c6:9c:5d:e9:29:a2:51:74:12:f4:a5:b6:60:e7:
ee:68:b5:a9:2e:fb:3d:29:a9:f4:9c:0b:cf:e7:1c:
5b:a7:43:0e:75:4c:f8:24:6e:70:c2:60:f5:6c:f6:
95:5f:b0:a7:d9:1d:07:79:4d:5c:70:ba:d5:58:cd:
69:72:23:9b:07:71:07:e3:8d:ba:86:f0:4d:77:64:
b4:fa:47:42:7d:b4:ae:f8:7e:3a:48:8a:50:f9:3c:
32:5b:93:72:9f:73:59:aa:6a:2c:16:cd:67:95:ef:
95:f2:be:77:b3:79:06:c5:68:dc:de:21:29:a0:25:
e9:d7:28:0c:55:02:46:f4:34:0a:9f:85:e8:2d:1f:
4f:09:29:29:36:fb:2e:93:91:ed:78:83:12:6f:e5:
fb:f8:8b:9f:aa:57:30:c4:82:9a:a7:f0:b3:59:7c:
6a:8d:54:7f:6f:4f:41:45:c5:08:58:04:8c:58:d8:
5f:1e:2d:23:d4:e5:9a:e8:e8:1f:35:df:b6:a3:77:
48:cc:3d:59:cd:89:e1:b4:74:19:53:14:e1:0b:c5:
e1:4d:06:1d:3a:d7:2b:49:99:29:46:f5:f8:01:83:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D2:3D:C5:41:48:46:4A:B9:C3:6F:35:77:1B:31:26:81:E2:7C:68
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/v9I9xUFIRkq5w281dxsxJoHifGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:74:6e:49:72:f7:9c:51:32:2b:fd:d8:9b:27:61:09:7e:46:
45:8b:92:a2:bc:ae:21:9b:fb:c2:73:6e:79:79:c8:1c:b4:72:
97:14:93:69:fd:a5:e3:86:d2:5e:0e:61:a6:be:42:f4:94:a3:
47:ea:d8:57:ef:5c:66:62:dd:62:71:c9:b5:43:4a:a9:20:6b:
25:94:c4:60:3b:e0:9f:95:86:cb:11:28:4a:b5:20:65:da:1b:
3b:72:29:c3:65:48:6f:0c:e8:c7:28:ed:22:42:b9:34:3c:58:
93:68:27:fa:cf:2f:cb:0d:8a:63:fc:2b:95:55:dc:b7:6b:c3:
49:23:13:a1:cb:6b:4e:64:c4:14:59:54:81:36:99:2a:8b:be:
c9:38:f8:b0:3d:8c:25:02:4d:4c:13:e6:a8:70:41:e9:a5:60:
ec:df:82:14:78:29:8b:8c:f1:69:db:d2:bc:45:ac:15:33:7d:
d7:b6:a8:29:77:22:c9:56:d3:4c:fc:68:65:e2:9a:06:60:93:
e5:b5:84:7d:9a:9c:a7:5c:ad:e9:24:a2:79:df:86:a5:0b:89:
53:e9:15:28:11:cb:3f:b6:17:b8:3e:8f:7b:53:03:b2:05:9e:
24:22:e7:ff:50:93:d0:fe:40:b1:0c:6e:0d:3a:4b:17:eb:e3:
16:92:86:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 14:32:00 2024 by rpki-client on console-fra.rpki-client.org