Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/bWqw117XshCFIBVlJ_hxDHdcJNg.roa
File: bWqw117XshCFIBVlJ_hxDHdcJNg.roa (raw, json)
Hash identifier: AZiUzJW5u8a0RWYpgps6PtEUXg1Ip2PI18sVKLxS0Zg=
Subject key identifier: 6D:6A:B0:D7:5E:D7:B2:10:85:20:15:65:27:F8:71:0C:77:5C:24:D8
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 01934EA26C6F355B1DEBEFCF9053091D446E
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/bWqw117XshCFIBVlJ_hxDHdcJNg.roa
Signing time: Thu 21 Nov 2024 12:11:27 +0000
ROA not before: Thu 21 Nov 2024 12:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 94.131.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:a2:6c:6f:35:5b:1d:eb:ef:cf:90:53:09:1d:44:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Nov 21 12:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d6ab0d75ed7b2108520156527f8710c775c24d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:da:37:17:5b:10:03:98:7c:16:f1:34:4d:ad:
ad:1d:ec:d6:cf:d1:a5:3a:c6:bb:7a:82:01:f6:c1:
50:18:be:1a:41:6c:46:8a:db:8e:db:c0:86:f3:63:
b8:b4:c1:0f:6c:5b:cc:dc:b1:63:cc:3d:a6:83:1c:
cc:90:98:c7:3f:bf:51:f6:bb:17:cc:c2:bb:82:c3:
56:c8:ca:c4:46:4b:c8:6c:be:2b:96:aa:14:fc:a0:
24:eb:9b:b3:bf:4c:76:04:43:e3:be:3f:a9:73:00:
de:1b:7e:53:09:35:cc:56:83:af:94:2a:c0:9e:c7:
06:8a:1a:2a:a9:04:d8:ae:9f:43:55:46:5c:30:12:
ef:7e:f5:41:1f:c9:6f:9f:8c:8b:aa:09:c9:5b:84:
09:89:93:fa:a1:28:58:7a:fa:96:b7:c2:b8:dd:36:
ce:c7:84:73:ef:07:19:7a:4d:a9:aa:96:54:65:9f:
19:ea:de:60:cb:33:40:b6:a5:ff:6c:e8:ec:e6:f2:
3c:82:58:27:56:fc:f9:4b:19:ea:bf:ba:41:c7:5e:
93:a9:db:1c:9f:ee:2a:57:eb:23:ef:d0:52:57:4b:
3a:65:8e:4b:37:f6:a5:24:1a:35:e2:86:25:cc:18:
5a:af:42:84:ee:f9:0c:85:d7:af:16:2e:8a:cb:33:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6A:B0:D7:5E:D7:B2:10:85:20:15:65:27:F8:71:0C:77:5C:24:D8
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/bWqw117XshCFIBVlJ_hxDHdcJNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.218.0/24
Signature Algorithm: sha256WithRSAEncryption
67:07:20:2b:2b:b7:d8:5b:58:f5:10:15:ed:d6:54:57:dc:f4:
69:6d:38:65:82:12:e4:ff:fb:b5:d5:c3:41:9c:86:dd:38:67:
e5:2a:e2:76:8b:81:cb:52:05:c5:ce:50:9e:40:46:69:a2:68:
bc:25:79:14:4b:d2:66:2a:f3:f1:f8:64:78:4d:a0:6b:09:b0:
8e:b7:f1:c7:db:42:10:d0:a7:0f:e5:2c:43:0f:da:9a:51:c1:
fd:71:72:34:a7:6f:29:58:af:3a:34:1c:4a:7e:23:3f:ba:2d:
a1:9f:7c:c4:7e:53:06:c5:45:74:04:90:aa:fe:03:2b:72:0b:
e9:f2:c5:cd:ae:0d:77:bb:f7:72:06:75:0f:91:f1:e3:37:28:
49:6f:00:11:9c:b1:f4:85:2f:e4:7f:c1:8e:8a:8e:34:e3:a4:
2a:8f:a9:0b:03:01:e9:b6:bd:1d:81:8f:86:fb:c6:f2:96:03:
ac:24:e6:cc:dc:fa:34:81:f8:ef:78:6b:59:af:4e:46:07:9a:
a4:ba:61:5a:bc:4d:62:15:2c:96:7e:48:74:3c:5d:ca:91:1b:
6c:02:32:47:b4:7c:c1:60:a2:5d:e3:ff:1c:31:92:f2:0c:ff:
72:22:5b:82:d6:72:54:24:1c:5e:fd:b1:53:65:85:8b:f3:be:
ff:15:a3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:52:19 2024 by rpki-client on console-fra.rpki-client.org