Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/sCvmYAdCqwQNV1kPHIqHYUEzZao.roa
File: sCvmYAdCqwQNV1kPHIqHYUEzZao.roa (raw, json)
Hash identifier: Plngbv+x9klhJ1CAjiqThRofGctYt08hS5Axrih5w9o=
Subject key identifier: B0:2B:E6:60:07:42:AB:04:0D:57:59:0F:1C:8A:87:61:41:33:65:AA
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 018D78693147D1261F489A13FBB77C059B5F
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/sCvmYAdCqwQNV1kPHIqHYUEzZao.roa
Signing time: Mon 05 Feb 2024 08:36:16 +0000
ROA not before: Mon 05 Feb 2024 08:36:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9145
IP address blocks: 193.96.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:69:31:47:d1:26:1f:48:9a:13:fb:b7:7c:05:9b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Feb 5 08:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b02be6600742ab040d57590f1c8a8761413365aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:0c:4b:43:69:9f:92:35:e4:a3:2d:49:5a:
8c:9a:fd:c6:9d:b3:b9:a2:65:37:50:5d:c2:6a:d0:
a0:70:28:1d:06:df:8e:d6:9b:47:26:3f:eb:72:c1:
26:51:1e:b5:40:6f:e3:83:12:f8:2d:46:08:ca:70:
16:3f:ad:dc:de:c2:be:a2:ed:ff:e4:14:a1:cd:e3:
2f:d0:e7:1a:85:40:fc:dd:92:7b:7e:ec:ee:88:e8:
44:b6:44:97:d0:26:9d:1c:4f:37:3d:6a:08:ce:55:
fe:a1:53:08:b5:fa:8d:05:59:22:40:0f:f3:04:87:
a4:a9:2a:32:25:dd:bb:82:02:a4:74:d8:c7:b2:73:
13:7d:e1:ec:09:07:4c:a9:8a:eb:0f:d7:cc:36:e5:
8d:c7:4b:ca:08:6d:5c:db:24:59:05:6c:22:44:90:
95:5d:ba:d0:ea:9b:79:60:cb:68:bd:34:f3:f4:a2:
9a:65:4d:e6:9a:d0:68:69:49:bf:f8:2e:fa:fc:39:
ca:f9:f9:43:ab:ef:30:01:84:f4:2e:2d:19:3b:ea:
30:20:47:87:24:28:cf:52:fe:d3:bf:07:bf:47:3b:
09:7a:1f:7c:5a:86:27:ad:50:c3:2b:bf:37:65:8d:
52:27:3f:90:20:31:e7:57:43:41:3b:48:57:6a:78:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2B:E6:60:07:42:AB:04:0D:57:59:0F:1C:8A:87:61:41:33:65:AA
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/sCvmYAdCqwQNV1kPHIqHYUEzZao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:89:f1:49:59:b0:86:40:b0:f4:61:cb:52:ce:61:df:c3:e2:
74:36:3d:cf:df:f6:c3:14:40:ca:1c:d9:55:15:bb:2a:77:ac:
91:86:8e:65:bc:6c:bc:82:a0:4e:26:80:fe:7b:f4:6e:dd:bf:
a8:37:3f:15:5f:8c:c6:f7:42:ab:4b:6a:9f:1e:8e:ce:14:26:
96:f9:39:8d:dc:9b:11:dc:1e:0a:4f:52:45:76:71:bc:9b:c5:
ab:f9:77:f3:a0:6d:10:34:d7:29:9c:cb:c5:a2:57:c8:8a:cb:
c5:bf:c6:4a:45:a0:82:6b:05:f6:52:8e:88:b1:72:a5:20:9e:
f5:58:6a:28:cf:6a:32:b9:3b:f9:de:ee:3b:b1:00:f5:ba:02:
ee:3a:e7:23:a6:07:4b:d4:f8:74:f6:db:6a:34:e0:6f:7e:d6:
54:42:5d:cb:21:7f:9e:ae:a7:db:fa:19:28:81:c0:ea:30:59:
b8:98:45:f1:75:8f:35:67:f8:be:d3:b9:7e:f7:fa:92:84:26:
01:43:ed:19:02:35:fd:79:c2:29:e8:ab:6b:ff:ef:f9:bf:c7:
4f:ae:ec:ff:86:01:6f:54:7c:74:64:0b:f8:ae:cd:6a:5b:d6:
1a:ce:a3:65:a7:65:5e:eb:91:0f:36:e0:38:9a:2d:a5:57:85:
22:a1:f8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:15 2024 by rpki-client on console-ams.rpki-client.org