Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/mpQybRDzsjJofIw-HzAto3VqrHU.roa
File: mpQybRDzsjJofIw-HzAto3VqrHU.roa (raw, json)
Hash identifier: DNWLWHtVupqTgOh2MRbE3X7h2uZNpbpgdJO6579GSTs=
Subject key identifier: 9A:94:32:6D:10:F3:B2:32:68:7C:8C:3E:1F:30:2D:A3:75:6A:AC:75
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 0192282C0DCC484A5870851CCD84EDF60A33
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/mpQybRDzsjJofIw-HzAto3VqrHU.roa
Signing time: Wed 25 Sep 2024 07:53:48 +0000
ROA not before: Wed 25 Sep 2024 07:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12389
IP address blocks: 194.38.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:2c:0d:cc:48:4a:58:70:85:1c:cd:84:ed:f6:0a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Sep 25 07:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a94326d10f3b232687c8c3e1f302da3756aac75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:04:da:30:11:cc:5b:03:c2:b1:e5:ff:f5:
30:1a:24:23:3f:73:ae:e2:0c:f9:60:95:e0:60:18:
41:b5:32:44:09:fb:a5:0c:dc:f4:4d:7c:41:2b:62:
b7:4c:b8:5e:e4:68:3f:24:e4:e6:29:95:4a:6b:cb:
e0:81:a0:dd:29:c3:9b:63:81:ca:90:89:74:87:19:
fc:55:e2:d3:c5:dc:9e:09:48:2c:04:da:1c:4a:d5:
7b:e6:8c:bd:81:e1:65:fe:52:63:e7:1b:b0:32:d2:
0f:06:bd:82:27:e3:93:09:dc:f4:a9:cd:ff:56:25:
5d:29:ac:2e:9c:cc:82:04:00:12:1d:6e:4b:83:4b:
5e:6c:e4:c5:03:b8:0d:53:90:c7:61:c8:9b:c2:70:
1b:26:55:9c:ac:fe:75:ac:c1:2a:36:0b:05:4c:35:
5d:84:83:b1:41:1e:4e:f4:0e:e7:bb:e7:0b:c7:20:
7d:3b:7c:af:53:de:be:a9:aa:7c:42:9d:88:ca:a3:
d1:db:76:e7:96:fe:0d:76:76:64:ee:a0:7c:7c:bf:
a8:76:2e:e8:76:62:9f:66:ed:a5:c2:ce:0b:2c:f2:
80:df:9e:25:39:90:9e:d1:2a:87:03:2d:3d:02:fc:
66:19:99:91:11:30:75:bd:4d:63:89:11:18:4c:48:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:94:32:6D:10:F3:B2:32:68:7C:8C:3E:1F:30:2D:A3:75:6A:AC:75
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/mpQybRDzsjJofIw-HzAto3VqrHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3f:13:f6:3f:50:ed:76:22:f2:f0:05:85:56:54:b7:c8:70:
09:41:80:19:15:ff:27:d2:8a:84:10:2e:9e:b9:b0:61:cf:dd:
97:6e:be:07:9d:0d:43:eb:02:ed:4c:c4:b9:73:57:0d:c7:8d:
b1:db:4c:1f:8b:67:98:16:b6:9b:89:95:05:5b:62:3b:97:c6:
18:74:65:bf:09:6c:99:49:ef:3f:03:fc:c8:fb:dd:bf:65:a9:
cc:db:28:44:ca:4b:7e:56:d8:a9:fc:ab:b5:13:2d:51:c6:a0:
df:9d:e2:a3:34:cb:f5:6f:4b:ca:ae:68:96:41:e6:21:3b:be:
df:b5:ef:eb:50:a2:d7:e4:6e:3a:0e:e0:50:b7:73:73:f3:f5:
88:34:62:b8:32:50:b3:c8:a5:12:f5:90:d9:a6:90:35:34:41:
d0:ba:85:55:33:bf:a8:52:05:70:b8:c3:16:e4:97:e4:0e:04:
05:80:c6:db:3a:ea:50:e8:00:11:c0:d9:2d:f1:3d:67:7d:54:
92:a0:4e:f9:ce:ad:d6:25:d7:a2:94:28:1e:9a:4b:30:36:82:
d3:eb:17:83:8a:fe:c7:b0:f1:aa:75:c8:73:98:cf:db:a1:d4:
df:34:b5:6f:ac:25:59:8a:a2:29:65:b1:f1:90:a2:c6:7d:2f:
3f:aa:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:54:15 2024 by rpki-client on console-fra.rpki-client.org