Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/m22m2UKT3P62dIhl2mlMog9e2-o.roa
File: m22m2UKT3P62dIhl2mlMog9e2-o.roa (raw, json)
Hash identifier: zyIWWOt12iJlfwZdMxz1P12woF6zib0QM+yBl/s+Urg=
Subject key identifier: 9B:6D:A6:D9:42:93:DC:FE:B6:74:88:65:DA:69:4C:A2:0F:5E:DB:EA
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 018CC94BFDF1A39086DBDA612269174BB71C
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/m22m2UKT3P62dIhl2mlMog9e2-o.roa
Signing time: Tue 02 Jan 2024 08:30:49 +0000
ROA not before: Tue 02 Jan 2024 08:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56911
IP address blocks: 139.28.158.0/24 maxlen: 24
139.28.157.0/24 maxlen: 24
139.28.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:fd:f1:a3:90:86:db:da:61:22:69:17:4b:b7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jan 2 08:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b6da6d94293dcfeb6748865da694ca20f5edbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:27:fe:64:ab:53:fc:55:8c:20:ba:13:54:
89:be:31:31:de:df:69:70:52:a6:25:70:9d:eb:10:
58:0b:e9:22:a3:87:1f:9c:aa:b9:06:86:cd:9c:4d:
d9:bc:da:f3:34:02:7b:59:be:57:9f:76:0f:a2:3f:
d1:c2:59:68:1d:f8:d6:3f:f8:6e:02:e1:75:36:d4:
dd:ae:02:13:9e:bc:b8:75:51:fe:3b:1c:a7:ed:7d:
76:76:6d:1e:21:74:89:d2:aa:9a:99:12:6e:de:ad:
e7:c8:f6:7a:e0:09:7b:e6:9c:6d:8a:e1:92:e7:d2:
36:4e:c7:a1:d7:6b:a5:c5:29:ff:c8:4a:f6:ce:77:
27:3d:52:39:98:7e:5b:de:c6:fd:a1:c2:e4:ff:66:
1a:d5:7a:70:57:b8:34:d2:95:c1:a2:8e:13:a0:b2:
70:85:13:f0:3e:5c:45:40:86:5c:38:ab:42:50:b0:
1b:24:6d:33:e1:9d:6c:d8:5b:b4:70:d0:00:b3:88:
34:31:93:8d:cd:2b:9e:b6:9d:15:30:6c:d4:ed:21:
d2:68:9e:3e:4a:d8:60:ad:c6:ae:da:55:a8:46:05:
2a:1e:7b:d1:e0:56:4c:5e:8d:d4:04:4b:51:1e:cf:
76:30:6d:d5:17:32:cd:1c:6e:f3:78:95:bb:16:1d:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:A6:D9:42:93:DC:FE:B6:74:88:65:DA:69:4C:A2:0F:5E:DB:EA
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/m22m2UKT3P62dIhl2mlMog9e2-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.157.0-139.28.159.255
Signature Algorithm: sha256WithRSAEncryption
00:c3:96:f2:d5:ed:11:ce:10:79:36:e0:be:36:f2:24:c9:6a:
05:04:4c:7f:ff:a7:8b:13:ba:82:6d:f3:b9:3b:a8:19:0a:2e:
70:c9:43:8a:e3:05:d8:2c:c6:8c:6c:ad:75:29:b0:32:6d:9c:
e7:42:f6:34:9f:10:c3:a0:eb:38:a6:06:34:f4:6b:d6:36:a3:
37:d0:d5:00:3a:67:9e:c0:9e:1e:13:59:a4:e9:8f:d7:8f:21:
9f:ec:00:c8:13:d1:14:b8:f9:ed:29:88:d6:8c:34:b0:58:c5:
8c:30:10:66:f8:48:3d:79:b1:15:21:5e:64:c6:49:f8:27:9d:
b0:d1:00:7d:84:ec:44:2e:12:99:63:ff:e2:0f:9b:97:b0:2c:
8d:b6:c6:73:d4:70:72:4e:b6:5a:6e:04:37:3b:ae:28:6c:67:
23:1b:02:df:1e:d2:75:6f:29:42:5a:bd:ec:b5:e3:35:71:6d:
86:60:9f:e0:0a:a9:8e:2b:fd:db:ad:76:03:33:88:9e:97:3e:
56:46:08:c9:6e:86:3c:c5:92:9f:30:6b:f8:4c:d3:45:54:87:
36:5a:98:86:9f:b5:ea:cb:a8:75:fb:bd:aa:67:07:5c:89:95:
51:c2:ac:47:ff:4d:3a:82:de:93:44:2d:a9:ec:7a:75:66:f5:
ce:8b:5f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:23:13 2024 by rpki-client on console-fra.rpki-client.org