Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/wqAL9pfY9Rxu-A9hl1mBgZ1waN0.roa
File: wqAL9pfY9Rxu-A9hl1mBgZ1waN0.roa (raw, json)
Hash identifier: mw41uFRNJWaPy6Gn+ccpwPbazk3Rd+KqQuQ1GWIIpsc=
Subject key identifier: C2:A0:0B:F6:97:D8:F5:1C:6E:F8:0F:61:97:59:81:81:9D:70:68:DD
Certificate issuer: /CN=101fdf7c89989242919835759c9b62f8cc69d492
Certificate serial: 018CC26D740343698503D278E43713ABD686
Authority key identifier: 10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/wqAL9pfY9Rxu-A9hl1mBgZ1waN0.roa
Signing time: Mon 01 Jan 2024 00:30:02 +0000
ROA not before: Mon 01 Jan 2024 00:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39648
IP address blocks: 195.24.160.0/19 maxlen: 19
193.93.4.0/22 maxlen: 22
2a02:17c8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:74:03:43:69:85:03:d2:78:e4:37:13:ab:d6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101fdf7c89989242919835759c9b62f8cc69d492
Validity
Not Before: Jan 1 00:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2a00bf697d8f51c6ef80f61975981819d7068dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:a1:73:79:3d:76:0e:d8:b4:c1:af:68:42:
f1:81:12:f6:23:cf:71:cd:4c:a2:ac:19:60:65:76:
d9:dd:19:60:27:0b:27:ef:1f:cc:27:97:bf:03:5d:
4b:99:a0:ff:84:71:3a:52:69:15:88:51:9f:93:7b:
44:01:94:57:b7:f0:31:c9:57:12:a8:39:2c:c8:ad:
17:48:c9:3b:e7:03:b9:3f:8f:f7:f9:c7:57:a7:40:
6a:82:1f:7b:c6:77:83:d8:99:ed:90:d0:4b:ad:d1:
00:4e:2c:b4:86:de:cf:e2:06:4d:a6:ba:2f:91:78:
88:e6:f2:e0:ba:02:39:11:62:c9:4b:b2:70:61:83:
a4:96:7b:69:e4:da:76:e3:86:bf:09:21:da:e0:01:
27:4e:8a:9a:cd:ad:26:a2:6b:32:33:51:bc:07:fb:
18:81:31:87:26:e3:b3:33:63:6a:55:02:b9:8a:ef:
ad:41:74:a3:51:59:d8:48:60:a1:95:9a:92:ae:c8:
70:4a:d6:0d:ea:1f:73:f8:d5:f6:35:97:72:96:84:
f2:fc:bd:dd:1b:2d:43:78:aa:bc:8b:83:61:f2:53:
a9:e3:1c:a1:08:39:c9:68:1d:84:f4:0d:4b:ec:77:
8a:57:b6:a3:30:e5:6f:f7:44:a7:01:f2:61:98:6b:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A0:0B:F6:97:D8:F5:1C:6E:F8:0F:61:97:59:81:81:9D:70:68:DD
X509v3 Authority Key Identifier:
keyid:10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/wqAL9pfY9Rxu-A9hl1mBgZ1waN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.4.0/22
195.24.160.0/19
IPv6:
2a02:17c8::/32
Signature Algorithm: sha256WithRSAEncryption
08:41:37:df:94:f3:d9:10:aa:0b:d9:9e:58:22:c2:97:9b:10:
ce:9f:84:d3:8f:ff:6d:9b:0f:a7:a3:12:03:e5:fa:c4:3d:b1:
10:e6:3b:1f:cb:8a:4d:cd:bf:c1:da:73:04:6e:39:d2:ea:5c:
0c:36:8b:6e:0c:7a:b2:62:ad:21:3a:c5:48:fe:45:bc:93:5d:
74:23:ff:fd:87:40:ff:f5:f0:2c:3f:e0:13:4e:2e:c1:ad:b1:
96:4f:bd:92:9c:9a:31:28:b5:ac:0f:be:52:18:7c:c2:6f:dc:
12:7b:3e:1d:d8:5c:7b:94:c1:31:b6:46:f7:84:d4:05:d7:c6:
98:ab:1b:06:7d:de:de:06:88:6f:cb:bd:0c:da:b3:1b:1d:4d:
0c:67:89:fb:25:38:65:08:4e:40:b1:47:59:80:08:05:c4:a9:
37:03:11:6b:06:2b:b3:dd:45:0d:f4:a1:b3:0f:23:23:c3:63:
71:62:44:37:63:0e:37:80:5a:0b:b4:82:76:94:15:86:95:6d:
5b:1d:b6:a3:62:f7:55:36:59:46:8a:bc:f3:4e:d0:31:be:c1:
7a:b8:91:df:7a:d9:76:1b:f2:a6:cd:af:09:61:1a:b4:11:9b:
50:48:b5:5f:f0:79:85:ea:43:44:a2:26:62:17:c2:5a:4f:32:
d7:ce:a9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:48:01 2024 by rpki-client on console-ams.rpki-client.org