Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/nTbN4tcrjEa1XFP1FRjymqr_uyE.roa
File: nTbN4tcrjEa1XFP1FRjymqr_uyE.roa (raw, json)
Hash identifier: 4ilCtcqRIeg0h7OYhPcbnyCq13APKdhoxIiTW/Su2lw=
Subject key identifier: 9D:36:CD:E2:D7:2B:8C:46:B5:5C:53:F5:15:18:F2:9A:AA:FF:BB:21
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019305605E33A3AD5A0EFDF96044717D4201
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/nTbN4tcrjEa1XFP1FRjymqr_uyE.roa
Signing time: Thu 07 Nov 2024 06:47:01 +0000
ROA not before: Thu 07 Nov 2024 06:47:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215983
IP address blocks: 90.188.19.0/24 maxlen: 24
178.34.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:60:5e:33:a3:ad:5a:0e:fd:f9:60:44:71:7d:42:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Nov 7 06:47:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d36cde2d72b8c46b55c53f51518f29aaaffbb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:1b:0e:8a:2c:7b:0f:e9:7a:7b:18:ad:dd:
5a:bb:ef:07:d3:21:cf:83:3b:e0:d1:a5:97:ec:6d:
da:bc:52:00:d7:03:a8:9d:ce:42:58:30:b4:1e:32:
ee:73:5e:cc:dc:57:05:8a:dd:f1:d4:e8:32:06:7f:
3f:0c:53:04:ca:52:ce:70:cf:f5:1d:46:e2:12:86:
f8:4d:29:8d:06:85:3b:db:af:a4:20:2b:40:7d:81:
1e:d6:82:3d:fb:e0:fb:06:6a:ae:b4:f7:7c:6d:58:
ed:af:c7:26:90:4a:69:19:4a:19:af:6f:31:b1:e1:
a2:c0:56:4b:24:e7:1a:ef:d8:8a:4a:60:ec:17:70:
ac:a4:3a:e7:a3:da:2c:ad:cc:a4:d0:de:c7:70:ec:
1e:5b:de:be:0a:02:d7:2a:60:4d:b9:74:fa:34:9c:
de:38:d7:cb:6d:af:65:f5:4c:4b:1a:56:38:dc:3a:
ad:b9:4b:d5:f1:b7:7c:4e:d7:5e:b0:60:41:3a:29:
29:12:71:68:b3:a1:68:98:18:3c:26:2d:99:54:12:
91:d8:44:c9:02:1b:82:47:32:6d:e2:2c:ab:dc:0e:
07:58:42:68:a4:3d:2f:94:55:e7:20:69:e3:82:9e:
9f:f8:c2:4d:7d:8e:23:5b:a2:37:2c:f0:ae:db:7e:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:36:CD:E2:D7:2B:8C:46:B5:5C:53:F5:15:18:F2:9A:AA:FF:BB:21
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/nTbN4tcrjEa1XFP1FRjymqr_uyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.188.19.0/24
178.34.79.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d3:6e:be:0b:0a:4b:44:9d:92:54:9e:c8:b0:05:1d:1b:a8:
2a:ae:43:ec:49:65:04:c1:5f:b4:7f:aa:9c:ab:07:b1:d5:31:
c6:52:30:58:43:20:26:e7:e0:d1:34:a7:e1:61:f2:e4:2d:be:
42:d0:22:13:18:84:02:5b:26:21:e5:44:e6:75:b9:b1:d3:54:
45:59:e3:22:51:bd:73:f6:ce:d3:19:42:15:cb:a2:29:7d:05:
6f:65:0f:cf:a8:43:d9:b9:5f:33:80:1b:e8:62:00:2e:27:aa:
ab:29:b8:9a:8a:0e:63:1f:f2:b7:fd:d2:32:2e:d8:b9:16:a2:
23:7a:7c:0d:c9:39:86:d0:42:73:d8:cb:53:b3:0d:84:df:d3:
46:b7:c3:98:7f:0d:be:39:3d:2a:84:48:90:12:c0:e8:ea:21:
e2:b7:1c:da:55:df:a3:14:46:6c:5d:c8:11:6a:66:7a:7b:0e:
76:5e:16:2b:f5:ae:ec:1e:2b:33:09:07:55:07:6e:8d:d9:f3:
1f:c5:9e:f4:fb:2b:cd:c7:52:f7:08:e0:1d:03:d1:d9:ad:b7:
6d:47:d2:27:7d:27:0d:7e:60:55:4c:f6:41:57:a0:19:9f:32:
ac:eb:b2:8c:9b:4b:fb:a1:7f:a8:6c:06:b2:a4:52:47:3c:02:
23:e3:be:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:26 2024 by rpki-client on console-fra.rpki-client.org