Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/9McmmbYvCrP8GxUTGHeFUMB9oKA.roa
File: 9McmmbYvCrP8GxUTGHeFUMB9oKA.roa (raw, json)
Hash identifier: ZvdtE55bg9jhF9z6oYA30eM/QW3GiWY/6nXhd5NMbzo=
Subject key identifier: F4:C7:26:99:B6:2F:0A:B3:FC:1B:15:13:18:77:85:50:C0:7D:A0:A0
Certificate issuer: /CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Certificate serial: 0190A7CCF0862F9C66F8A86C17DC2882AF78
Authority key identifier: 59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/9McmmbYvCrP8GxUTGHeFUMB9oKA.roa
Signing time: Fri 12 Jul 2024 16:35:44 +0000
ROA not before: Fri 12 Jul 2024 16:35:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 185.196.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:cc:f0:86:2f:9c:66:f8:a8:6c:17:dc:28:82:af:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Validity
Not Before: Jul 12 16:35:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4c72699b62f0ab3fc1b151318778550c07da0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:f4:ef:b2:9b:08:dd:50:83:b6:c9:2f:8b:
7f:ee:f7:e2:88:4b:7d:0d:33:ac:68:68:0b:ac:e2:
00:a6:9e:ea:97:0a:e3:65:a7:e2:0b:5f:3c:89:01:
d6:ef:6b:34:0c:9f:47:0a:63:ae:27:68:20:b6:ad:
54:f5:46:fd:c1:86:42:96:03:ee:af:fc:78:2e:58:
4d:7a:db:49:3b:69:ed:60:43:5c:de:c4:81:91:77:
55:57:58:43:88:be:35:5a:0a:0f:80:2f:18:e6:61:
6f:83:05:b1:3a:e1:b5:0a:89:26:d2:58:5d:61:81:
f0:85:51:63:01:4a:cb:1f:1e:20:e0:82:99:af:2c:
0e:69:e4:61:50:38:54:c0:3c:89:66:16:51:b3:ba:
01:79:f0:8a:5a:17:44:f9:62:c4:9b:a7:5d:57:0b:
3c:e9:ad:19:4c:38:eb:cb:38:d9:0a:7b:1c:b8:d3:
15:5a:63:6e:21:9d:40:0c:fc:5b:5c:a3:28:c1:0f:
2c:9c:33:49:0b:c4:da:f5:a3:60:6f:29:43:b2:e8:
d6:f5:4c:79:fe:76:43:47:a4:f7:36:d3:45:31:8c:
45:56:c9:43:01:9e:26:9a:e0:25:1c:71:30:33:15:
34:0a:7c:c6:9a:5f:88:dd:bc:65:9d:5e:61:34:d4:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C7:26:99:B6:2F:0A:B3:FC:1B:15:13:18:77:85:50:C0:7D:A0:A0
X509v3 Authority Key Identifier:
keyid:59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/9McmmbYvCrP8GxUTGHeFUMB9oKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:22:be:72:c2:a0:27:21:87:45:3b:91:c1:54:af:ca:1e:0c:
2e:8d:22:19:75:7c:1d:27:58:38:63:b2:f4:7f:fe:e2:b0:70:
d8:c4:23:06:d4:3b:d7:db:dd:ee:90:4c:81:7b:32:84:16:cc:
50:6a:40:e6:bd:a4:e4:35:08:6b:94:2d:2d:db:e0:82:72:81:
9c:b9:a1:cd:60:0d:26:3c:d5:f3:ff:bb:da:d1:e6:86:46:52:
3d:9b:da:45:f3:02:bc:fa:82:59:88:dd:61:2c:a7:ad:9f:a1:
25:00:a6:1e:b1:f8:0a:27:51:93:f3:b1:e3:96:06:e2:24:ac:
ec:5e:96:b5:a7:76:35:d8:25:16:2e:e6:8c:12:2b:bc:0f:4c:
40:26:29:1d:86:cb:9a:9e:27:2f:b0:36:5f:53:ea:2c:be:1a:
82:1f:35:4a:e4:52:b1:b6:07:87:0b:e7:87:90:28:7a:b5:d4:
70:8b:46:54:27:32:45:f1:4e:b0:fc:b8:d2:ff:f8:1d:41:85:
ab:e7:24:54:89:47:7c:22:f5:98:f4:65:a0:96:a6:ad:2a:81:
11:c6:22:37:61:5f:ea:a9:1d:c3:cd:41:8e:10:ca:6a:95:74:
c6:3f:70:ea:71:fc:73:b1:39:c3:f8:b9:b0:72:9d:4e:d5:1e:
35:83:f8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:59:40 2024 by rpki-client on console-fra.rpki-client.org