Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/TzfpMQDZnr34Ni2P3SvHeQO3w_M.roa
File: TzfpMQDZnr34Ni2P3SvHeQO3w_M.roa (raw, json)
Hash identifier: SRseBm7AXIqbvKkF+RzCBJDd7MuBZkyoJYmzdbkp9jE=
Subject key identifier: 4F:37:E9:31:00:D9:9E:BD:F8:36:2D:8F:DD:2B:C7:79:03:B7:C3:F3
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 018F19ED3E234F76AF191DC320D179BE7082
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/TzfpMQDZnr34Ni2P3SvHeQO3w_M.roa
Signing time: Fri 26 Apr 2024 10:22:09 +0000
ROA not before: Fri 26 Apr 2024 10:22:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9100
IP address blocks: 193.247.208.0/24 maxlen: 24
193.247.209.0/24 maxlen: 24
193.247.210.0/24 maxlen: 24
193.247.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:ed:3e:23:4f:76:af:19:1d:c3:20:d1:79:be:70:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Apr 26 10:22:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f37e93100d99ebdf8362d8fdd2bc77903b7c3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:35:ca:4d:2b:e5:51:ac:19:28:e8:6c:2f:
77:cb:eb:ba:69:d7:77:b4:bc:7b:12:b6:35:18:53:
f4:6d:42:a0:9a:39:c0:e6:62:40:00:e7:17:47:a3:
1d:b1:81:b4:69:43:c4:2d:92:fe:a8:d4:db:9c:3e:
18:49:4c:d4:f1:b0:26:ee:4b:87:5b:65:98:45:aa:
33:d3:0a:6d:3f:fc:25:d5:09:76:22:5a:87:7d:d7:
c8:a4:ce:a7:55:a3:47:23:2f:84:0b:24:7b:55:97:
32:49:d8:57:9f:62:86:02:79:6b:7a:3d:8d:9e:0f:
39:1f:32:0b:ff:44:81:1f:0d:bf:15:d0:d0:c2:08:
1d:c4:e2:15:d8:3a:f9:88:6a:af:04:ca:4d:a6:70:
f3:07:57:cb:a7:c3:7b:d9:c8:6d:28:a7:d3:16:3e:
63:73:1a:55:f6:00:dd:da:4e:fb:0c:0f:00:c3:a6:
fa:b9:19:2f:13:b0:d1:35:b0:a2:cb:29:94:d5:3e:
1a:12:fc:51:5a:cb:3b:c3:1e:07:cc:b5:ec:fd:6f:
5f:52:91:c8:d9:bd:b7:81:ba:55:bf:94:e6:cb:80:
75:f0:a6:0e:d2:18:f0:d7:33:12:0d:cb:91:5c:30:
e3:9c:ff:0a:9f:bf:ff:01:a3:8b:8d:2e:10:ad:d7:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:E9:31:00:D9:9E:BD:F8:36:2D:8F:DD:2B:C7:79:03:B7:C3:F3
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/TzfpMQDZnr34Ni2P3SvHeQO3w_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.208.0/22
Signature Algorithm: sha256WithRSAEncryption
04:90:4a:8f:dc:c1:03:75:7b:c3:9e:07:23:95:dd:21:47:6d:
fc:12:37:1b:f0:f8:22:e4:58:dd:67:88:b1:7d:c9:69:e8:57:
81:2a:3b:0f:f4:cc:e6:4d:27:4e:cd:8b:b4:d7:42:6a:09:bf:
fb:07:a1:34:aa:47:51:2f:11:85:cf:a6:1d:9f:dd:db:6c:5e:
d0:1d:ac:03:14:09:50:22:aa:fd:37:8a:0d:30:ef:dd:01:0a:
27:43:fc:3d:70:15:cc:55:7d:1c:93:f8:1a:7f:8e:df:fb:c3:
70:b6:cb:64:0a:4e:12:5c:f6:a9:a8:8b:cf:e5:ca:d2:d5:e9:
88:21:b6:ee:44:ee:34:14:34:c9:a3:b3:d6:65:22:87:32:79:
84:77:35:89:0d:cc:3f:02:56:fe:d6:8d:4c:08:9f:bd:2f:30:
06:0a:1d:41:9b:31:7f:74:77:5a:c5:75:2b:9e:5b:23:9f:7c:
6c:2d:ca:8a:55:fb:49:33:08:44:f5:81:83:2a:be:66:ca:cd:
11:d2:5a:b7:15:f7:31:01:9e:f0:67:83:1c:3d:c2:ca:f6:dd:
62:f0:17:d4:06:e3:da:0c:69:bc:e3:8f:5f:9b:70:19:6c:76:
b7:2d:aa:1b:fb:dd:45:27:e9:ac:44:4f:a0:4e:c7:0d:a2:55:
1d:ad:ac:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:15:25 2024 by rpki-client on console-fra.rpki-client.org