Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/nqlN7cE9u9rSu6Nfk7Za3tzI86Q.roa
File: nqlN7cE9u9rSu6Nfk7Za3tzI86Q.roa (raw, json)
Hash identifier: DNZBkQgsP5+Je2qyj9mJgcK7rsLTdQY+0SoeDhQRFoM=
Subject key identifier: 9E:A9:4D:ED:C1:3D:BB:DA:D2:BB:A3:5F:93:B6:5A:DE:DC:C8:F3:A4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 018F04C8D8FC5F1A548547D8FB60942ACAAF
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/nqlN7cE9u9rSu6Nfk7Za3tzI86Q.roa
Signing time: Mon 22 Apr 2024 07:50:22 +0000
ROA not before: Mon 22 Apr 2024 07:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9100
IP address blocks: 193.247.209.0/24 maxlen: 24
193.247.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:04:c8:d8:fc:5f:1a:54:85:47:d8:fb:60:94:2a:ca:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Apr 22 07:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ea94dedc13dbbdad2bba35f93b65adedcc8f3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:0f:f5:b6:d4:0d:a2:7a:48:22:2c:e8:a7:
23:a5:7a:24:6f:de:7b:4c:66:84:cd:91:c4:97:a5:
4d:61:6f:8f:e4:66:3e:ea:b7:c3:40:c2:aa:75:38:
d5:4b:c7:c8:fe:7d:10:86:ae:9e:dd:06:46:e0:43:
49:eb:26:68:da:a3:c4:4a:26:9b:ad:d5:c0:ca:73:
c4:fe:6a:90:d1:a5:ba:cb:3f:b0:58:1b:45:d2:85:
81:b9:9d:94:b5:cf:5a:64:e3:f4:70:22:f1:a6:c8:
ae:d7:27:a2:b2:6f:93:ab:d0:f5:f0:8c:9c:d7:5d:
a9:40:25:b4:ee:a4:8f:aa:fb:93:b5:4a:24:37:be:
76:1c:0f:2a:3c:1b:a8:e9:4c:ee:25:b5:74:8c:e7:
7a:9e:33:db:33:bf:dc:62:c7:1b:5f:9b:c8:a5:7f:
96:c6:df:02:71:57:1e:df:b1:18:84:1d:eb:fd:a1:
16:9d:27:c2:4b:8a:43:a4:8e:1a:a8:c9:23:cb:9a:
77:63:b8:02:a1:f8:ec:e4:4e:67:f0:53:04:15:7c:
eb:61:59:1c:57:63:30:81:66:e9:9e:6a:7c:d7:81:
76:d1:d9:1b:10:87:bf:82:88:87:75:f1:19:01:dd:
87:af:d9:bf:9e:75:6d:ae:ed:1b:ff:50:46:ce:35:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A9:4D:ED:C1:3D:BB:DA:D2:BB:A3:5F:93:B6:5A:DE:DC:C8:F3:A4
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/nqlN7cE9u9rSu6Nfk7Za3tzI86Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.209.0-193.247.210.255
Signature Algorithm: sha256WithRSAEncryption
b5:7e:c0:94:90:67:a4:af:65:f8:55:2b:e0:ca:f4:23:30:10:
b8:1d:81:f4:d2:3f:33:c7:73:fa:c6:d0:60:c0:71:90:6b:cc:
d9:a2:e5:05:a1:cc:27:67:f3:c5:48:7a:09:0a:23:90:2f:cd:
d7:ca:8b:ed:4a:af:9b:41:d9:32:56:9c:71:dc:2c:4f:db:d3:
cb:38:21:5e:a0:26:aa:a7:c9:4e:e0:22:80:42:8c:0e:df:90:
91:71:b7:ad:c3:16:b7:cb:51:15:36:f0:b8:ad:e7:e4:22:38:
f4:47:84:9b:1a:97:20:74:83:1b:6a:02:53:41:32:1b:b7:2e:
ed:01:3f:78:36:dc:d6:41:9f:cb:11:2e:bc:48:c5:cc:43:19:
8f:41:de:98:0c:06:19:16:28:9c:49:65:40:7b:75:96:9c:44:
62:91:fc:00:77:27:c3:c6:df:47:35:21:69:8c:3a:2b:c9:76:
e7:12:26:d4:27:d8:ba:17:2a:88:5c:35:59:f5:79:0d:41:ad:
95:4b:9a:3c:ae:e2:2a:e1:6e:66:03:e1:1f:0e:71:3f:d8:4a:
07:ce:f7:82:64:55:19:63:94:b2:63:ba:5e:2b:e4:8f:47:f0:
08:6c:f6:d9:e2:41:62:9a:18:47:6c:55:f3:f5:d8:4a:d9:0f:
67:c6:86:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:52:26 2024 by rpki-client on console-fra.rpki-client.org