Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/79BZ5FjtxKG1Lqk7aZKMcvEKNpY.roa
File: 79BZ5FjtxKG1Lqk7aZKMcvEKNpY.roa (raw, json)
Hash identifier: jrbHa+lTgUYcwwlrSbNXsKJm//Bzq/QkUSf62+oJWMI=
Subject key identifier: EF:D0:59:E4:58:ED:C4:A1:B5:2E:A9:3B:69:92:8C:72:F1:0A:36:96
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019146410AB61B096DC9455915B3DCD32AD1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/79BZ5FjtxKG1Lqk7aZKMcvEKNpY.roa
Signing time: Mon 12 Aug 2024 11:02:33 +0000
ROA not before: Mon 12 Aug 2024 11:02:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204457
IP address blocks: 94.103.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:41:0a:b6:1b:09:6d:c9:45:59:15:b3:dc:d3:2a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 12 11:02:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efd059e458edc4a1b52ea93b69928c72f10a3696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:42:c8:9b:e1:4f:c1:d2:54:a4:99:06:18:
b5:84:24:30:df:16:97:52:fe:f0:48:57:d4:ac:72:
13:6b:e0:9f:93:6c:2d:e4:49:0b:d9:b3:70:40:00:
3c:83:5c:ac:fa:97:b7:58:ba:8a:46:33:ab:eb:da:
4a:32:18:c6:42:4d:af:93:e3:9c:d6:05:65:33:1e:
91:9d:af:b5:5a:b0:8a:86:fe:95:f6:52:2f:79:99:
2b:c0:9e:8f:b3:7c:e1:fc:6f:65:ed:7f:92:52:82:
51:0a:b7:ce:3f:c5:3a:a7:6d:d1:b0:37:f6:82:77:
30:12:3c:80:a4:9c:c6:ef:a2:59:ce:dc:c0:2d:2f:
c4:8e:1d:12:99:72:82:53:ee:3a:c6:d4:95:93:22:
3b:30:10:a0:2f:a8:dd:1d:5b:f4:22:a6:f2:d1:a8:
ac:e9:b5:99:b7:52:b7:fa:48:17:23:45:67:79:40:
9d:3c:76:b4:60:ab:29:85:a6:5c:70:51:f2:93:ab:
0d:69:6f:3e:12:54:2d:79:54:37:a5:10:33:1c:9a:
ef:f2:10:b6:04:15:e3:5b:f7:d3:2b:ff:da:31:7e:
fe:94:77:2b:1c:6f:8b:b0:47:4c:5d:3f:63:f1:6f:
9e:3c:7a:c8:cc:c1:df:3c:be:35:9b:e0:33:86:85:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D0:59:E4:58:ED:C4:A1:B5:2E:A9:3B:69:92:8C:72:F1:0A:36:96
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/79BZ5FjtxKG1Lqk7aZKMcvEKNpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.124.0/24
Signature Algorithm: sha256WithRSAEncryption
94:5f:40:ad:e3:58:1f:f6:3c:50:f0:92:b3:cb:5a:05:c4:98:
5e:7b:23:34:94:1a:bc:2a:73:d8:ee:13:ac:53:41:7a:61:07:
51:57:b4:70:df:24:15:8e:4b:42:02:65:f4:70:91:06:16:d0:
62:6a:ad:ce:52:84:73:5c:e2:e3:fe:76:1e:39:29:3d:2a:6c:
5c:fd:c1:62:b1:fa:ce:e6:c9:4f:de:c2:71:3a:b5:5a:e7:25:
bb:8d:4f:b6:bb:9b:20:6d:93:cb:c6:cd:31:5a:ef:cb:c5:9a:
0a:86:39:19:55:20:89:b0:63:49:de:6f:c3:15:b1:64:b0:b8:
b1:8c:c0:e6:c0:3a:9b:65:a2:d4:8a:a6:55:27:8e:ce:0a:e8:
b4:f5:ef:f8:c0:56:af:5b:ed:db:61:90:39:37:cc:7f:8f:c5:
ae:ef:29:7f:03:22:53:89:44:ea:41:ad:e0:86:b1:ae:e0:2e:
11:ae:bb:91:68:45:cc:fc:4e:b9:5f:7e:fa:f5:aa:b6:c5:1e:
6e:98:c0:27:01:95:80:ed:9a:99:5b:d0:e4:c2:20:4a:53:e2:
b1:32:53:30:a8:58:ab:2b:97:1e:a0:d7:42:8b:1a:26:e9:52:
0b:cd:5a:7a:b5:1b:7a:07:ab:09:1b:ae:cf:1b:3a:dc:a5:dc:
ab:ef:2a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:38:52 2024 by rpki-client on console-fra.rpki-client.org