Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pB6dje-SE37MJqJT2Et525uARPY.roa
File: pB6dje-SE37MJqJT2Et525uARPY.roa (raw, json)
Hash identifier: iVhnHqOX49uIM4gu8Mz8ADKemRPt+qhA64xcTyfg2/Y=
Subject key identifier: A4:1E:9D:8D:EF:92:13:7E:CC:26:A2:53:D8:4B:79:DB:9B:80:44:F6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192E25E450AE9496B44DF56B5A408234D55
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pB6dje-SE37MJqJT2Et525uARPY.roa
Signing time: Thu 31 Oct 2024 11:38:01 +0000
ROA not before: Thu 31 Oct 2024 11:38:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 87.121.222.0/24 maxlen: 24
91.92.240.0/20 maxlen: 20
94.156.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:5e:45:0a:e9:49:6b:44:df:56:b5:a4:08:23:4d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 31 11:38:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a41e9d8def92137ecc26a253d84b79db9b8044f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:30:f6:3a:a7:31:72:99:64:f8:3b:e4:e8:
f6:cd:ba:8c:a9:56:d9:dc:4f:d5:8f:6b:93:dc:71:
b2:d1:e5:89:ea:c7:12:84:97:73:0d:b4:e3:8a:2a:
64:b0:c1:be:9e:bb:42:66:13:47:6d:9d:92:b5:4d:
2a:d2:88:e0:39:70:34:dc:8b:ba:3a:72:0b:ef:41:
d7:bf:a2:7b:10:40:a4:89:51:cf:50:9b:a1:3e:8a:
c9:7e:5a:aa:8d:35:56:b0:bd:04:a2:98:8f:68:6c:
b7:88:d3:15:1d:a4:9b:fc:af:87:a0:7b:93:98:c1:
7c:8e:21:28:42:ba:cf:4f:24:90:9d:14:46:ed:05:
fe:98:7a:91:bc:3c:b7:70:7e:06:8d:6c:ca:f0:72:
75:71:35:16:35:01:d9:15:22:cd:36:8d:01:cc:8f:
2c:2c:ef:8a:41:5c:ee:7d:2c:08:d3:f3:36:a9:df:
0c:b2:51:e0:51:cc:17:2d:2f:35:e2:8b:b0:47:5a:
2b:9f:c8:83:25:46:d3:5f:d2:3c:b7:88:59:b6:86:
e5:08:82:d6:2d:ac:00:38:03:1f:90:fd:20:f1:b7:
19:06:5a:26:1d:99:65:86:57:9c:f7:ce:86:ff:9b:
86:dc:e2:86:43:58:78:35:32:2e:86:68:df:de:9b:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:9D:8D:EF:92:13:7E:CC:26:A2:53:D8:4B:79:DB:9B:80:44:F6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pB6dje-SE37MJqJT2Et525uARPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.222.0/24
91.92.240.0/20
94.156.64.0/21
Signature Algorithm: sha256WithRSAEncryption
00:ba:3a:81:fc:9f:75:92:6f:1c:10:1c:3f:c4:d4:cd:d0:13:
5f:0c:0b:50:4a:05:7b:ff:d8:aa:2f:1e:ad:6b:99:2a:0e:bd:
1a:e6:24:be:0e:1c:66:e8:d0:e3:a4:5d:cb:2b:bb:7f:de:a1:
fa:8e:3e:4d:b9:89:e5:33:42:e7:11:08:01:41:27:4e:f8:ca:
a7:95:47:31:92:ea:df:7e:18:1b:9f:53:f5:76:0c:76:eb:c9:
6c:e0:07:7d:fd:44:10:29:3c:2c:4e:89:1c:a0:fb:30:23:be:
3d:26:30:33:87:61:6f:17:f2:b3:a4:ce:db:34:ef:4c:5e:c2:
fc:04:77:bc:ec:bb:e6:cd:62:a0:ee:c0:74:7b:b1:96:5c:1e:
5a:d0:fa:bd:0d:0d:99:09:17:f3:f8:37:6b:79:69:5a:13:ee:
42:56:8a:b0:51:09:99:a3:f7:e0:0e:7c:e7:95:b7:dd:63:44:
87:01:ba:21:da:f4:1f:fe:78:f4:88:fa:67:4c:56:48:7c:3a:
02:64:7f:c8:2e:ae:23:a6:72:3d:64:de:1c:96:c2:27:2c:dd:
7c:2a:32:db:01:c2:03:b7:06:98:49:11:cd:5b:71:3c:b9:b7:
cf:f6:22:b6:2f:45:62:a1:33:79:df:72:45:69:22:12:db:f2:
97:21:c7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:53 2024 by rpki-client on console-fra.rpki-client.org