Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/cRYEyxS2ttKWI444TTIPcaRk6gk.roa
File: cRYEyxS2ttKWI444TTIPcaRk6gk.roa (raw, json)
Hash identifier: qD5Pr1TlCF05ZKS85tOj5kv3egdGe25QeTcQp7A4ufc=
Subject key identifier: 71:16:04:CB:14:B6:B6:D2:96:23:8E:38:4D:32:0F:71:A4:64:EA:09
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 0192292514B21224CAEB358CC7BE47E86255
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/cRYEyxS2ttKWI444TTIPcaRk6gk.roa
Signing time: Wed 25 Sep 2024 12:25:48 +0000
ROA not before: Wed 25 Sep 2024 12:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12666
IP address blocks: 194.153.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:25:14:b2:12:24:ca:eb:35:8c:c7:be:47:e8:62:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Sep 25 12:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=711604cb14b6b6d296238e384d320f71a464ea09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:7b:a9:28:7d:fb:db:5c:4f:d2:98:da:03:
70:7e:ff:cc:07:f1:79:de:5d:c3:24:0f:16:bb:24:
12:bf:58:a5:2e:68:6c:09:72:33:f4:c1:30:7a:1d:
e1:7c:f7:cf:1e:97:f4:67:96:cb:a8:53:88:df:23:
c8:69:a6:e8:ff:0d:d4:e7:58:bb:2f:9c:09:a2:db:
f8:34:87:ab:c5:31:86:05:85:0d:d0:d0:f2:95:29:
a7:31:30:49:9f:f5:78:43:c5:0c:c3:91:08:68:5c:
f9:ec:6b:6c:02:12:a0:80:cb:f8:5a:30:b1:40:21:
28:58:4d:ab:e3:8b:9e:66:c9:07:04:31:29:ec:2b:
59:63:8c:3b:d3:7d:7d:1d:93:d1:c7:dd:4b:a4:e4:
b6:9a:a0:11:12:16:d4:b6:c6:a0:fe:3c:10:a5:11:
03:d6:d0:ba:9b:92:4c:62:93:1e:7c:10:93:f7:6d:
f5:8d:02:8f:7f:39:51:bb:7f:8b:06:e5:fc:09:ca:
30:c3:d4:26:52:2d:a6:cf:f0:9b:e9:5a:ea:1b:68:
df:e5:40:b9:d9:7c:78:14:79:4a:a6:de:97:d4:96:
59:a2:99:6f:10:81:7c:9c:b5:53:5d:ba:68:3b:31:
93:51:38:1b:17:11:43:5d:d3:42:eb:21:60:0b:76:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:04:CB:14:B6:B6:D2:96:23:8E:38:4D:32:0F:71:A4:64:EA:09
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/cRYEyxS2ttKWI444TTIPcaRk6gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.74.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8d:6f:fe:75:b0:0e:bd:e7:ec:98:5b:3b:00:0b:fc:89:5e:
4c:eb:07:67:6d:fc:59:05:2d:85:10:65:c4:91:84:ad:e2:1c:
53:9c:1b:2d:82:55:ae:38:a9:fb:13:86:33:9e:16:0b:ed:22:
f0:d0:c8:c2:35:72:22:e4:e6:82:5c:b7:9b:a5:3f:52:5b:ba:
56:41:88:c5:68:9f:10:3e:70:0c:b6:b6:3c:a4:7e:e8:b5:39:
99:53:79:ca:1c:6c:7a:4b:48:7e:5e:a0:6d:fc:74:9c:87:a5:
1a:f5:90:38:64:56:0f:87:ed:28:65:ed:da:d7:e3:ca:65:f6:
c7:4a:6c:e4:4d:c8:03:8b:00:f7:05:dc:9c:b5:72:e3:46:bf:
e5:5b:02:47:45:3a:ab:ee:8d:b8:ab:9d:12:50:d7:8b:3c:48:
de:84:b4:9a:65:06:3d:46:39:34:4c:c9:66:0d:e7:35:10:b3:
11:32:a1:53:ac:69:e3:81:de:25:fc:39:92:b2:86:7c:4f:1d:
d6:7f:51:a4:68:24:db:5a:91:97:ca:a6:0e:1f:f9:bb:60:e0:
38:de:29:c3:1d:45:93:f5:bc:8f:85:8b:63:5a:f5:eb:38:17:
70:a8:e5:3e:e5:fd:0e:f7:d3:d9:10:6b:59:d1:94:04:74:e0:
fe:68:a1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:11 2024 by rpki-client on console-fra.rpki-client.org