Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/IP6jJ7vGr1VmxGYXjCV9D1VERGs.roa
File: IP6jJ7vGr1VmxGYXjCV9D1VERGs.roa (raw, json)
Hash identifier: jVVlHbiyTGQi0iA7UGJkktKibRjaieJN9V5p8csXv/g=
Subject key identifier: 20:FE:A3:27:BB:C6:AF:55:66:C4:66:17:8C:25:7D:0F:55:44:44:6B
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018F28B7266E71BE147651E333892882633E
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/IP6jJ7vGr1VmxGYXjCV9D1VERGs.roa
Signing time: Mon 29 Apr 2024 07:17:22 +0000
ROA not before: Mon 29 Apr 2024 07:17:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 159.148.66.0/24 maxlen: 24
159.148.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:b7:26:6e:71:be:14:76:51:e3:33:89:28:82:63:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Apr 29 07:17:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20fea327bbc6af5566c466178c257d0f5544446b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:4e:bf:03:d1:0c:7e:9a:3d:c9:6d:88:b4:
e8:f1:47:49:6b:2b:2c:02:d0:6e:5a:ac:13:16:c6:
00:cb:8c:9f:b9:82:6c:3c:1a:94:8e:5f:9d:1a:13:
ee:d7:af:45:20:11:64:28:da:90:05:a4:e6:c1:57:
a0:32:5f:b7:4d:a9:c0:eb:e2:5d:87:b5:33:82:3e:
1b:6f:45:24:cc:b4:51:79:f9:e9:64:31:8d:00:60:
c3:e0:cf:c2:af:04:2f:9f:48:ea:d6:86:c9:07:12:
24:ec:c6:d7:c2:7e:75:ca:57:41:4d:80:bd:17:28:
11:aa:61:e6:b9:fc:06:42:15:e0:71:f6:da:17:2d:
ce:9f:1e:51:5f:28:e6:f4:f4:c1:94:f6:aa:20:ed:
26:e0:eb:f3:2a:45:fa:7a:b8:71:03:d6:f7:72:a9:
27:5a:87:15:63:57:ac:43:79:2c:98:6d:e6:91:4e:
e6:d7:19:1a:11:94:b6:ac:6a:a1:e6:c9:8c:72:36:
98:5e:fa:da:23:89:84:9f:c1:98:7f:ff:34:1e:33:
e3:d5:7f:94:05:d0:21:b7:f9:2f:48:1f:c1:df:84:
b6:4b:c2:4f:04:08:91:8b:11:b6:a6:d0:d9:e0:14:
ee:44:ea:57:7b:62:ba:25:20:3b:5c:58:7d:70:89:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FE:A3:27:BB:C6:AF:55:66:C4:66:17:8C:25:7D:0F:55:44:44:6B
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/IP6jJ7vGr1VmxGYXjCV9D1VERGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.66.0/24
159.148.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bd:f8:38:b3:5e:d7:d3:6b:6d:59:f5:69:0e:98:84:b8:3e:
c3:59:95:3d:77:f9:fb:72:0d:83:9f:46:32:33:8f:a1:9e:92:
28:d1:5b:f9:8b:a4:ba:ec:07:45:13:88:26:e6:1b:3f:43:17:
5c:c5:1e:fd:8e:a4:3d:a1:2d:73:fb:57:72:5c:9f:94:65:50:
43:bb:9d:b1:95:ab:2d:67:ed:09:d4:79:30:90:a8:f6:8f:6c:
39:1d:6e:59:db:53:b1:c2:b5:39:d3:1f:3b:15:80:6f:29:8a:
41:d0:95:ae:34:67:e0:1d:5f:3a:41:2e:78:89:29:c6:22:46:
18:db:73:37:da:ff:07:1f:8a:91:58:ef:74:89:8b:5a:1b:57:
b8:62:f8:5b:f6:67:67:9c:d6:87:90:07:82:c3:99:56:1a:56:
2c:fd:b8:a9:6b:f2:14:2c:34:0b:e0:97:a7:a6:34:41:ab:7e:
57:12:67:17:26:90:cd:a9:c6:78:22:9e:5c:24:ba:1c:e4:93:
da:bf:fe:93:ef:05:5b:7f:ef:f5:bc:01:91:90:0f:e4:47:be:
82:9d:42:68:0b:f9:af:d8:95:ab:f2:59:2a:3d:c8:da:36:af:
ac:af:1b:c4:84:46:3b:6e:53:9e:da:f7:0f:c5:f1:95:9f:5f:
61:86:e9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:23:21 2024 by rpki-client on console-fra.rpki-client.org