Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/2MZvoIGefEz8w4NKZ6AMu0jO2zU.roa
File: 2MZvoIGefEz8w4NKZ6AMu0jO2zU.roa (raw, json)
Hash identifier: 56ujf/G4DLUAUu3jI2P40xYNIF5Hpk67D3rpo4CzPW0=
Subject key identifier: D8:C6:6F:A0:81:9E:7C:4C:FC:C3:83:4A:67:A0:0C:BB:48:CE:DB:35
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0192CF82ECF4738F43B2368F037998A665BE
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/2MZvoIGefEz8w4NKZ6AMu0jO2zU.roa
Signing time: Sun 27 Oct 2024 19:45:16 +0000
ROA not before: Sun 27 Oct 2024 19:45:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 945
IP address blocks: 84.247.59.0/24 maxlen: 24
192.200.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cf:82:ec:f4:73:8f:43:b2:36:8f:03:79:98:a6:65:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Oct 27 19:45:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8c66fa0819e7c4cfcc3834a67a00cbb48cedb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:ad:61:81:c3:ad:d5:18:b6:85:6e:78:54:
6d:fb:d1:05:1d:f0:ca:ab:60:af:c2:b2:84:17:7c:
7b:22:63:ec:0f:b1:ca:30:74:64:cb:b3:0d:6b:05:
53:a8:50:8a:55:fd:05:dc:e4:13:c9:48:61:1b:eb:
ba:39:f0:24:0f:20:e4:68:ab:b2:ac:ca:8a:1a:46:
65:d5:5c:80:3a:b7:7c:0a:2b:1a:58:40:e1:be:36:
e2:7c:4e:dd:5e:dc:f5:b2:80:10:38:38:e5:a4:f5:
3b:e2:66:43:7f:c9:a0:81:02:bf:68:e6:3b:90:6b:
20:a7:39:02:c5:df:83:0f:d8:36:84:fe:29:e0:01:
b5:39:fc:73:5c:61:6f:68:2f:f4:ca:91:bb:6f:e7:
a4:91:6c:e3:19:34:8d:e6:e9:1e:62:ce:06:9c:c3:
08:71:0b:47:b3:e0:b5:a2:f7:ed:d3:02:96:63:83:
d6:b9:32:07:04:5d:d3:0e:91:e9:c0:13:6a:14:f7:
78:1c:76:17:66:5e:4e:69:7c:a9:b6:06:f9:72:e6:
c7:0f:6c:8e:74:ac:bd:5a:58:77:f4:2d:ba:48:a2:
89:82:32:2c:ff:fc:9a:dd:e4:c0:03:ff:9d:de:d5:
94:50:41:81:de:31:c5:5d:92:1b:ba:a0:6a:be:4f:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C6:6F:A0:81:9E:7C:4C:FC:C3:83:4A:67:A0:0C:BB:48:CE:DB:35
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/2MZvoIGefEz8w4NKZ6AMu0jO2zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
192.200.192.0/19
Signature Algorithm: sha256WithRSAEncryption
81:f6:59:38:5d:fb:df:59:49:80:78:15:b0:13:e8:f4:21:4f:
76:9d:d9:4a:31:12:12:bd:90:89:d2:97:16:b7:46:a8:ab:5e:
f6:54:a2:cf:19:a6:20:45:c9:01:99:55:87:bb:d9:ed:cf:1e:
b6:64:e5:b0:e4:e1:ef:6a:1d:a2:42:42:45:d7:54:6e:f6:d4:
02:b7:e9:a5:88:3d:e9:d7:52:cb:d8:8c:df:2f:19:46:bd:4c:
de:83:e0:0e:3a:cf:06:e1:4d:a5:eb:12:f6:dc:28:c1:4e:52:
e3:9e:15:ec:71:34:57:33:60:b7:60:57:a3:8c:f7:03:91:1a:
70:1a:91:bf:ae:4f:0f:8b:42:24:47:1e:d9:12:71:a3:b6:1f:
89:66:73:9c:46:63:17:14:7f:3f:bc:6c:7f:11:45:af:b4:97:
0c:0a:94:1d:d0:48:e3:df:ce:46:1d:0a:4b:62:4e:f2:d3:d2:
22:42:32:b3:ad:f3:c3:1c:e6:c4:61:63:2a:ee:4d:48:1b:fb:
8b:1a:11:01:a0:78:6b:23:c3:7a:79:92:89:f5:09:17:ee:e2:
67:c2:00:3f:0a:5c:98:f2:89:d1:5a:9a:fb:63:7e:2f:a8:e7:
0b:77:bb:14:7c:28:e1:9d:96:58:18:8d:16:12:a7:14:ff:ee:
55:a1:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:28:31 2024 by rpki-client on console-fra.rpki-client.org