Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dhey7XWqWwb5-FTHQ4slJn_Qy-0.roa
File: dhey7XWqWwb5-FTHQ4slJn_Qy-0.roa (raw, json)
Hash identifier: xhz5KELAzX1I/4d6jW1uxHMelB9YeWVv8UZwP6tNHXw=
Subject key identifier: 76:17:B2:ED:75:AA:5B:06:F9:F8:54:C7:43:8B:25:26:7F:D0:CB:ED
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01929F1E02F5DA34D3B62A9744627F4C6545
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dhey7XWqWwb5-FTHQ4slJn_Qy-0.roa
Signing time: Fri 18 Oct 2024 10:13:17 +0000
ROA not before: Fri 18 Oct 2024 10:13:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41798
IP address blocks: 193.124.93.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
195.133.8.0/24 maxlen: 24
195.133.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9f:1e:02:f5:da:34:d3:b6:2a:97:44:62:7f:4c:65:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 18 10:13:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7617b2ed75aa5b06f9f854c7438b25267fd0cbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:14:08:b8:9c:a1:83:7e:7c:e9:67:f6:e7:
59:62:20:74:e2:fa:ec:a3:0c:fb:4d:ee:1d:8a:d3:
22:3d:95:4c:11:8e:95:66:1d:94:f5:4e:24:23:0a:
02:a7:08:74:de:2d:a1:6f:8f:d3:d7:2b:7c:3d:83:
b1:18:c2:3a:63:a5:4b:f4:d6:59:6c:59:50:57:18:
fd:e6:1c:19:b0:54:6b:40:85:32:23:f1:5c:ea:b3:
a1:b8:2d:27:99:91:dc:79:7c:fa:cb:03:c2:d9:7f:
95:2e:90:4b:03:31:7f:11:e3:21:d7:9d:47:5b:a4:
f8:4d:4e:61:b1:36:67:86:e9:6e:b7:d3:33:a6:e9:
49:43:4f:7a:8e:eb:07:90:6a:06:48:6f:98:37:62:
ef:ba:cc:8c:f9:97:35:e2:bf:10:09:34:a7:83:b8:
e3:f1:d0:29:55:3f:42:fa:90:b4:1b:d2:da:11:5c:
ec:91:f3:1d:d7:82:dd:03:2d:e8:91:9e:3a:da:40:
8a:c6:8f:ac:e4:74:e0:3a:98:65:eb:9d:f4:c0:f3:
86:2e:c7:47:8f:a6:51:48:f9:2e:22:32:a3:e6:88:
ad:a2:b7:f6:e0:85:db:f7:e3:29:12:86:6f:8c:02:
11:a0:c2:1d:88:da:57:10:1c:94:e7:ab:9b:c1:e9:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:17:B2:ED:75:AA:5B:06:F9:F8:54:C7:43:8B:25:26:7F:D0:CB:ED
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dhey7XWqWwb5-FTHQ4slJn_Qy-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.93.0/24
194.58.42.0/24
195.133.8.0/24
195.133.62.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:2e:24:b1:47:cc:aa:9a:5b:bf:8f:85:f5:55:e1:65:f4:fb:
d8:af:24:44:73:89:cf:05:bc:d6:a1:93:c0:88:e6:a1:f3:e8:
f5:0b:1b:09:95:8f:f8:50:4b:ea:21:cd:4f:79:dd:ff:18:35:
40:5f:24:da:3e:43:50:3c:6c:6b:99:2d:a2:4e:9a:16:f2:3f:
97:93:e1:a1:08:35:29:10:97:74:7d:c7:84:ba:1e:99:21:4f:
a9:91:f6:d8:df:e5:c7:23:5a:0b:4a:6c:4c:0e:80:31:69:10:
7c:08:b7:c6:b0:12:c4:79:34:86:9d:2f:df:b1:45:e2:ea:54:
0b:a8:db:28:4d:f6:7d:92:75:07:a7:28:86:1a:e9:81:f6:7b:
2b:cc:e3:71:64:2f:9f:f7:3a:4f:57:99:02:27:5f:84:df:0c:
0e:9b:77:d6:44:63:31:ff:ef:b5:e0:ce:6a:83:f8:c0:66:11:
ca:74:e8:2c:45:d3:4d:19:40:66:03:b3:38:2a:d7:94:a6:2a:
c9:39:c3:da:f2:b6:05:46:57:39:a3:a9:8a:6a:2c:21:b0:c0:
c1:98:2a:77:12:ac:4d:df:72:93:1b:e3:70:a9:a8:e0:ea:51:
9d:90:87:7c:7c:6b:90:de:a1:c2:a9:7c:53:5e:2e:71:d0:db:
31:fb:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:35:43 2024 by rpki-client on console-ams.rpki-client.org