Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/9pWt6XOgszXs8UyFILGtTs-fxPg.roa
File: 9pWt6XOgszXs8UyFILGtTs-fxPg.roa (raw, json)
Hash identifier: C9QHOJgzaAj8y5pox6Lbhprs1U9AYmR0w8Y9AxsTZNo=
Subject key identifier: F6:95:AD:E9:73:A0:B3:35:EC:F1:4C:85:20:B1:AD:4E:CF:9F:C4:F8
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 01928F791BA9936D1C9332A5C7416A88B264
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/9pWt6XOgszXs8UyFILGtTs-fxPg.roa
Signing time: Tue 15 Oct 2024 09:18:51 +0000
ROA not before: Tue 15 Oct 2024 09:18:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 146.19.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:79:1b:a9:93:6d:1c:93:32:a5:c7:41:6a:88:b2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Oct 15 09:18:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f695ade973a0b335ecf14c8520b1ad4ecf9fc4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:b3:ff:4b:04:ec:82:73:8d:40:c8:b5:48:
ce:50:d7:89:f4:4d:9c:2c:62:61:08:3d:4c:65:c2:
33:84:cf:d8:c4:4a:48:f4:28:51:63:23:38:3f:7f:
31:d3:c5:69:7f:c3:df:c9:5e:84:52:cb:d7:56:b2:
b0:af:f0:47:84:d8:98:92:50:ca:30:3b:ba:20:dd:
d2:c7:75:75:1c:22:e2:ea:3b:cd:63:5b:e3:96:7c:
32:cb:90:a3:26:5b:f1:10:bd:dd:03:b5:6d:e7:42:
a3:c3:6d:b4:c8:bc:7b:06:24:72:64:87:59:21:e9:
ac:1a:cb:0f:c7:51:7b:a5:59:aa:00:16:d2:9c:f2:
c3:c1:4a:83:ce:35:d3:1f:d6:e8:63:00:af:a4:6a:
22:e4:8e:00:ec:1b:27:60:2a:2f:8d:44:a8:49:74:
a9:e0:c7:f0:3a:5b:fb:20:2e:97:25:f3:a5:22:61:
fc:23:60:25:f7:4e:7b:de:a6:30:88:14:5f:54:ac:
50:5e:fd:67:6f:33:7c:ef:dc:d9:d3:39:cb:1b:95:
b2:e8:e5:50:14:fe:41:1a:76:48:1a:c9:38:d6:9d:
b3:2d:20:53:4d:e8:e4:c0:6f:a4:2d:82:6b:e6:c2:
71:38:96:33:1d:40:7c:3e:27:7e:00:39:f6:26:40:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:95:AD:E9:73:A0:B3:35:EC:F1:4C:85:20:B1:AD:4E:CF:9F:C4:F8
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/9pWt6XOgszXs8UyFILGtTs-fxPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.29.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3a:59:bb:a9:7f:b7:4e:10:1f:4e:d7:cc:91:b9:59:f6:00:
ef:ee:d1:3a:5a:77:76:fb:d9:2e:f6:90:ac:0b:71:53:e8:d4:
bb:39:b4:ef:a0:fd:a0:dc:b5:9b:35:67:d0:e5:8b:ed:78:36:
d6:c2:1a:3a:73:55:c6:17:b4:53:ee:9c:95:98:c1:01:ba:74:
49:64:25:02:f5:bf:7b:8b:01:08:96:8d:40:6c:44:e3:b0:83:
ca:12:40:8d:94:b7:25:bc:02:1e:2a:19:fa:97:38:50:ef:d1:
32:57:05:bb:60:56:a3:f9:0e:fa:13:0f:4c:91:7c:35:e0:be:
76:58:92:3f:86:f0:8d:64:c0:ad:1a:76:e0:d0:96:9b:ee:36:
f7:d8:09:49:27:b0:c4:ca:e3:45:34:d0:62:db:a5:da:0e:68:
1a:b6:6a:12:ea:86:8b:51:44:0f:f0:69:ef:83:da:1c:81:de:
9d:3a:2f:97:01:d1:f6:11:37:1b:4a:69:37:f2:95:0b:3d:e1:
8d:ca:08:bc:95:5b:f5:a4:1f:dd:12:44:80:3b:f1:56:b4:55:
18:a8:64:f5:3e:a8:4a:a4:83:96:b9:6a:5c:43:1f:e8:b3:e2:
ae:af:31:02:b9:1a:9c:c0:3f:f9:33:a9:ee:33:39:a5:7f:d7:
60:0a:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:38:31 2024 by rpki-client on console-fra.rpki-client.org