Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/F3Tvlrz7ujaDN8g-P-tU9Ol2bgU.roa
File: F3Tvlrz7ujaDN8g-P-tU9Ol2bgU.roa (raw, json)
Hash identifier: YF1GcQ0SjHfQ9i4ITTXaTc9XFJ3CxA4EA8aeu7qbH1s=
Subject key identifier: 17:74:EF:96:BC:FB:BA:36:83:37:C8:3E:3F:EB:54:F4:E9:76:6E:05
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 01933EC7A019A63505D4417A9F8071AE1D62
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/F3Tvlrz7ujaDN8g-P-tU9Ol2bgU.roa
Signing time: Mon 18 Nov 2024 10:18:10 +0000
ROA not before: Mon 18 Nov 2024 10:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213858
IP address blocks: 84.44.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:c7:a0:19:a6:35:05:d4:41:7a:9f:80:71:ae:1d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Nov 18 10:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1774ef96bcfbba368337c83e3feb54f4e9766e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:99:c8:e5:ad:a2:23:fc:cf:55:4f:c8:a5:
9f:dc:b0:72:74:fe:bd:b3:4f:72:bf:13:26:a6:1d:
c3:3a:25:56:42:d2:91:ee:b5:17:61:a0:ea:d9:c6:
7f:91:63:e0:ee:b3:81:28:a1:cb:12:e8:61:07:e9:
5a:49:4d:e9:fe:86:28:a1:f9:e9:f7:10:e8:c6:81:
da:09:c9:eb:b5:43:f7:99:ca:0c:61:ac:5b:23:22:
c7:bb:fd:ed:24:67:8b:f1:96:10:8e:bb:5b:4a:99:
4d:c5:35:fe:c5:55:ef:82:d2:4b:9f:75:e4:f1:71:
2e:23:01:e2:2d:53:d9:4a:23:58:b5:e9:e4:a6:5b:
56:c7:55:c8:30:02:24:f9:8f:05:73:32:87:8c:5f:
1c:79:56:f7:11:8e:1d:70:e3:5b:ae:e2:72:e5:87:
2d:88:56:78:53:00:59:de:23:f1:9a:03:a4:4f:60:
85:e4:1b:e7:55:d4:25:de:f7:bc:17:33:b9:8f:28:
9e:74:0a:d2:48:db:3e:1a:a3:95:4c:54:07:41:a7:
ff:e4:e5:9a:f5:2a:37:7e:38:c0:1e:6f:86:90:d1:
92:97:67:c2:de:47:c9:d3:0f:2d:f2:c6:cf:e1:99:
99:3c:91:90:36:9c:11:f0:43:49:b0:f1:59:03:85:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:74:EF:96:BC:FB:BA:36:83:37:C8:3E:3F:EB:54:F4:E9:76:6E:05
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/F3Tvlrz7ujaDN8g-P-tU9Ol2bgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.44.113.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a3:b1:85:b0:ca:93:a9:79:5e:e0:d6:cc:70:6f:29:e6:2b:
4a:8e:71:7b:61:11:dd:78:e5:0f:a9:39:a6:ec:e6:59:a8:03:
7e:db:44:3b:06:10:9b:67:04:49:84:3d:ea:d2:b2:31:98:34:
f8:32:59:e7:1b:2d:43:b2:d2:0d:eb:88:39:9c:d6:c6:33:75:
26:11:ff:f7:1d:7d:1d:51:c4:5c:a8:e6:2c:f6:03:ee:38:a0:
62:a2:68:43:5f:dd:eb:ff:85:a6:df:da:66:28:7c:8d:b9:a7:
3b:93:77:94:9a:c5:f0:8b:7d:0d:88:76:1c:0a:24:f7:59:ab:
66:c0:55:87:c0:a3:3c:a5:51:00:1a:e5:8d:b2:63:88:f2:4d:
50:08:88:cf:3f:fc:02:c8:ad:d8:e5:8d:ff:4c:9a:28:cd:f8:
4a:d5:bd:76:af:55:9b:ee:91:1c:af:52:96:dd:c2:64:2a:b4:
a1:3f:33:77:50:7b:fe:93:96:18:49:7b:df:76:f4:ab:a2:8f:
22:f5:e2:ee:7f:ae:1d:6c:51:7f:8a:1b:12:66:2f:8c:1f:8e:
b8:1b:ef:6d:16:98:83:34:38:64:a5:a0:a2:1d:33:b2:38:98:
db:94:3b:39:60:c5:df:ff:8f:02:ba:a7:8f:10:01:e6:27:35:
84:be:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:06:24 2024 by rpki-client on console-fra.rpki-client.org