Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/dCLqmMwEdd49RbQFj2qkqVx4qjw.roa
File: dCLqmMwEdd49RbQFj2qkqVx4qjw.roa (raw, json)
Hash identifier: tgv5ELt3BhWnTyIg4UGDbKqpDfbVMMh29A4IOCntxck=
Subject key identifier: 74:22:EA:98:CC:04:75:DE:3D:45:B4:05:8F:6A:A4:A9:5C:78:AA:3C
Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial: 018CC9BCAB54420065D227A04041C227D0AE
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/dCLqmMwEdd49RbQFj2qkqVx4qjw.roa
Signing time: Tue 02 Jan 2024 10:33:54 +0000
ROA not before: Tue 02 Jan 2024 10:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12301
IP address blocks: 217.113.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ab:54:42:00:65:d2:27:a0:40:41:c2:27:d0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Validity
Not Before: Jan 2 10:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7422ea98cc0475de3d45b4058f6aa4a95c78aa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:32:ec:c8:68:f5:52:d8:d8:e3:bc:f2:0c:
d0:55:7b:64:4a:7d:52:3d:6c:f5:78:04:17:3e:65:
a7:28:64:0b:9b:49:8a:69:f7:2c:25:10:86:44:9d:
d3:cb:63:82:5e:0c:09:a1:cd:e7:97:e6:59:10:da:
ad:29:0b:29:45:27:da:36:85:19:8d:a2:25:25:87:
36:cf:64:3d:59:b9:20:20:16:9f:82:d3:49:9c:5a:
8a:51:fe:97:db:fd:a9:37:62:ad:ed:80:85:f6:db:
18:5e:a2:66:83:08:dc:18:97:dd:85:ff:eb:49:91:
96:fe:6e:62:a7:85:d4:92:8c:84:03:10:e8:98:d9:
38:e1:ce:5f:7a:1d:35:d5:93:5c:5c:d3:e9:be:ee:
aa:da:a2:74:8c:a4:a4:44:74:5e:ce:0f:9a:d7:a9:
aa:5d:7a:0b:d0:9f:f4:1e:85:9f:cf:20:61:af:51:
3e:eb:4a:3a:6a:4d:36:a3:b3:25:9a:a4:fb:c2:0d:
4b:4b:11:c6:54:30:46:fa:57:f9:3f:a3:10:26:e6:
8c:93:d7:d5:0a:4d:63:06:1c:91:56:31:c4:c7:d4:
53:bb:f1:e5:9c:9f:14:8e:66:59:08:05:04:1c:db:
66:fd:24:03:00:01:80:18:5e:f4:95:3d:e8:c9:d8:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:22:EA:98:CC:04:75:DE:3D:45:B4:05:8F:6A:A4:A9:5C:78:AA:3C
X509v3 Authority Key Identifier:
keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/dCLqmMwEdd49RbQFj2qkqVx4qjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.60.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:45:92:ed:73:90:0d:41:9e:8b:b5:fc:d0:01:cd:36:16:72:
77:42:59:10:ef:4a:eb:f3:3e:b2:66:83:18:9f:ea:83:73:d8:
4f:71:06:3e:78:7d:f5:1a:4b:dc:b1:62:6c:24:c4:cc:dc:b9:
b0:84:50:2f:01:77:29:41:41:d6:b0:7c:9e:8e:34:5a:08:91:
9b:28:9f:26:d4:b2:2a:89:fc:70:0b:08:8d:f7:e6:d2:ee:4c:
ca:9c:19:65:da:eb:0d:d1:0a:53:e4:af:a0:de:22:85:4a:ce:
3b:fd:ee:69:84:46:c5:cb:0a:2a:b4:36:33:31:0d:d9:35:bc:
37:c2:aa:5f:89:4d:56:cf:e6:d5:95:f2:5c:7e:9c:f3:ce:06:
40:15:a0:e5:69:04:33:c1:6e:2d:8a:86:c2:e1:51:14:43:af:
fc:a6:81:e6:08:99:09:e5:44:92:a3:62:3a:19:4c:15:fd:28:
ee:c7:22:fe:4f:a0:fe:2f:a8:3f:30:59:f2:34:78:01:cc:8d:
bc:44:f4:16:6b:82:4f:51:24:c9:ab:5f:00:9c:63:23:42:6d:
d7:ef:fc:3b:13:90:e3:69:7c:26:d5:95:65:a8:65:eb:9a:d9:
6a:5b:78:c7:5b:16:59:d5:9b:5e:3c:29:b1:de:30:13:34:f3:
fb:01:3a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:40:57 2024 by rpki-client on console-fra.rpki-client.org