Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/duHR6DBXmzm574nPnhxP9_qt4Yk.roa
File: duHR6DBXmzm574nPnhxP9_qt4Yk.roa (raw, json)
Hash identifier: wuUGz4ePc4FT3DgXUBvN9bpIwp0CP9gmyPBRHUT3bb4=
Subject key identifier: 76:E1:D1:E8:30:57:9B:39:B9:EF:89:CF:9E:1C:4F:F7:FA:AD:E1:89
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0193273AE070CEC0CED31DD91534511BCB27
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/duHR6DBXmzm574nPnhxP9_qt4Yk.roa
Signing time: Wed 13 Nov 2024 20:33:10 +0000
ROA not before: Wed 13 Nov 2024 20:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400992
IP address blocks: 147.45.124.0/24 maxlen: 24
147.45.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:27:3a:e0:70:ce:c0:ce:d3:1d:d9:15:34:51:1b:cb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Nov 13 20:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76e1d1e830579b39b9ef89cf9e1c4ff7faade189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:a4:85:92:22:e9:56:f7:30:98:88:42:40:
79:fd:8c:3f:f2:02:44:43:af:8b:b9:a4:b7:19:86:
45:35:7c:95:a0:20:a4:16:e7:1c:c8:b5:c3:d4:95:
96:36:c8:30:c8:1f:fe:80:87:4e:c4:80:e9:8e:aa:
1f:73:36:77:72:e2:de:fc:31:0e:8a:78:2e:46:67:
10:79:09:03:98:92:f5:cd:0d:9a:9a:16:99:68:d3:
bf:0a:05:c7:fb:f3:e5:c4:c6:4f:d5:1e:f1:28:10:
1d:90:3b:5c:f4:53:1b:84:d4:ec:d0:a9:01:66:e6:
91:3b:32:2f:31:2e:43:14:0a:17:8c:85:46:9d:d2:
48:ea:1d:aa:46:52:58:1a:d2:57:4f:03:1f:cb:3a:
a3:88:8b:03:fc:85:2f:b2:48:bf:7d:78:8b:be:b7:
0f:b1:b7:cb:6e:1e:3e:e7:31:53:3c:94:25:d8:91:
53:fc:15:86:9b:5e:51:18:25:03:99:f7:67:d5:4e:
ec:57:94:ac:33:f1:12:68:52:d8:1e:a6:47:b0:8a:
6b:32:d5:3f:0a:32:db:bc:36:ce:37:f0:c5:9e:24:
d1:7a:38:7c:d6:c6:9a:af:fb:66:63:41:41:22:02:
7b:a3:04:9c:26:c5:83:d6:0f:fb:e9:81:dd:21:29:
f4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E1:D1:E8:30:57:9B:39:B9:EF:89:CF:9E:1C:4F:F7:FA:AD:E1:89
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/duHR6DBXmzm574nPnhxP9_qt4Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.124.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:ce:2e:6a:b7:0a:cd:5e:84:a3:1f:83:c4:8c:ea:f5:70:11:
9f:98:a3:84:55:d8:78:43:ba:f9:c3:0d:3f:f2:3e:e6:4e:98:
2b:7a:95:87:ef:12:ba:6b:72:a5:34:37:57:80:0f:a7:cb:c0:
37:2e:80:7c:45:76:75:d4:a0:02:4f:83:6e:01:66:69:5d:c6:
cf:be:b4:0c:04:26:60:5a:2a:21:95:76:53:83:44:9c:49:35:
a2:3f:a3:38:27:1f:24:84:a7:f1:c4:a4:04:37:95:33:0d:8c:
60:f7:cd:cc:fc:59:39:16:96:60:fb:41:99:51:e6:0f:3e:bf:
04:5b:b9:cb:26:0a:fd:65:ef:d6:7c:be:f9:9e:01:1d:df:0f:
20:85:4c:e4:cd:6a:1f:08:82:41:c0:4f:b8:37:55:5a:71:5b:
f8:f5:f2:2a:8d:03:f6:ee:b7:e8:cc:86:35:67:b5:14:1a:18:
12:22:e3:7b:3b:d0:58:0d:ae:7a:a1:02:e4:be:18:08:77:3d:
a5:1d:5e:9c:ab:f7:73:dd:5b:8d:c6:65:14:cb:9d:15:9f:2d:
3b:cb:9e:9b:30:ae:23:9e:f0:8e:3c:ec:25:e8:1d:03:d8:69:
fb:0f:78:14:cf:25:12:fc:1a:53:33:ca:e5:c3:a9:d5:33:ec:
5a:d2:e9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:39:24 2024 by rpki-client on console-fra.rpki-client.org