Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/agVBmwt7loS49wM34uw9T0GVv2M.roa
File: agVBmwt7loS49wM34uw9T0GVv2M.roa (raw, json)
Hash identifier: c80THa0PpAycZVx4hKydHtestQjlOlsmC1aMWkVpEcs=
Subject key identifier: 6A:05:41:9B:0B:7B:96:84:B8:F7:03:37:E2:EC:3D:4F:41:95:BF:63
Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial: 018F7CC87F813CA2443FBA239507A4332105
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/agVBmwt7loS49wM34uw9T0GVv2M.roa
Signing time: Wed 15 May 2024 15:04:25 +0000
ROA not before: Wed 15 May 2024 15:04:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214898
IP address blocks: 145.250.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:c8:7f:81:3c:a2:44:3f:ba:23:95:07:a4:33:21:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Validity
Not Before: May 15 15:04:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a05419b0b7b9684b8f70337e2ec3d4f4195bf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:12:bd:6b:ea:ae:0a:be:62:1e:2f:65:d4:
2d:12:34:9a:68:0a:1c:9c:eb:8b:d7:86:da:13:49:
5e:00:32:b8:9d:6f:68:fd:08:d2:1f:61:3e:a6:3a:
d9:6a:2e:03:5e:42:7e:2d:64:e4:c3:80:5d:04:0f:
05:00:5e:d1:97:d0:10:b8:9e:fb:db:b2:08:47:dd:
c1:d3:e4:06:96:b8:8d:07:69:7d:dc:0e:ad:25:e6:
f3:a5:f1:33:26:15:f7:6a:e9:8b:64:ba:67:0f:a3:
83:ce:31:77:e1:4b:c1:13:45:1b:3b:26:8e:e3:e8:
ac:95:e3:21:09:f5:6d:0c:b1:0f:fe:cd:66:e4:c7:
57:8f:8c:c7:f7:cc:44:08:ae:7d:2f:78:ac:5b:5b:
52:01:57:e3:bd:b8:fd:17:c3:51:a1:e8:cb:39:af:
26:40:ef:a3:62:b4:fc:86:d2:27:98:0b:af:f6:cb:
63:04:3d:70:14:3a:f5:7a:cb:ae:56:c1:78:7e:b7:
03:6f:fa:55:2d:f2:18:e5:e4:c7:d2:92:ac:70:36:
73:5c:c3:43:a1:7f:a1:53:11:65:8a:c1:43:b9:60:
c2:98:73:15:41:1a:16:69:c1:23:26:02:1b:b2:a6:
af:35:60:c0:26:1d:bc:16:8f:8e:49:46:6a:f1:13:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:41:9B:0B:7B:96:84:B8:F7:03:37:E2:EC:3D:4F:41:95:BF:63
X509v3 Authority Key Identifier:
keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/agVBmwt7loS49wM34uw9T0GVv2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.250.0.0/17
Signature Algorithm: sha256WithRSAEncryption
94:68:c1:fa:d8:b6:80:6d:55:b8:1d:ff:de:38:73:11:51:2c:
48:53:00:ac:1b:72:87:2e:f4:20:cc:4f:8b:3e:b7:15:c1:e6:
df:04:f0:e3:6d:d4:e6:85:24:29:cb:78:84:53:05:95:39:48:
36:da:ef:2d:a6:53:05:a0:90:c1:fe:61:a7:6f:68:d0:65:37:
1d:02:6e:fa:a1:cf:11:93:54:1b:7b:ee:65:5e:77:dc:86:bf:
ca:aa:57:89:f4:88:b1:66:1a:8a:71:cc:c5:28:46:4b:60:54:
97:72:04:3a:b8:51:06:4c:85:c3:68:bf:67:a5:b2:5c:ab:ad:
49:ac:cd:f7:b8:75:b9:7e:e6:b9:99:27:b3:d2:11:e4:27:44:
d4:34:65:8b:f5:52:1e:77:9e:9a:ab:54:fd:72:07:61:d1:3b:
59:1b:c7:43:d1:63:8d:c8:14:68:fa:ff:7d:81:e5:bc:6c:b2:
05:5b:4d:a9:10:50:bb:18:fd:71:0d:eb:f2:b0:57:b3:64:7a:
35:a2:0c:90:08:7b:49:03:85:94:24:0a:6a:7c:ee:7d:89:cc:
3a:ac:5e:19:c7:6a:d3:ed:e0:31:a8:48:c9:3b:61:ee:88:c7:
86:2d:32:35:f3:6f:85:4d:6d:94:81:57:77:fe:f0:8f:2a:90:
bb:20:e7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:14:25 2024 by rpki-client on console-fra.rpki-client.org