Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/CNkhtM1azS7zFOVcJSRWGXY-FxI.roa
File: CNkhtM1azS7zFOVcJSRWGXY-FxI.roa (raw, json)
Hash identifier: CQ2o2qrZ8xrVqQWXoEL/6KZCcIdKQ2hTQfJjYCCqiWQ=
Subject key identifier: 08:D9:21:B4:CD:5A:CD:2E:F3:14:E5:5C:25:24:56:19:76:3E:17:12
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0192244E5F4751C8D62BD7F095AFD0F2F74A
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/CNkhtM1azS7zFOVcJSRWGXY-FxI.roa
Signing time: Tue 24 Sep 2024 13:52:48 +0000
ROA not before: Tue 24 Sep 2024 13:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 94.154.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:24:4e:5f:47:51:c8:d6:2b:d7:f0:95:af:d0:f2:f7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Sep 24 13:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08d921b4cd5acd2ef314e55c25245619763e1712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:22:11:07:a0:be:82:1a:9f:58:f9:6e:0c:
c0:3e:39:6e:1e:20:84:f3:a7:b2:5e:f2:2f:2d:11:
52:b1:2a:d0:ea:7e:90:40:33:6e:05:2e:8e:51:17:
87:dc:dc:5f:11:7e:b6:bf:58:d2:c8:e3:1b:4c:84:
8d:2c:c9:90:0e:e2:9f:22:bb:5f:11:6c:21:69:e0:
15:e1:02:8e:48:51:91:69:2c:72:28:5a:17:43:b5:
1f:39:e6:38:cf:ba:c2:24:c5:6c:49:d3:a5:fe:37:
d5:9d:22:b2:ce:4a:b2:56:de:8f:54:17:f6:7b:da:
a0:dc:82:19:15:34:78:bc:81:e5:3a:e4:e1:a4:40:
d0:27:e1:f1:c6:b5:64:e3:d8:91:93:66:4b:6d:5b:
c1:b5:01:7f:91:76:e9:49:e5:6a:b3:af:2e:11:5b:
e9:2d:40:f8:cc:41:5d:b5:47:10:26:84:31:e7:b2:
0e:35:78:84:01:44:87:bb:8b:45:21:09:31:72:e9:
7d:8d:fa:86:a5:d8:67:f4:ea:b4:28:a1:73:82:06:
89:3c:ca:47:58:b7:bc:77:b8:13:d9:66:d7:9c:bb:
5b:ec:8c:b8:d0:04:42:a4:2f:d5:e2:c3:78:b4:6c:
92:05:6f:ce:c4:e2:f2:d4:59:19:b5:da:aa:2f:5e:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D9:21:B4:CD:5A:CD:2E:F3:14:E5:5C:25:24:56:19:76:3E:17:12
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/CNkhtM1azS7zFOVcJSRWGXY-FxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.42.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e8:4d:d4:c7:aa:11:4a:e6:0a:58:a2:c2:15:34:c5:8b:b5:
fc:f5:d7:02:de:a0:33:67:73:58:21:83:28:1f:1f:75:d9:ee:
a4:01:3c:8b:cc:10:d9:a0:86:ea:38:c5:c7:b0:4b:81:68:32:
09:15:05:4a:82:17:d3:c0:82:7e:ea:f0:f6:13:e7:2f:f5:cc:
80:04:78:e2:56:35:b2:a4:f4:5d:8e:e5:a3:0e:d1:15:6a:d7:
b6:5d:97:08:e2:79:d3:1c:1f:b4:ee:2a:38:10:13:d7:de:36:
96:b0:09:fc:23:52:a8:da:cc:2c:c2:8b:a4:23:5f:71:36:bf:
78:75:12:8b:d0:ac:27:67:cb:b2:d1:6c:27:99:30:10:52:4c:
23:49:ec:4d:c3:98:f1:1f:25:a2:e3:ac:b2:6d:95:b1:b1:2c:
6c:0c:05:bb:8a:e4:4b:d7:93:0c:54:c9:63:55:59:38:df:cf:
77:43:c0:ca:b6:ae:54:6d:7d:b5:06:c1:48:c7:28:73:5f:fa:
b0:53:13:85:6a:9d:4d:0b:07:f5:bf:9d:19:21:60:4d:f1:dd:
0a:5f:03:16:7b:64:95:46:a0:ef:5f:6b:67:40:10:cb:17:d2:
af:b7:8f:55:06:ee:f3:c6:60:57:f0:08:fd:d4:54:30:5f:55:
44:0d:55:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:05 2024 by rpki-client on console-ams.rpki-client.org