Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/T4Png4mY77o627NHSevjfijmxds.roa
File: T4Png4mY77o627NHSevjfijmxds.roa (raw, json)
Hash identifier: Fg2YjzKui3a7mYsmG6AXkoh3WCmWMGaKxDcVW9YPnx0=
Subject key identifier: 4F:83:E7:83:89:98:EF:BA:3A:DB:B3:47:49:EB:E3:7E:28:E6:C5:DB
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94E06E5BBF533417637FE1B8341DD0C
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/T4Png4mY77o627NHSevjfijmxds.roa
Signing time: Tue 02 Jan 2024 08:33:03 +0000
ROA not before: Tue 02 Jan 2024 08:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204388
IP address blocks: 195.187.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:06:e5:bb:f5:33:41:76:37:fe:1b:83:41:dd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f83e7838998efba3adbb34749ebe37e28e6c5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:72:cf:29:89:79:94:2e:4c:39:63:e8:3d:
f8:c0:2e:bc:ab:e6:91:14:09:d1:a9:a0:d8:e5:84:
60:8c:58:d1:11:b4:9e:9a:d7:bb:04:43:14:d5:29:
d6:ce:77:93:47:6b:8d:a6:fa:2f:38:fb:36:a5:74:
87:b1:83:11:c9:d4:53:9b:06:e5:cc:85:73:bb:89:
af:27:bc:63:e8:6b:80:5d:8c:08:2b:9a:08:6d:bc:
84:ba:48:71:a6:ea:b2:6d:18:0a:96:25:53:0e:36:
5d:30:47:07:80:23:85:1f:02:70:da:65:9e:4f:b5:
fb:7a:7a:14:39:f6:69:89:28:44:d9:55:18:21:cf:
64:d0:5c:a0:65:d7:f5:2c:00:74:e9:2a:f3:9f:e7:
cb:ee:3a:b3:71:52:31:26:28:57:14:8c:29:92:19:
e7:27:65:02:45:11:04:55:fa:cd:eb:66:47:51:13:
02:7c:52:a9:4c:8f:b2:9d:d3:9e:af:52:4a:d5:04:
65:3b:6e:f4:c3:c3:ef:f6:dc:a4:f0:48:c0:3e:3b:
17:b4:5d:61:3f:82:25:5f:b1:83:7b:e1:f4:8b:83:
8d:7a:bc:20:e2:a7:fb:aa:86:c1:4c:60:40:1f:af:
bb:1e:36:0d:55:34:a4:3b:94:0e:ff:77:97:40:50:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:83:E7:83:89:98:EF:BA:3A:DB:B3:47:49:EB:E3:7E:28:E6:C5:DB
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/T4Png4mY77o627NHSevjfijmxds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.42.0/24
Signature Algorithm: sha256WithRSAEncryption
17:05:3b:03:9c:ef:69:c3:00:72:15:01:2b:a0:18:fd:12:a4:
d2:ac:7f:cb:1e:91:42:00:1a:80:5a:cb:65:83:f4:d5:2a:92:
83:54:2b:82:18:9b:33:25:87:3e:5d:aa:8a:45:61:02:83:78:
94:ed:3e:26:dc:bb:3f:07:31:ff:c0:55:15:ca:58:47:05:2d:
b9:bd:5e:ad:2a:b5:39:60:13:e9:ce:f5:6c:66:86:7c:03:d6:
bc:8c:43:a6:d9:eb:ab:15:fa:34:60:7b:ce:fb:4c:c8:41:2e:
16:0c:1e:28:d0:48:b3:50:31:9e:64:9e:04:e8:6c:d1:f3:e0:
ba:51:c8:81:e3:67:0b:9f:1d:32:ab:9f:ba:76:16:18:59:da:
ce:a5:3f:25:9c:2d:e9:ff:36:16:70:0a:a0:92:fd:ec:ce:3a:
a3:21:a5:0e:e8:80:70:de:5e:05:5a:93:ee:38:aa:3f:39:ad:
75:43:1f:3a:c9:b1:4d:ca:bd:0d:e7:b0:f4:50:42:bf:38:cf:
7a:28:eb:90:bf:7e:82:36:80:70:e8:03:a7:4e:a9:b7:28:c4:
10:9d:9f:2b:4b:54:62:fb:10:66:96:6a:03:27:ed:f4:c0:fe:
75:9a:13:ae:34:2c:33:f8:59:c6:62:7b:4a:89:55:8a:6a:b8:
f9:3f:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:27:38 2024 by rpki-client on console-ams.rpki-client.org