Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/xT4qcPuaW6B5KNdQYd3P0fRcyLc.roa
File: xT4qcPuaW6B5KNdQYd3P0fRcyLc.roa (raw, json)
Hash identifier: u3M88tNUz/XBnIItK/vDOiLCFXCpzRfuGN79Rcw3TaY=
Subject key identifier: C5:3E:2A:70:FB:9A:5B:A0:79:28:D7:50:61:DD:CF:D1:F4:5C:C8:B7
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 01932B17A5404B36CC24F5E219040BCF2E7C
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/xT4qcPuaW6B5KNdQYd3P0fRcyLc.roa
Signing time: Thu 14 Nov 2024 14:33:10 +0000
ROA not before: Thu 14 Nov 2024 14:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59772
IP address blocks: 91.239.209.0/24 maxlen: 24
159.255.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2b:17:a5:40:4b:36:cc:24:f5:e2:19:04:0b:cf:2e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Nov 14 14:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c53e2a70fb9a5ba07928d75061ddcfd1f45cc8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:37:b2:cf:43:a8:70:39:3f:f1:c4:dc:d0:
19:5e:02:41:74:d8:b8:b3:de:20:ca:e7:57:40:ce:
87:78:ac:bf:ca:f0:1e:d5:aa:0d:76:c3:04:9f:3b:
f7:83:25:7b:09:42:21:f9:69:60:11:45:1a:e4:dd:
6d:28:86:f4:5a:e1:f3:f7:1b:11:75:2a:1c:03:74:
60:d5:72:13:32:c7:ff:cf:d7:6d:b8:c5:1a:f3:82:
1c:5b:96:ed:95:79:21:96:97:d2:7d:6c:2c:7c:47:
41:27:81:0d:11:50:b1:d9:46:b5:65:d2:bc:21:9c:
bf:85:b3:10:e6:17:d5:4c:1b:88:8f:48:43:cc:78:
df:b0:a1:e9:a3:e8:89:9c:58:20:a0:0b:f7:bd:6c:
b6:1d:6a:a5:b8:c0:94:fa:6a:06:ff:ed:8e:e6:24:
4f:aa:2e:50:e1:48:ff:1a:33:86:ae:b9:4e:30:ae:
82:9b:6f:1b:ae:5b:34:fe:68:61:8a:8b:a5:c7:65:
8b:ca:7f:62:53:b2:4e:c4:19:7c:ed:e3:f6:39:99:
6e:4f:71:74:23:14:53:35:42:c5:69:d0:72:8f:a1:
46:ef:01:07:7d:3d:ef:eb:22:83:63:e6:27:41:a1:
a9:ff:3c:5a:7f:89:72:b1:e5:42:ae:c6:0c:1a:78:
6c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3E:2A:70:FB:9A:5B:A0:79:28:D7:50:61:DD:CF:D1:F4:5C:C8:B7
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/xT4qcPuaW6B5KNdQYd3P0fRcyLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.209.0/24
159.255.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:28:61:47:40:b4:36:7d:56:d6:29:5c:0f:9f:f9:39:79:68:
ce:c7:75:2d:0c:f5:f8:90:1f:b4:06:37:bb:d3:04:46:46:63:
e1:38:c1:3c:ec:10:a6:42:15:92:10:2b:c6:ae:a8:d5:67:3d:
70:fe:c9:e1:c8:f1:28:06:0f:19:87:ff:b8:b3:ed:cd:2a:fd:
93:9d:ab:42:8b:a5:77:12:8a:f5:04:07:c5:ab:27:7f:99:47:
e2:0a:1d:7d:94:59:45:82:b3:07:a0:85:d4:c6:4e:d0:8e:67:
3e:92:35:56:e2:9c:e5:b7:d1:aa:2f:67:a3:c1:27:d6:70:3d:
12:42:b8:82:87:d7:4e:2d:b6:77:c9:be:a9:81:a2:31:2b:77:
4e:ef:39:59:71:1b:a1:3f:58:c9:c1:10:11:b8:9a:f8:81:4d:
40:98:f5:1e:08:d6:60:83:bf:fa:b7:e3:2c:d1:c1:2b:1a:b2:
0f:af:38:53:3b:87:8b:48:c7:32:78:b9:1d:cd:6e:81:b6:ad:
91:f1:21:2c:1a:db:e4:09:27:93:67:a3:12:8f:d2:fb:05:c2:
8a:34:66:f9:21:8e:73:7e:e1:26:20:e5:46:da:85:1d:f5:4f:
5f:9c:7b:19:47:0e:db:64:cd:36:75:0b:8c:9f:b3:72:1a:b7:
d8:d8:3c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:50:54 2024 by rpki-client on console-ams.rpki-client.org