Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/l_qDu0H7ec1iHceGEqh0R9_ra8I.roa
File: l_qDu0H7ec1iHceGEqh0R9_ra8I.roa (raw, json)
Hash identifier: lT7iv4+gYk+fekyOogKonbJxuxBPMaV7Y1HCwA6W9NY=
Subject key identifier: 97:FA:83:BB:41:FB:79:CD:62:1D:C7:86:12:A8:74:47:DF:EB:6B:C2
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 018CC50144C8CE08F9B416DC2A89F209E2C1
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/l_qDu0H7ec1iHceGEqh0R9_ra8I.roa
Signing time: Mon 01 Jan 2024 12:30:43 +0000
ROA not before: Mon 01 Jan 2024 12:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59929
IP address blocks: 195.12.61.0/24 maxlen: 24
195.12.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:44:c8:ce:08:f9:b4:16:dc:2a:89:f2:09:e2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97fa83bb41fb79cd621dc78612a87447dfeb6bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ae:ea:77:38:56:06:ec:a0:b2:c3:d4:cc:68:
f9:fa:ac:0d:f6:37:58:ba:73:f9:79:b9:f8:5a:06:
e8:11:f2:bc:54:e6:c6:8a:e7:6a:3c:bc:d4:f8:f8:
ca:7f:cb:27:25:23:0f:83:2e:ef:1c:38:95:0e:2b:
57:48:0d:b3:fa:4a:d9:45:7b:fc:68:b8:f5:23:61:
7b:db:ef:8c:06:5b:4d:9f:12:84:6a:64:b4:87:0a:
2e:0b:04:2b:fb:3a:db:5e:3e:0e:16:f3:bf:bc:24:
15:74:fe:a8:de:26:c6:29:23:bd:3d:79:00:c4:84:
24:1b:94:f3:cc:76:16:dc:3b:33:30:75:6f:9d:29:
0f:cf:d0:a0:f1:f9:69:92:80:f7:c3:18:31:96:9e:
d2:45:75:2b:98:64:88:6d:a4:9b:3d:a4:e4:3d:e6:
7c:90:a6:bb:3f:c4:4f:51:fa:a2:17:ca:0d:07:4d:
3b:12:e8:3d:57:5d:44:18:f4:41:7d:eb:32:1b:99:
3c:49:05:41:8d:a1:c4:58:d5:aa:e3:f7:65:75:52:
68:b4:2a:e3:34:49:2d:af:e7:cb:4d:d1:df:cf:81:
be:72:30:fa:d2:33:47:6d:28:d4:22:3b:82:4f:b5:
b9:c3:58:17:f5:8b:46:44:63:da:e8:fc:f7:94:de:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FA:83:BB:41:FB:79:CD:62:1D:C7:86:12:A8:74:47:DF:EB:6B:C2
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/l_qDu0H7ec1iHceGEqh0R9_ra8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.12.60.0/23
Signature Algorithm: sha256WithRSAEncryption
53:5d:ca:fd:b5:25:18:1b:8c:7d:ae:a1:94:14:5e:8f:9f:0e:
ac:1f:4f:cf:6e:16:73:f5:85:b9:8e:cf:6b:18:5e:37:b9:6a:
6c:4d:da:14:cd:3a:c9:dc:3b:78:f9:61:66:19:89:e6:b0:8b:
69:08:92:a2:75:21:78:5b:a8:d1:43:ae:e0:d9:20:5a:7e:69:
f5:90:ea:7d:66:25:ce:43:a7:4d:92:84:a6:ff:ad:0a:dc:07:
00:10:36:70:28:a6:43:07:6b:a4:a1:82:25:02:20:4b:d7:a4:
4f:c5:5c:fb:f9:1d:27:fd:5b:c6:da:61:a4:4f:ca:a3:1c:2c:
bc:9b:87:d4:ae:92:6b:98:24:f6:c8:24:c1:fd:db:19:22:39:
e1:2d:14:2d:da:10:9a:d1:b9:34:17:70:41:f5:13:b0:ac:b4:
e2:06:a7:24:e2:7d:a9:0b:48:ba:93:11:0a:e6:ec:d3:37:3b:
ab:1a:eb:43:9f:11:0e:13:5b:3d:a9:dc:1a:01:27:1f:58:80:
f7:d2:67:fc:6a:0a:41:e0:13:cd:ec:3c:02:55:f1:56:78:70:
46:73:9c:f8:ba:a2:72:44:6e:db:38:9f:44:42:d2:9f:4c:7a:
40:44:d7:6a:54:b4:ba:c2:a4:06:30:c9:27:1f:e7:1b:3f:02:
75:e5:64:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:20 2024 by rpki-client on console-fra.rpki-client.org