Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/Xj7m3t61iQce-lyanFEFL9KSmSw.roa
File: Xj7m3t61iQce-lyanFEFL9KSmSw.roa (raw, json)
Hash identifier: dOQoGXwpJd6Tl1UNAeTDnn3BEA32FbK+enKNjWc4Jjg=
Subject key identifier: 5E:3E:E6:DE:DE:B5:89:07:1E:FA:5C:9A:9C:51:05:2F:D2:92:99:2C
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0190D2E989B25D56E0C3211799461AFA700C
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/Xj7m3t61iQce-lyanFEFL9KSmSw.roa
Signing time: Sun 21 Jul 2024 01:30:38 +0000
ROA not before: Sun 21 Jul 2024 01:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 94.124.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d2:e9:89:b2:5d:56:e0:c3:21:17:99:46:1a:fa:70:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jul 21 01:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e3ee6dedeb589071efa5c9a9c51052fd292992c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:23:47:94:7e:61:6e:57:ed:47:48:fa:fa:
ba:d2:f2:f3:94:c7:9e:de:8f:74:49:a0:71:b7:40:
52:85:6c:42:f4:c6:0f:cb:fe:88:5c:93:38:f1:5a:
1c:41:ed:6d:ff:02:1e:32:53:43:e6:c1:af:94:e0:
74:de:59:c8:db:8b:3d:6d:0d:fd:72:2e:27:43:8e:
5e:b7:3a:76:4e:03:c6:75:a0:a7:fa:96:d8:ca:a0:
48:ee:5a:b7:4a:d8:b7:d5:48:91:78:e7:7c:aa:92:
48:2b:11:77:af:15:2b:03:03:b8:61:18:7f:3e:55:
74:6d:b6:49:ab:3e:76:ef:ba:8d:76:af:90:56:60:
bd:d8:42:4c:df:e9:ea:ba:20:e1:41:d1:ef:85:69:
03:0b:97:fc:ee:6f:1a:93:70:75:3b:8e:08:1d:29:
0d:e0:20:d7:bd:0b:39:87:bd:d4:ed:05:2b:ab:68:
75:68:97:a5:25:15:b7:c3:41:07:9e:7f:2d:b8:8d:
e2:c2:48:c3:2f:56:f5:79:2b:a2:82:10:ff:fd:6b:
bd:65:d9:ab:ca:13:35:0a:62:05:b0:27:11:90:d3:
bb:12:4b:5b:b3:16:79:56:01:a5:70:72:cb:6c:20:
b0:d4:3c:77:b4:8e:4d:94:64:59:d2:ad:33:7c:73:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3E:E6:DE:DE:B5:89:07:1E:FA:5C:9A:9C:51:05:2F:D2:92:99:2C
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/Xj7m3t61iQce-lyanFEFL9KSmSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.160.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0d:48:f3:24:0b:f3:4f:37:18:17:e2:8f:0b:0a:01:32:e7:
73:f4:0e:cb:67:de:96:98:e2:05:89:4d:d5:bb:c6:30:96:1e:
37:01:d5:a7:83:ee:3c:ae:22:6f:2c:7a:cc:d5:40:08:2a:24:
d4:61:a2:6a:cd:9e:f1:d6:1a:93:b4:30:c9:2b:7c:7c:5b:27:
07:22:b7:bf:98:ae:c0:ef:68:7a:75:d0:6b:f5:d1:96:2e:4e:
34:73:0d:54:0c:6a:32:e3:e3:a3:60:a0:ed:a1:83:61:ca:5d:
71:8e:bd:b8:f9:bc:6f:68:93:62:1a:3a:84:ca:8a:47:ea:4d:
9c:1f:ed:41:f4:c6:13:3b:8c:c7:48:69:35:ed:25:04:05:63:
b3:ae:f6:19:24:f5:8d:8a:bf:be:8f:ca:15:2b:20:7c:be:8c:
f2:e1:c4:20:5f:3c:f3:81:51:eb:ee:e2:71:10:5a:c2:4b:bf:
b0:e5:84:c6:62:72:a6:bc:67:1c:8f:4d:11:af:fd:2c:5e:82:
d5:cc:f1:91:d0:70:1b:0b:fb:fb:7c:06:0d:ed:1e:59:19:31:
58:08:93:98:4c:01:d5:d8:1a:3e:91:68:a6:5b:81:f1:18:01:
98:ac:0f:3c:a1:0d:94:cd:82:7a:03:79:1e:1f:12:e9:c2:99:
61:ba:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:47 2024 by rpki-client on console-ams.rpki-client.org