Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/1ngMZoyqPATcYMBTcABa7N3O-FE.roa
File: 1ngMZoyqPATcYMBTcABa7N3O-FE.roa (raw, json)
Hash identifier: x+TSr0PF2rE5m3mhjAJApUDor8V935/nBArwCEApblI=
Subject key identifier: D6:78:0C:66:8C:AA:3C:04:DC:60:C0:53:70:00:5A:EC:DD:CE:F8:51
Certificate issuer: /CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Certificate serial: 019294E7CBB849225225F079FDF860A6B3CB
Authority key identifier: 87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/1ngMZoyqPATcYMBTcABa7N3O-FE.roa
Signing time: Wed 16 Oct 2024 10:37:51 +0000
ROA not before: Wed 16 Oct 2024 10:37:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 84.238.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:e7:cb:b8:49:22:52:25:f0:79:fd:f8:60:a6:b3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Validity
Not Before: Oct 16 10:37:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6780c668caa3c04dc60c05370005aecddcef851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:84:e5:4f:f7:00:cc:0a:6c:62:fe:8b:6f:
f9:4c:6c:ba:45:49:a3:cc:e8:68:b6:dd:a6:c9:af:
af:07:b2:33:1e:7a:1d:38:35:32:72:cb:ec:5a:be:
1e:cd:d1:e3:a2:1d:02:08:e9:11:a3:c6:e4:43:80:
1b:d4:b9:63:63:4f:f8:94:f8:c2:01:3b:7b:65:9d:
98:69:40:53:0f:9d:31:5f:62:1c:f8:6c:2b:9c:c6:
5c:3f:ce:57:d5:06:32:93:8a:2b:c0:ed:49:40:08:
21:2c:c5:1e:d3:28:6d:d1:3b:25:7e:23:e0:8f:65:
b6:79:a5:1a:ea:74:2f:47:6f:d9:36:c1:82:f5:ad:
a1:e7:7c:0c:1f:f5:16:e5:66:00:db:a0:94:8f:60:
4c:76:82:a3:69:5b:57:bf:4e:88:b6:6b:70:38:71:
4f:8b:75:12:9d:b7:93:6c:7b:f4:47:fc:87:04:ee:
1c:96:10:01:f4:c8:59:4a:61:16:70:31:da:e8:99:
35:46:e6:84:9a:de:df:08:37:10:2c:18:07:f0:85:
ec:61:00:1b:7b:f7:9c:d4:d0:0c:5c:c8:35:3b:1c:
7c:88:04:9f:a4:74:f5:00:e5:33:1c:94:26:ac:33:
72:87:21:fb:f3:15:ad:43:4b:32:b9:e8:26:9f:69:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:78:0C:66:8C:AA:3C:04:DC:60:C0:53:70:00:5A:EC:DD:CE:F8:51
X509v3 Authority Key Identifier:
keyid:87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/1ngMZoyqPATcYMBTcABa7N3O-FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.238.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:e4:d8:f2:f1:4e:65:3c:88:36:f2:68:9b:45:94:57:4e:61:
e9:65:75:03:ce:10:76:f4:18:b1:f8:8f:dd:a7:1e:6a:96:c6:
b3:21:79:30:bc:4d:31:a8:90:4c:41:67:b5:78:4a:02:34:7c:
e7:a8:50:3b:41:f8:2f:bd:2f:72:cb:b5:bd:31:a6:56:04:0a:
80:3d:78:69:28:f5:a8:6b:b1:d5:98:7d:50:2e:c9:36:14:81:
50:2e:db:47:ae:f9:ae:42:88:d4:50:6b:d7:f2:8a:47:45:d7:
f9:3c:32:73:bb:f6:28:59:8c:ea:8e:f1:f6:f2:7f:0a:28:5c:
d1:45:2c:16:a9:3b:73:c9:d5:a8:0c:c1:b6:a2:8c:6c:da:be:
df:98:dc:0a:7a:aa:81:fd:6e:c7:34:ee:d2:bb:1a:ec:5c:09:
09:83:05:85:19:e7:f4:dc:a7:f2:5f:93:3e:52:cc:d6:a2:45:
de:c0:8f:9d:2b:db:59:88:c4:f8:e5:a4:1c:46:76:3a:85:fd:
ea:cc:a8:6a:80:97:97:63:0f:a7:11:d0:96:82:72:34:fc:fa:
2a:d3:16:1b:38:5f:5b:01:da:48:d6:69:71:bb:12:ac:98:d2:
a5:9c:11:5c:5e:e9:77:0b:93:6b:2d:06:d7:67:a4:67:15:90:
87:ba:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:29 2024 by rpki-client on console-ams.rpki-client.org