Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8cK5MVlYGSp9t-rNwmAscx_10QA.roa
File: 8cK5MVlYGSp9t-rNwmAscx_10QA.roa (raw, json)
Hash identifier: qhVP+vcRvfjdsXMj3QYbzHHO32YQVni8/IfGChllCXg=
Subject key identifier: F1:C2:B9:31:59:58:19:2A:7D:B7:EA:CD:C2:60:2C:73:1F:F5:D1:00
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01931AA242170449DE5FD8103FC038386121
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8cK5MVlYGSp9t-rNwmAscx_10QA.roa
Signing time: Mon 11 Nov 2024 09:51:01 +0000
ROA not before: Mon 11 Nov 2024 09:51:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:a2:42:17:04:49:de:5f:d8:10:3f:c0:38:38:61:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Nov 11 09:51:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1c2b9315958192a7db7eacdc2602c731ff5d100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:c7:26:f6:b5:30:8b:b0:da:24:71:3a:fa:
c0:64:1c:5e:4a:b8:1c:97:46:6e:00:f2:89:e0:21:
df:40:81:c7:2c:ef:a3:d0:af:a3:83:a5:64:1d:19:
2e:31:3a:10:fa:d6:55:e3:bf:02:be:4f:0d:6e:5c:
7c:5f:85:5a:63:d0:8c:b3:04:23:0c:f6:c7:e2:32:
8b:d4:e6:85:c4:0e:05:13:75:4e:ae:5d:0b:99:1b:
6a:22:49:2c:c4:50:51:21:8d:d9:b2:8c:bc:c9:60:
8f:85:97:b5:c4:fd:53:d1:75:19:a4:b1:9c:d4:58:
49:2d:fd:5f:b1:fa:d9:6a:d8:0c:d5:18:fd:ca:e0:
9c:da:13:f4:ae:92:e2:14:8d:c1:4f:9c:b7:b7:f3:
f7:e3:ad:57:b8:d5:8b:8b:1a:da:af:11:3c:ef:22:
e8:27:87:53:91:bf:72:e2:b8:79:06:e8:31:37:fc:
71:94:68:70:f2:5e:2f:76:d4:65:33:b3:bf:b1:88:
c5:e6:14:47:7e:c7:f6:74:04:de:1b:5d:4f:8f:dd:
a8:9d:36:98:85:1a:74:2f:ea:92:4b:29:56:92:88:
38:08:9a:84:4a:50:f9:dd:1e:60:76:79:d1:b1:92:
f0:e8:af:1c:ca:e6:ef:ee:ca:a0:05:d2:38:3d:54:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C2:B9:31:59:58:19:2A:7D:B7:EA:CD:C2:60:2C:73:1F:F5:D1:00
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8cK5MVlYGSp9t-rNwmAscx_10QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c8:6c:94:68:a4:0f:2c:bc:79:96:e6:ae:86:3a:e8:ed:e6:
e6:ee:52:7d:83:9e:cf:62:ae:33:71:75:0d:fb:66:f8:0f:6d:
9d:ea:59:fa:51:c6:f1:9f:e7:44:6c:5e:c8:d5:87:8c:28:84:
43:74:a9:0a:94:f1:6d:4b:c1:6b:35:89:5f:07:4c:b6:7c:29:
25:12:5e:ef:c3:60:da:b0:d7:d6:7c:5a:76:c7:38:b6:d4:e3:
ff:f0:27:5d:cc:5a:ce:06:14:67:05:55:88:24:08:3d:bb:b1:
00:92:8c:c6:7a:21:56:50:a1:9b:a2:28:12:f1:ad:77:8e:fd:
08:07:1f:b9:92:ea:e9:ed:22:15:9a:a3:70:02:8e:6c:7e:e7:
29:5e:de:09:1f:87:dd:dd:59:b5:2d:32:eb:1c:d3:b1:39:80:
26:9c:7a:54:d5:55:d0:3b:2a:83:56:e4:18:90:99:1e:d0:a2:
53:cc:26:57:01:aa:a0:7c:59:f7:8c:75:8b:7b:82:4a:fa:8a:
56:15:07:22:b9:79:b6:c4:43:91:22:8b:18:16:ba:81:b9:a2:
61:4f:f9:6e:13:47:2f:86:96:8d:cf:52:5d:bb:6f:6c:30:93:
c3:0f:26:b9:bb:81:fa:20:1e:93:03:a2:50:c0:85:49:01:3c:
c0:69:96:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:28:18 2024 by rpki-client on console-fra.rpki-client.org