Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/04VhM3Z_RMmASs7uM4QHYrZMHiI.roa
File: 04VhM3Z_RMmASs7uM4QHYrZMHiI.roa (raw, json)
Hash identifier: fkPxA1gcwjklYw2gawxvRKXmzBTLgK03SfC1AjaCqbo=
Subject key identifier: D3:85:61:33:76:7F:44:C9:80:4A:CE:EE:33:84:07:62:B6:4C:1E:22
Certificate issuer: /CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Certificate serial: 018CC2DAE1139A2A368E01866B50B64EFC26
Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/04VhM3Z_RMmASs7uM4QHYrZMHiI.roa
Signing time: Mon 01 Jan 2024 02:29:33 +0000
ROA not before: Mon 01 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48594
IP address blocks: 94.124.81.0/24 maxlen: 24
94.124.85.0/24 maxlen: 24
94.124.82.0/24 maxlen: 24
94.124.83.0/24 maxlen: 24
94.124.80.0/24 maxlen: 24
94.124.84.0/24 maxlen: 24
94.124.86.0/24 maxlen: 24
94.124.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e1:13:9a:2a:36:8e:01:86:6b:50:b6:4e:fc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Validity
Not Before: Jan 1 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3856133767f44c9804aceee33840762b64c1e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:d8:28:82:78:8a:a4:34:f7:34:0d:6b:ea:
e0:1d:aa:a9:7a:ef:5d:fa:55:cc:9e:f0:15:11:61:
4e:b1:c2:2a:d5:d8:63:e0:d5:10:03:35:45:f6:34:
bd:eb:08:0c:c3:fd:0b:2f:98:a4:a7:3f:7e:83:40:
dc:80:45:d6:06:b7:25:77:93:87:5a:be:d8:a8:43:
29:3c:97:a7:ca:54:7a:7a:55:08:12:89:46:c6:51:
78:a1:4a:bf:c7:74:16:08:79:eb:09:9b:1b:c7:db:
e4:2c:6e:eb:ce:5c:39:6d:69:a6:ef:da:6b:70:7e:
0d:b5:6c:f5:fb:8b:49:e8:2e:12:54:56:f5:88:00:
fe:4c:2d:a9:8c:05:52:4e:8b:0e:11:10:f5:dd:75:
30:22:b4:af:94:57:95:a5:01:63:27:72:86:51:ab:
89:89:56:ce:16:4d:e4:20:2d:8c:11:82:29:a4:8d:
4a:3b:ef:39:b1:2e:5a:54:77:e5:a7:a0:7b:41:0e:
47:52:55:ca:f2:43:cf:4a:89:a9:60:48:9e:6f:a7:
ba:12:1b:4f:48:a1:65:fc:3c:dd:da:d5:95:07:47:
66:b9:c3:34:e0:43:fa:35:f9:d4:29:07:00:02:5e:
29:3d:86:dd:75:d1:9b:3b:c8:49:64:67:d4:72:77:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:85:61:33:76:7F:44:C9:80:4A:CE:EE:33:84:07:62:B6:4C:1E:22
X509v3 Authority Key Identifier:
keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/04VhM3Z_RMmASs7uM4QHYrZMHiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.80.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:4e:60:8f:a1:e1:ae:f4:9a:8b:97:76:cf:9d:7b:97:ea:71:
2b:5e:8f:36:ca:4e:a9:36:14:f8:73:17:21:a7:5a:75:4a:83:
a5:5b:6a:45:5f:3f:ea:a3:5f:ae:a8:af:35:47:6b:cd:b6:23:
0d:d0:ab:b3:c0:2f:4b:aa:72:ea:89:d5:78:dc:5e:98:1d:26:
04:32:fe:08:38:38:ab:e9:33:89:6f:06:7f:e9:1a:7e:e0:5e:
16:ad:62:6d:3d:6a:2e:a8:82:38:5b:eb:bf:a7:eb:be:78:6d:
cd:3e:a6:8c:82:19:83:3b:09:2a:d9:69:4e:5a:4d:75:ed:ab:
56:46:83:df:64:00:b4:10:9b:c9:04:2d:39:70:3c:2f:4d:37:
e3:24:5c:d7:33:37:67:6a:23:0e:73:fd:ff:a3:c6:cd:14:f7:
bc:bb:38:b4:00:35:bd:73:e9:7e:94:92:e7:a1:a7:a0:72:42:
4e:3e:c6:69:b3:d4:8c:89:f5:a8:bb:04:bf:7c:53:b5:da:ec:
12:0f:8d:09:be:80:c8:85:89:a2:52:28:c3:ab:c2:d3:8c:dd:
c1:69:6d:b3:a3:9c:0e:f4:f0:b8:7b:c5:d2:c9:10:de:48:10:
f7:40:57:0b:97:d4:4d:f9:f4:73:f6:7e:54:7a:84:01:d5:b3:
bd:82:26:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:28:40 2024 by rpki-client on console-ams.rpki-client.org