Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/no3h1rQeAW-Dp0AeWZRfvNbFswQ.roa
File: no3h1rQeAW-Dp0AeWZRfvNbFswQ.roa (raw, json)
Hash identifier: +PejY+PH2C3VDTgFW95l3yKhLRzkCJKNKuNvsPh9shI=
Subject key identifier: 9E:8D:E1:D6:B4:1E:01:6F:83:A7:40:1E:59:94:5F:BC:D6:C5:B3:04
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 0190640663E281E89DCE02A4F6E01BB0AB8E
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/no3h1rQeAW-Dp0AeWZRfvNbFswQ.roa
Signing time: Sat 29 Jun 2024 12:44:18 +0000
ROA not before: Sat 29 Jun 2024 12:44:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214737
IP address blocks: 92.242.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:06:63:e2:81:e8:9d:ce:02:a4:f6:e0:1b:b0:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jun 29 12:44:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e8de1d6b41e016f83a7401e59945fbcd6c5b304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:b3:c4:ff:90:e2:87:45:f6:24:f0:36:79:
a7:79:7c:60:bc:8b:0f:14:b6:7e:cf:91:be:dc:9b:
f8:93:51:87:46:b3:f6:25:54:d6:d3:a5:32:a6:81:
84:7e:3f:9d:20:a0:1c:2c:70:b4:6d:db:1f:a4:c7:
61:fd:8c:5b:8d:f6:ca:7e:b8:8e:f6:9d:99:d5:5c:
44:a6:b7:93:ee:ba:00:fa:87:ff:32:bf:6c:38:a2:
3c:ad:b5:ca:64:38:8b:f4:12:8d:06:a8:54:f6:96:
ca:6d:d1:0c:77:6a:62:9d:15:dc:f0:cf:5a:ed:b3:
4d:c9:fd:ef:3d:bb:04:98:63:e6:e8:cc:35:cf:c9:
97:9b:19:e4:dd:79:34:66:8d:a6:57:24:90:84:40:
41:45:a2:f7:ae:7d:81:b6:3b:59:a7:24:c6:67:e0:
69:2a:7f:42:15:f4:75:df:dc:e0:18:57:7b:8b:dc:
df:34:07:70:97:e2:82:c7:cb:c6:21:24:13:84:c4:
86:40:39:b2:3f:bb:4f:61:ae:bb:eb:ba:19:0d:29:
ec:53:6b:8b:ee:e9:ee:1a:d2:29:f8:27:1a:83:ae:
71:e4:f7:83:54:e1:fb:97:f5:e2:eb:2e:54:05:07:
bc:e5:ca:33:4b:c0:7f:13:1e:f3:95:26:b3:05:ce:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8D:E1:D6:B4:1E:01:6F:83:A7:40:1E:59:94:5F:BC:D6:C5:B3:04
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/no3h1rQeAW-Dp0AeWZRfvNbFswQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.218.0/24
Signature Algorithm: sha256WithRSAEncryption
63:aa:9b:f8:de:67:37:a4:06:29:7a:df:39:0e:cc:d8:e7:b0:
7b:a4:63:cb:71:ed:73:26:73:32:c4:e4:b9:0d:3c:1c:ee:5d:
43:7b:ea:67:a0:7f:33:88:ec:a3:03:e9:1e:e7:9e:8e:e0:d2:
96:83:ff:0b:71:6b:8f:15:a3:04:f8:25:63:00:ff:c4:5d:10:
78:e9:22:c5:d4:4e:6b:f2:47:ae:53:fa:65:00:a0:67:41:1c:
33:9b:0d:fa:a8:a0:f9:90:b9:33:fd:f5:ac:ee:b0:9a:c0:60:
e7:f7:eb:80:e5:1c:9b:64:1f:25:64:64:e5:a4:c9:5d:7f:be:
b9:32:0c:a0:81:c7:b8:58:a4:17:99:b3:d2:9e:6c:93:d8:61:
6b:a1:b9:f7:49:40:c2:aa:7c:2b:81:e4:45:af:82:05:a3:49:
02:d6:1e:d5:c1:94:61:db:56:88:13:d7:b8:62:14:8d:08:e3:
30:02:94:1d:91:6f:9e:f9:9a:0b:36:7a:b0:fd:cc:45:a0:78:
a2:6b:d9:c4:a8:0b:9d:51:f2:37:a2:ef:04:21:f5:08:7d:ac:
a2:14:fc:a9:5e:0b:02:49:82:b2:97:65:9d:c4:65:a3:3b:32:
cd:15:94:c3:4b:21:fc:ba:13:66:1b:0f:5b:d7:8a:b4:b1:9d:
6d:4b:c3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:25 2024 by rpki-client on console-ams.rpki-client.org