Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/rs0XK4W8chNFFhAZyH7ttXL6HGo.roa
File: rs0XK4W8chNFFhAZyH7ttXL6HGo.roa (raw, json)
Hash identifier: GuA9JLxNR0HlW66ZpNmWc3BHqdYmLv5I/Xw+lhqC20s=
Subject key identifier: AE:CD:17:2B:85:BC:72:13:45:16:10:19:C8:7E:ED:B5:72:FA:1C:6A
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 0192BEABB5280EC60C5A8C6BE98C8B0B80D7
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/rs0XK4W8chNFFhAZyH7ttXL6HGo.roa
Signing time: Thu 24 Oct 2024 13:16:17 +0000
ROA not before: Thu 24 Oct 2024 13:16:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57270
IP address blocks: 185.242.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:ab:b5:28:0e:c6:0c:5a:8c:6b:e9:8c:8b:0b:80:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Oct 24 13:16:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aecd172b85bc721345161019c87eedb572fa1c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:86:0d:2f:cb:09:5f:4a:11:f4:c2:ab:0c:
75:6b:f0:16:fc:16:44:25:6b:f9:61:ef:78:9d:3f:
c3:c4:6f:3b:b6:f8:d4:58:ad:8a:5d:79:71:fe:ce:
72:bd:ce:20:26:ea:67:4e:cd:96:59:ba:7d:2f:02:
32:54:7b:6b:0e:2d:91:b7:12:d3:98:79:f9:35:9c:
9d:a0:d1:19:f9:da:53:6a:11:25:fd:be:24:dd:f0:
c8:1a:51:e5:05:26:6e:76:95:2a:ad:51:a9:93:51:
d8:06:22:7e:7a:5e:c5:50:5b:a1:23:7f:21:6e:e8:
d0:69:58:9d:25:fc:52:aa:ed:9d:8d:a8:29:94:98:
aa:60:e9:c2:25:48:ad:7d:97:ae:f7:e3:a7:a2:06:
de:16:75:15:3a:f9:22:c0:5d:e6:59:f9:8d:1a:2f:
a3:2f:db:23:38:e0:ed:08:a3:19:b0:74:ef:8d:35:
df:46:d1:48:59:93:50:52:65:87:b3:c8:df:ee:85:
1d:9b:39:7d:ed:e0:52:b8:b1:5c:6b:cb:9c:2b:a2:
52:1b:7a:f4:1d:e7:81:36:b5:64:74:47:86:a4:aa:
69:7b:5e:ec:78:17:4b:fa:9b:a8:89:1b:d2:f9:0b:
9f:20:55:ed:96:0a:0b:05:e3:59:46:48:f2:51:31:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CD:17:2B:85:BC:72:13:45:16:10:19:C8:7E:ED:B5:72:FA:1C:6A
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/rs0XK4W8chNFFhAZyH7ttXL6HGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.21.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:46:cd:5a:72:ab:17:a2:d9:5a:3c:2a:a4:6d:69:0d:f8:67:
f6:1c:bf:71:94:53:00:8f:f7:ef:7e:00:4d:00:2b:88:6b:1f:
e2:48:ae:d6:78:88:ea:3f:d3:b9:5f:45:d6:01:6a:eb:c8:4c:
1b:35:57:b9:e8:95:5f:2b:87:c0:e4:1a:47:1b:fd:48:28:ad:
88:b8:da:b3:6e:26:71:8c:93:55:61:b3:c4:d3:45:3a:d0:ab:
1e:b7:de:11:1a:eb:99:09:93:62:8e:12:7f:0e:38:46:12:35:
54:02:b0:6a:98:01:1c:21:67:3a:37:81:41:f6:02:f6:ef:be:
8c:72:c8:99:66:8b:92:07:fc:32:6d:07:3b:fa:90:e6:82:4c:
2b:e0:1c:d8:e1:15:9d:ed:a5:fe:23:47:70:b5:5f:fc:e7:ba:
a7:fb:79:0a:6d:38:ad:60:cf:aa:20:d8:4d:aa:ad:b4:c5:a5:
f0:6d:12:62:03:30:c1:5d:5e:5f:9e:8c:2f:3b:f4:24:f6:a5:
a2:40:ad:28:71:82:15:b0:24:0d:00:f8:79:67:d1:ec:52:9a:
2e:aa:fc:81:34:3d:44:d6:ab:42:6e:eb:77:17:23:56:ff:fe:
c1:97:00:e7:10:0b:db:7e:0f:69:51:f3:19:25:eb:4c:11:76:
38:c9:33:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:26 2024 by rpki-client on console-ams.rpki-client.org