Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/eaQWMgG4grGnqESxkFWXxSrdpKg.roa
File: eaQWMgG4grGnqESxkFWXxSrdpKg.roa (raw, json)
Hash identifier: 68zmu2EfIlsM7ApE2K87KrcDg3aFrOwWkrgTNST0oPQ=
Subject key identifier: 79:A4:16:32:01:B8:82:B1:A7:A8:44:B1:90:55:97:C5:2A:DD:A4:A8
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 0192D469329AE276A820047F2EA0F8E17239
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/eaQWMgG4grGnqESxkFWXxSrdpKg.roa
Signing time: Mon 28 Oct 2024 18:35:16 +0000
ROA not before: Mon 28 Oct 2024 18:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214504
IP address blocks: 185.121.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d4:69:32:9a:e2:76:a8:20:04:7f:2e:a0:f8:e1:72:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Oct 28 18:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79a4163201b882b1a7a844b1905597c52adda4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:a6:b7:24:92:9a:15:6f:0d:11:c7:e1:70:
87:b4:bf:76:d1:ed:86:ff:8e:66:d9:33:8c:96:0c:
e8:5a:67:88:28:f5:c8:d6:9c:0b:f6:69:d8:79:32:
30:b9:e8:21:46:7b:14:ce:3e:f0:19:03:5a:d8:c1:
e5:58:41:8b:49:96:f7:e6:0a:e6:d7:cc:1a:96:d1:
2e:89:82:9e:99:cd:74:30:7e:36:bd:77:44:ec:2e:
14:11:81:53:2d:f3:dc:1c:3b:28:e1:98:99:e1:1d:
3a:dd:11:b2:cf:3f:cb:80:9a:d1:db:70:68:c2:83:
88:ad:86:cd:91:19:22:9e:2c:eb:a2:e5:91:55:42:
48:6b:8f:10:7a:3a:5c:f6:9b:1e:61:9e:b1:17:7f:
81:b0:e3:d3:93:cc:93:d7:b4:11:fe:c1:c6:fd:39:
dc:b1:7e:5a:2f:31:cc:5c:34:9d:06:29:1e:8f:76:
e7:5a:a6:6a:d1:d1:1b:f9:19:14:e9:b1:ff:43:61:
f7:19:17:b5:b4:62:ba:3d:6c:ed:5a:24:fc:74:69:
3c:e9:75:de:34:02:9a:9d:cc:16:23:00:25:bc:61:
19:27:3d:12:cf:43:d9:86:65:6b:0f:3f:63:b4:4b:
ba:21:42:ad:07:f4:d2:c1:ba:fc:e9:af:a1:26:f4:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A4:16:32:01:B8:82:B1:A7:A8:44:B1:90:55:97:C5:2A:DD:A4:A8
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/eaQWMgG4grGnqESxkFWXxSrdpKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.225.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:9c:ff:00:60:e0:de:da:43:3c:0b:d5:f0:56:a9:c8:74:ef:
e2:29:d8:8f:1a:9e:af:63:48:91:9a:2a:3c:5e:8b:b6:ad:ae:
8b:07:85:26:4e:aa:83:e5:cf:d4:4c:4c:22:04:57:e0:e0:e3:
c3:d9:b8:29:01:dd:98:27:5c:4c:98:2d:14:96:ca:ce:59:fb:
af:ef:a3:67:28:6f:86:4a:a3:0a:d9:5f:67:57:f7:14:dc:48:
41:06:e0:0c:bc:c6:e7:7d:1b:28:93:08:1d:a3:89:d4:79:70:
1a:95:4f:2a:eb:2a:99:fc:4c:8b:e4:af:39:3d:95:88:b4:ed:
bd:36:a0:0c:17:83:e9:b9:98:83:b9:16:f4:42:a1:6b:2f:31:
83:d3:94:b0:1a:49:b3:df:8f:eb:05:e4:79:2f:08:29:33:fe:
0e:cb:9b:3f:68:e7:ee:35:77:c1:c6:78:ba:05:88:d5:19:e8:
23:77:5e:ad:cf:a8:f6:cb:ad:34:ee:1a:3b:76:4d:25:80:83:
04:be:05:ad:ab:17:95:ad:d7:5a:fa:59:19:55:4d:2b:70:d6:
56:9c:bd:75:55:f2:41:97:4a:53:55:9b:c8:3f:f2:4f:5a:01:
ac:85:dd:1f:a3:90:3d:a7:f4:82:6a:51:9a:05:34:35:3f:7d:
89:28:9d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:48:50 2024 by rpki-client on console-fra.rpki-client.org