Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/AA1OWqrEHbyPh0vz0xf8O6jrelE.roa
File: AA1OWqrEHbyPh0vz0xf8O6jrelE.roa (raw, json)
Hash identifier: yQJAke4bRGpLiwxHMeZzFWcy05rOaT1uulY9y0Ice5Y=
Subject key identifier: 00:0D:4E:5A:AA:C4:1D:BC:8F:87:4B:F3:D3:17:FC:3B:A8:EB:7A:51
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0192847EC0BDB022C78E5E0C04F62F90CF90
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/AA1OWqrEHbyPh0vz0xf8O6jrelE.roa
Signing time: Sun 13 Oct 2024 06:09:12 +0000
ROA not before: Sun 13 Oct 2024 06:09:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215071
IP address blocks: 86.110.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:84:7e:c0:bd:b0:22:c7:8e:5e:0c:04:f6:2f:90:cf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Oct 13 06:09:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=000d4e5aaac41dbc8f874bf3d317fc3ba8eb7a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7c:a4:aa:37:2d:f4:62:08:55:55:9c:9a:bd:
32:fa:67:56:bb:00:20:45:5e:f3:77:63:d9:e9:0c:
18:35:d0:c4:ba:07:ff:e6:ca:58:2f:74:77:44:23:
d4:11:36:4c:2b:03:77:9d:c2:3a:11:75:c1:08:53:
fe:f3:f8:2a:bc:01:f4:06:11:5c:bb:0f:b2:fc:b2:
2c:78:5f:7a:6c:30:d3:b8:35:a4:5a:89:da:a4:48:
e2:be:0c:bb:60:3e:1d:a1:09:70:ae:84:fb:b9:5a:
53:0e:f9:81:aa:78:76:64:0f:7a:66:92:55:b9:94:
ba:58:62:3d:7c:e9:27:b2:2f:bb:cf:47:26:f2:d7:
3f:b1:b0:63:bb:aa:ac:ca:b0:f5:c5:9e:92:2d:b4:
31:16:48:52:9f:fe:d1:cf:b5:23:e9:46:9a:17:74:
8b:b1:f3:b0:38:63:8d:ab:bd:d7:ac:dc:3c:67:84:
1d:89:25:73:d8:60:89:b6:0c:10:5d:f1:8f:da:cd:
4f:63:64:05:23:df:4f:0c:96:55:1b:4d:15:31:1f:
ac:b3:bb:cc:c7:70:15:f9:e5:6c:dd:98:f1:37:1d:
b2:56:3f:dd:7e:c9:2a:62:ce:01:10:8e:a2:52:24:
79:40:a7:3b:82:56:50:03:5c:a7:fe:f3:97:04:dc:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0D:4E:5A:AA:C4:1D:BC:8F:87:4B:F3:D3:17:FC:3B:A8:EB:7A:51
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/AA1OWqrEHbyPh0vz0xf8O6jrelE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.60.0/24
Signature Algorithm: sha256WithRSAEncryption
21:37:0f:bf:cb:fc:b7:e6:65:09:d4:5d:a2:b1:8e:3b:8e:00:
ca:05:4c:c6:0b:ad:46:83:c4:15:6a:8b:e5:6c:3c:90:ce:b7:
80:92:0a:a6:4f:c2:6b:9e:9f:17:a8:c6:47:53:cf:2f:78:6c:
72:62:01:15:b4:f7:43:71:6f:91:81:d8:7a:f9:0d:b0:e1:e0:
5f:43:1e:b8:2e:76:79:21:03:42:01:ff:9f:d7:9a:bb:fa:b6:
71:55:4f:f0:cd:26:ca:c0:02:ea:31:70:8d:7e:19:03:20:c6:
2f:18:c0:54:2b:30:04:a0:e6:2a:66:d5:6d:26:9e:47:8f:fd:
3e:0e:31:8b:f5:c9:1a:d2:fd:c5:6d:50:b1:34:fe:e7:80:d2:
de:4e:87:c9:0d:13:d8:51:5a:15:ec:3e:4d:be:7e:7e:fe:da:
62:74:03:51:88:3c:4b:ed:a6:1c:c4:aa:a3:f0:8b:ad:1c:2f:
09:e8:6e:ff:40:b8:31:e8:52:98:2c:94:a4:89:d7:e2:41:43:
01:88:4a:ad:75:3a:e0:06:fe:09:56:84:46:56:92:ac:96:c4:
93:b8:15:9d:84:66:ce:65:68:44:ab:bc:2c:2d:b4:f7:ad:f1:
24:9f:56:43:23:5e:53:a2:34:d6:ca:10:9a:f7:3f:3a:7f:5e:
2b:65:37:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:21:09 2024 by rpki-client on console-ams.rpki-client.org