Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/bkM-HcpXmYJaNu4_NEha1rVnKyY.roa
File: bkM-HcpXmYJaNu4_NEha1rVnKyY.roa (raw, json)
Hash identifier: nVSJRpPQe0VYULjAV0UXdT4qqtcIdSksrv8RdjsUjr4=
Subject key identifier: 6E:43:3E:1D:CA:57:99:82:5A:36:EE:3F:34:48:5A:D6:B5:67:2B:26
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01930D0044DF68A8E03CFD95DB342BCAF46B
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/bkM-HcpXmYJaNu4_NEha1rVnKyY.roa
Signing time: Fri 08 Nov 2024 18:19:01 +0000
ROA not before: Fri 08 Nov 2024 18:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 79.99.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0d:00:44:df:68:a8:e0:3c:fd:95:db:34:2b:ca:f4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Nov 8 18:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e433e1dca5799825a36ee3f34485ad6b5672b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0d:f5:90:65:ca:50:60:31:8d:ab:19:f5:44:
a2:5b:07:0c:32:39:9e:d4:42:3b:72:02:69:6e:45:
cc:77:e4:b4:bb:29:73:d9:35:4b:af:ae:23:6f:cd:
9a:a9:83:07:2f:24:6c:8c:e3:c9:e9:64:70:90:7d:
6b:12:22:87:d1:63:d3:f1:63:55:03:06:b6:57:1a:
9e:ae:2b:f6:29:fe:8f:9a:71:19:11:32:5e:35:8c:
6b:d9:b7:89:e8:e8:6a:ca:c1:56:1c:74:9a:53:5c:
b0:9b:b0:20:85:67:5b:81:3a:a3:bd:ed:bb:91:fc:
89:51:d2:f9:8d:20:80:f8:bc:2f:eb:73:af:fc:d9:
12:4f:ad:5e:91:30:59:97:ec:e8:58:5c:e2:46:52:
a7:d4:5a:da:fa:ab:58:ae:df:ba:87:45:00:9f:c6:
3d:cb:e5:b7:83:66:91:91:46:75:03:3a:27:50:71:
2b:74:66:d6:0b:af:0e:b2:ea:62:ce:07:37:04:63:
87:50:72:fa:7f:81:be:6c:3e:eb:ac:7d:31:45:09:
ba:9b:47:88:20:fd:45:87:7b:b2:82:9c:f9:2c:7b:
08:69:61:f8:74:f1:dc:61:a9:84:69:84:aa:3e:1b:
5b:2c:c9:cc:80:93:0f:e3:1d:cd:8b:78:d5:05:fb:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:43:3E:1D:CA:57:99:82:5A:36:EE:3F:34:48:5A:D6:B5:67:2B:26
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/bkM-HcpXmYJaNu4_NEha1rVnKyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.150.0/23
Signature Algorithm: sha256WithRSAEncryption
40:b3:2e:e2:b1:0e:03:ee:6e:f3:c3:67:2b:f5:51:b3:6c:b7:
d1:c6:1f:d1:e3:2f:56:96:69:15:21:1f:4b:62:50:48:e2:7d:
d5:0d:b1:df:c6:66:86:63:8d:77:8a:c4:c0:49:86:01:73:c8:
59:9d:ae:6a:34:38:ee:9c:8c:6a:3d:f2:70:76:91:df:b3:28:
3a:cf:ae:3d:f4:e0:07:f0:78:c3:59:d5:39:f3:0a:9b:a6:82:
b2:a7:2a:19:23:87:82:eb:3a:09:25:a8:0e:86:9d:b6:2d:48:
2f:1e:73:6b:78:d8:99:30:51:6f:37:c4:7d:aa:9e:14:1e:f9:
76:68:0a:4d:64:ce:0d:c1:d4:a9:34:af:da:4f:d1:0b:ef:7c:
8c:1b:70:a8:ac:d5:ae:e8:a4:68:ca:0f:68:8d:b8:40:d3:93:
cd:19:57:91:f7:9f:26:6d:f3:fc:43:c1:97:89:89:4a:0c:50:
34:97:9a:d2:d7:47:33:c9:29:56:bf:b8:ae:3f:e5:ad:78:81:
5e:bc:73:ec:52:95:52:0a:f9:77:fd:ac:ae:ae:75:65:cf:de:
41:d8:c9:dd:bc:d0:f4:c7:c2:d5:ed:68:40:22:49:28:87:08:
df:c7:9f:42:c7:78:21:3e:aa:1e:a7:4d:f3:f9:b1:64:d7:c1:
1d:af:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:39:00 2024 by rpki-client on console-fra.rpki-client.org