Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/qM7iIVpyVjWS2Qk4_pBrJX1Fe24.roa
File: qM7iIVpyVjWS2Qk4_pBrJX1Fe24.roa (raw, json)
Hash identifier: CNO6TInqEfQOJYZYqQxodit05WTR7xby1aFqiPclPN8=
Subject key identifier: A8:CE:E2:21:5A:72:56:35:92:D9:09:38:FE:90:6B:25:7D:45:7B:6E
Certificate issuer: /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial: 019222F2780E82E35D988F4FCB2AC78C2F4F
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/qM7iIVpyVjWS2Qk4_pBrJX1Fe24.roa
Signing time: Tue 24 Sep 2024 07:32:48 +0000
ROA not before: Tue 24 Sep 2024 07:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61297
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:f2:78:0e:82:e3:5d:98:8f:4f:cb:2a:c7:8c:2f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Validity
Not Before: Sep 24 07:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8cee2215a72563592d90938fe906b257d457b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:4c:c6:6a:80:1c:f3:2c:53:43:d9:1f:55:
8e:4e:5a:f0:7e:f7:91:a9:9c:60:74:b0:d3:7d:44:
4f:b5:27:c0:e5:19:4c:a0:47:ec:2a:68:e2:71:d1:
87:cc:fe:6a:a2:93:23:1b:6c:9a:e1:10:ee:da:e1:
5e:fa:e8:76:95:4a:6f:d2:fa:e6:ab:de:cb:c4:fa:
2f:36:d4:3e:aa:7b:1f:55:1c:f2:09:e7:af:90:61:
e9:ae:48:c1:63:7d:3a:3a:50:fc:c1:9c:c4:73:5e:
7c:c0:48:68:e9:0f:f9:e6:d5:d0:fd:db:a9:98:aa:
1f:52:03:bb:fc:f2:b3:25:f8:63:a4:f1:25:5f:68:
91:7b:17:90:1a:70:8a:2e:81:21:f0:d5:05:11:a0:
cc:2f:9c:9d:ba:5f:24:2c:20:22:5c:f6:33:07:24:
b0:c9:c5:0d:76:af:29:f6:a3:f8:d6:56:93:ba:58:
a6:4d:b3:27:75:80:7b:23:01:88:84:14:b8:0a:65:
5f:9e:5d:67:5f:58:1c:4f:aa:2a:7f:74:c8:61:a8:
9d:28:65:52:b7:3a:ad:99:d8:fd:fc:fd:a2:5a:22:
44:8b:7e:75:bb:34:68:e2:e8:9e:61:a5:8b:3e:e1:
e6:ad:cf:2d:19:45:c9:ab:40:55:56:2d:b6:bc:16:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CE:E2:21:5A:72:56:35:92:D9:09:38:FE:90:6B:25:7D:45:7B:6E
X509v3 Authority Key Identifier:
keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/qM7iIVpyVjWS2Qk4_pBrJX1Fe24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:54:5e:1a:07:0d:42:e5:b4:00:78:2e:25:9d:b5:f7:12:94:
89:01:af:5f:5e:3a:e0:d1:fa:28:f7:0e:59:d5:44:df:0a:4f:
8f:02:92:70:1f:60:4d:a4:cd:55:ec:a8:4c:86:2f:c6:62:a3:
38:52:d8:d8:02:9e:df:e1:db:92:a0:e7:1e:92:25:3e:9f:f5:
54:62:14:ab:ee:87:f6:35:54:ad:bf:b5:59:09:32:5c:9f:e4:
cf:30:49:18:1b:ae:61:53:53:2b:4a:bb:8b:d1:23:15:44:99:
9f:45:83:9e:5f:3d:38:2e:c2:10:f8:45:4b:38:0d:e3:b6:00:
68:94:09:03:cf:30:89:a7:51:65:11:10:ec:8f:cf:c6:b7:ae:
3e:fa:b7:3d:5a:36:7d:07:c6:62:b8:a0:c2:b6:0f:4c:eb:05:
7f:d3:d6:cb:fa:62:2b:c4:f8:8c:e7:6c:c1:e8:17:ed:82:99:
ce:44:e2:5a:5b:ad:fb:45:be:de:db:02:3e:3c:8c:c0:ca:81:
a9:df:3e:74:50:8c:c0:a3:06:54:f6:b9:a4:a0:60:43:82:08:
cf:6f:c4:fb:8f:a8:bd:b5:14:02:22:b3:03:5d:0e:8d:94:c3:
b3:b7:a5:52:c3:79:20:89:1a:8a:de:2b:35:f7:ed:69:d1:ce:
a6:8f:90:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:31 2024 by rpki-client on console-fra.rpki-client.org