Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/etY1TNhjeaMT14jiuSu0lvHA7MY.roa
File: etY1TNhjeaMT14jiuSu0lvHA7MY.roa (raw, json)
Hash identifier: jJaM3F0efa2T+6JToCCRhyIqYlQHYRORXyw5BifsZfs=
Subject key identifier: 7A:D6:35:4C:D8:63:79:A3:13:D7:88:E2:B9:2B:B4:96:F1:C0:EC:C6
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01914A42D62E47786EEA377625FCB4C3C358
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/etY1TNhjeaMT14jiuSu0lvHA7MY.roa
Signing time: Tue 13 Aug 2024 05:42:59 +0000
ROA not before: Tue 13 Aug 2024 05:42:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 176.125.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:42:d6:2e:47:78:6e:ea:37:76:25:fc:b4:c3:c3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 13 05:42:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ad6354cd86379a313d788e2b92bb496f1c0ecc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:66:a6:02:82:1f:a5:f5:78:b7:85:b9:b1:
37:6b:f1:2c:34:cd:61:7e:20:ff:1d:27:4b:13:7b:
bb:a1:ac:17:5e:ab:df:86:91:21:c0:c8:64:89:30:
40:27:31:09:9f:b7:e1:39:ef:15:53:71:fc:fc:0d:
81:83:c2:b3:e1:9c:87:14:8f:95:5a:ea:8f:b5:d3:
eb:5d:85:69:b8:f4:c9:5f:a9:f6:d7:3c:78:32:2e:
23:e8:28:53:8d:d5:01:d6:c6:e6:56:ec:18:0e:a0:
ee:89:4e:c7:8d:e5:e4:95:a6:cf:39:7e:70:de:ba:
0c:4a:1a:a1:57:13:f5:0b:e5:26:72:cb:71:1d:72:
bf:3c:1d:30:4f:5a:f7:cb:04:c9:92:5a:93:6a:9e:
66:85:ff:fe:f4:41:af:b9:57:26:2e:55:f3:f2:3c:
be:24:89:b7:4b:d5:55:52:9b:20:8b:35:c6:c3:3f:
b6:0a:51:54:dc:c1:90:ed:c1:c1:6c:30:af:fc:a7:
e3:74:da:9f:13:ec:bf:36:a7:ed:9c:00:12:f6:5c:
29:57:b7:25:2b:fc:48:72:c6:e3:4e:0a:c6:ea:26:
8e:f4:bc:1f:d5:0c:d8:7f:f3:49:d2:9d:18:16:62:
9d:c5:cd:94:aa:13:79:81:1b:27:51:7c:b3:b5:66:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D6:35:4C:D8:63:79:A3:13:D7:88:E2:B9:2B:B4:96:F1:C0:EC:C6
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/etY1TNhjeaMT14jiuSu0lvHA7MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.251.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:dc:e0:dc:08:4f:1c:e5:24:d2:a5:b7:f5:d9:82:ec:9f:9b:
3f:ca:6b:f0:7e:ef:57:56:f0:ed:1d:8c:07:9e:69:fb:93:ef:
6d:17:dd:3d:77:84:d5:cb:b8:7b:8e:46:d0:ed:cf:1b:a5:47:
a9:2d:67:22:c2:14:48:6a:32:ab:e5:2a:b5:58:f8:50:43:b2:
29:26:86:06:fd:2a:09:35:a3:cf:1a:3f:c2:6a:5d:7c:5e:c9:
fa:cc:67:16:7f:29:ef:49:cd:33:5a:d8:57:9d:32:68:25:d6:
e0:ca:0d:e9:12:8a:a3:fe:12:47:3e:eb:61:ad:3c:2e:12:99:
58:55:1c:88:f9:e8:3f:6f:f6:11:eb:80:0a:bf:a3:64:f1:be:
19:e4:c9:c2:fc:bb:10:83:9a:0c:77:38:db:85:5f:1d:c7:6c:
5c:b5:99:9d:66:45:b6:24:19:31:ba:c9:cb:e0:a3:d6:bb:bc:
34:45:15:d8:55:65:4c:61:af:23:d4:00:2b:8d:47:c4:05:44:
b1:c6:4f:83:1b:7f:ce:9d:cf:20:3a:21:a7:6d:f6:38:07:31:
67:5b:2c:b5:7c:71:54:ab:db:15:c1:1d:c7:e1:15:96:6e:53:
12:e3:d9:5a:96:1d:24:6d:6b:a9:e7:a1:7b:ba:6e:9f:3c:97:
d5:82:44:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:30:20 2024 by rpki-client on console-fra.rpki-client.org