Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kgIVt44Rhp-vL0NTYfrdQxlpYDU.roa
File: kgIVt44Rhp-vL0NTYfrdQxlpYDU.roa (raw, json)
Hash identifier: jRfwLVkerqXwZPuMurU/fuc7p4fzwMJl+mJYTUC0wMQ=
Subject key identifier: 92:02:15:B7:8E:11:86:9F:AF:2F:43:53:61:FA:DD:43:19:69:60:35
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01934ECB5A9950DCFF3922954D21943CC0B7
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kgIVt44Rhp-vL0NTYfrdQxlpYDU.roa
Signing time: Thu 21 Nov 2024 12:56:10 +0000
ROA not before: Thu 21 Nov 2024 12:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24739
IP address blocks: 45.139.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:cb:5a:99:50:dc:ff:39:22:95:4d:21:94:3c:c0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Nov 21 12:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=920215b78e11869faf2f435361fadd4319696035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d7:33:28:9f:a5:94:1d:45:b6:83:29:9b:ee:
95:1a:9e:39:c2:d4:5e:26:79:35:ce:74:8d:2f:5d:
6d:4f:3d:6d:a6:dc:fb:ca:87:c5:ae:6b:4f:58:7a:
98:d4:17:bb:01:d5:63:6c:1d:b8:77:ff:00:58:98:
3d:e6:34:cf:8a:16:54:ca:a7:78:e4:58:00:ce:f9:
fa:a2:b4:b0:41:58:1a:71:f7:9a:25:ad:7a:67:9b:
90:7c:4f:1c:39:72:54:11:ce:1d:fa:b8:c9:8b:58:
84:d3:80:0d:68:3d:08:c8:0e:08:6b:74:e2:0d:ce:
e8:79:00:c9:5a:93:0d:6a:b3:a4:ea:1d:95:42:58:
21:f5:5c:6a:92:61:eb:b1:f8:ef:39:02:98:db:5a:
64:80:4c:cd:b2:7a:b3:a9:4d:b4:37:40:00:81:82:
e9:d8:8f:64:7b:61:fd:04:79:aa:d3:a0:fb:f6:e3:
7e:e6:d6:52:1b:4b:2f:9f:09:a3:2d:1b:e8:00:ec:
7c:48:0f:94:a6:c0:e3:75:e0:0b:e4:d7:94:f9:00:
2c:d7:83:cc:3a:e9:23:83:96:3f:5d:5c:76:3a:98:
ed:56:e1:bd:cc:d2:f6:be:28:42:9d:36:67:de:86:
31:be:a9:dc:30:b9:9d:a2:2d:6e:a3:2b:13:98:e1:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:15:B7:8E:11:86:9F:AF:2F:43:53:61:FA:DD:43:19:69:60:35
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kgIVt44Rhp-vL0NTYfrdQxlpYDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:35:99:fb:ca:f9:e4:41:18:b7:23:1d:be:4c:8c:bc:4b:6b:
69:72:08:ba:10:06:96:db:7a:70:fa:60:c6:ec:0a:f1:95:1e:
f9:f5:e4:b8:01:a7:03:1e:47:ca:62:b1:d1:89:dc:88:29:af:
07:29:a6:eb:96:66:2f:02:05:09:27:8e:b5:0e:35:9b:e1:45:
ed:f7:18:d7:78:87:ed:ae:a2:e2:0f:92:c6:0f:53:a2:ed:d0:
57:cb:2a:fd:83:4f:a7:67:af:ad:9d:1d:33:39:54:a1:84:43:
80:39:9a:e5:ce:d9:aa:a6:ee:18:52:a0:d7:70:27:b8:e7:35:
37:14:90:37:9d:c1:ba:50:70:ff:ea:50:c8:30:a1:5a:46:ce:
d8:5f:6c:ea:c6:e0:8b:5f:ca:32:4e:07:26:4b:2f:01:d4:7c:
d4:b4:9e:b7:61:6f:4a:3b:33:d3:41:38:af:8f:04:54:c6:6d:
f8:e8:0f:7e:69:7e:ab:ea:c6:50:7b:26:b1:25:cc:bd:bb:4f:
70:9b:1e:b8:86:99:e8:fd:b5:e2:a9:87:f2:87:3a:44:f1:6c:
d3:17:2b:e3:f5:c6:b7:15:88:8f:d0:7a:c1:89:37:e1:a7:cc:
17:a2:2f:4f:68:b3:4a:c2:be:3a:c0:74:2d:60:d6:b6:07:98:
60:5e:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:43:18 2024 by rpki-client on console-fra.rpki-client.org