Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/h3uT8rXHWg_d5YOKp8JaBIFxoGU.roa
File: h3uT8rXHWg_d5YOKp8JaBIFxoGU.roa (raw, json)
Hash identifier: JWbZnoxCVCXTQUKrRDJaUmSc4wNt0ygq1zE5X/n3Chw=
Subject key identifier: 87:7B:93:F2:B5:C7:5A:0F:DD:E5:83:8A:A7:C2:5A:04:81:71:A0:65
Certificate issuer: /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial: 01935424FAF4ABEB0467857655C12078DC79
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/h3uT8rXHWg_d5YOKp8JaBIFxoGU.roa
Signing time: Fri 22 Nov 2024 13:52:09 +0000
ROA not before: Fri 22 Nov 2024 13:52:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7155
IP address blocks: 85.92.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:24:fa:f4:ab:eb:04:67:85:76:55:c1:20:78:dc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Validity
Not Before: Nov 22 13:52:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=877b93f2b5c75a0fdde5838aa7c25a048171a065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a4:2b:ee:02:c3:8e:f3:e4:60:d6:ab:21:55:
68:e5:46:06:07:4f:d6:e9:98:aa:d2:10:aa:e0:81:
c2:fa:64:cd:5f:21:fa:7d:1d:19:f8:ba:8e:5f:dc:
50:0d:91:e2:f9:6a:14:e4:47:dc:90:23:8f:f3:05:
95:a9:1d:49:88:78:83:51:fc:22:e9:5a:39:d4:51:
17:b4:91:ad:7c:79:18:77:26:db:61:01:cb:36:35:
11:ef:70:b1:85:e4:0e:7f:de:5f:f0:9d:09:54:b3:
86:a0:06:3a:13:34:90:4d:db:1e:b2:25:d4:87:3c:
06:6a:8d:13:8c:4f:36:83:3b:d9:c7:b6:07:3b:1d:
f0:c1:3f:52:53:d0:28:6b:f4:c2:5d:31:6b:82:53:
66:24:54:0e:d9:7d:ca:91:88:36:b2:71:04:bf:5c:
20:f9:8b:11:e2:d6:a2:8b:62:39:97:ae:b7:cc:a7:
1d:b9:99:01:7c:0f:70:6a:c7:ad:5a:8b:d8:8d:d2:
a1:87:c4:64:29:f7:ac:4e:ce:2e:a3:10:ed:d2:e1:
5c:10:a6:b3:ec:8d:57:4a:ab:2a:6e:b5:6d:75:2a:
de:23:c3:7a:61:db:46:39:93:ca:30:f8:f7:32:24:
c9:d8:13:a2:05:bd:84:40:e3:22:8e:54:f9:e6:cf:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7B:93:F2:B5:C7:5A:0F:DD:E5:83:8A:A7:C2:5A:04:81:71:A0:65
X509v3 Authority Key Identifier:
keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/h3uT8rXHWg_d5YOKp8JaBIFxoGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.249.0/24
Signature Algorithm: sha256WithRSAEncryption
19:02:69:db:8b:40:1e:f6:72:6d:00:cc:74:d5:19:58:8a:0f:
55:d8:16:fb:b2:31:f8:4f:2c:d1:32:55:e6:56:29:c9:f5:68:
87:f6:e8:bd:02:3d:8c:33:f2:39:a7:5c:c2:c0:03:7c:12:b8:
4f:0a:0a:fe:31:06:d6:f9:fb:79:67:83:10:f6:b8:32:95:cd:
42:31:d1:7a:c2:17:82:fa:5c:c3:e1:26:d2:dd:6a:03:58:29:
d8:52:1f:c6:e7:eb:43:c8:d6:3e:8e:8a:69:64:03:4b:d2:5a:
70:8d:90:c6:e4:12:d9:c3:8d:07:0c:f8:c2:3e:fe:8d:d8:09:
9a:31:af:61:cf:b8:e4:5a:a6:3e:b5:02:5e:36:d4:3f:7d:7a:
59:38:d1:37:80:e4:9d:f1:a7:40:02:09:a8:5d:47:bb:4c:59:
88:d0:2f:8f:69:fb:bc:7a:55:61:56:34:90:a1:32:54:4d:da:
9a:6c:2f:62:59:eb:12:05:10:a3:8c:d5:bb:bc:58:ee:58:0e:
ed:dd:8b:d9:c8:26:e3:62:85:54:c7:c3:dd:66:21:1b:c4:56:
60:7a:88:e7:8d:c3:9a:e0:73:1a:34:3d:1f:8d:3f:70:34:f0:
6a:f8:2c:01:e3:62:f9:d3:ed:0c:1f:ad:10:3a:a6:67:d0:74:
1d:ba:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 20:34:53 2024 by rpki-client on console-fra.rpki-client.org