Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/1pjwZlUmb8r9oD_HIfjfC6LjQeA.roa
File: 1pjwZlUmb8r9oD_HIfjfC6LjQeA.roa (raw, json)
Hash identifier: G1Q6rmJRu72XrpQyjBDNFJY+AoZgUw1RHCU67sHanj4=
Subject key identifier: D6:98:F0:66:55:26:6F:CA:FD:A0:3F:C7:21:F8:DF:0B:A2:E3:41:E0
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01911D509074FC12336F18636650BE34065B
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/1pjwZlUmb8r9oD_HIfjfC6LjQeA.roa
Signing time: Sun 04 Aug 2024 12:15:04 +0000
ROA not before: Sun 04 Aug 2024 12:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53587
IP address blocks: 116.206.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1d:50:90:74:fc:12:33:6f:18:63:66:50:be:34:06:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Aug 4 12:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d698f06655266fcafda03fc721f8df0ba2e341e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:de:d9:57:32:1b:98:2b:c5:de:56:81:56:
10:ec:cd:c5:68:6b:4c:5e:d1:24:56:db:de:a2:8d:
a3:46:f7:4f:f4:98:12:51:0b:83:6a:89:07:d1:c4:
3c:8c:85:60:58:07:49:3e:3c:23:02:97:76:80:23:
e7:6d:10:03:06:f7:9a:33:60:0e:c9:c9:b1:0a:65:
a2:60:f7:63:e5:9f:d9:82:4a:84:b7:15:f4:74:2d:
40:a2:84:bf:2e:4c:ea:bb:e8:ef:6e:32:20:29:9d:
d7:ec:78:a6:67:a8:0d:b5:d5:48:ee:fe:8e:00:53:
83:68:ca:f5:6f:58:b4:fc:85:52:d7:a5:6b:9b:fb:
2d:8b:3c:c8:3e:df:29:4e:22:ea:b3:9c:b7:24:b0:
2f:ff:8b:f1:99:83:06:ac:71:6d:98:07:c9:c1:25:
6a:25:6e:ee:38:73:b7:02:e5:44:ad:20:86:ef:b5:
a8:36:4c:eb:a9:df:37:6f:f8:ff:0b:2b:87:6e:e8:
29:95:81:6b:8a:4a:fe:e2:4e:ca:3a:37:16:6c:ca:
af:65:8b:a3:af:f0:f7:da:fa:11:46:f4:03:91:5c:
2c:f4:70:3b:6b:f0:ad:dd:bb:e8:6f:cc:39:1d:83:
84:ce:3c:3d:5f:a4:bb:ac:79:ab:b5:cf:82:42:e9:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:F0:66:55:26:6F:CA:FD:A0:3F:C7:21:F8:DF:0B:A2:E3:41:E0
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/1pjwZlUmb8r9oD_HIfjfC6LjQeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.94.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8d:5e:87:93:ea:e2:e7:97:b9:92:e4:ba:21:eb:fe:07:4a:
30:cc:ba:3e:9d:fc:c3:a2:85:0b:ed:44:40:21:02:13:9d:b2:
14:90:ef:df:db:72:ce:4f:ba:c4:db:27:44:10:bb:37:34:e6:
49:ec:64:4f:25:06:6f:23:cc:f1:16:b6:9a:c5:ba:c1:fa:bf:
e2:cc:6b:98:5a:2c:08:75:8d:c2:63:58:54:85:cc:5f:cc:98:
26:8b:6f:1f:55:cb:fe:c6:ee:ed:9b:68:3d:13:b2:4f:4c:e2:
d7:9a:fa:d5:99:70:b4:43:df:b6:a6:91:50:ea:fd:a1:7f:cf:
5f:27:87:74:c8:a2:a0:c2:56:43:66:04:4c:d8:9a:48:c7:20:
7b:47:b5:3b:34:18:a2:3c:bc:4b:ea:7b:f8:ec:dc:f3:b4:89:
b1:b9:d9:69:c0:bc:ea:39:84:3e:0a:84:0f:83:df:b8:9d:f7:
ae:71:01:1c:fa:18:e5:19:5c:86:5b:49:db:1f:b8:34:52:dd:
73:10:99:be:19:35:3c:89:47:ac:43:f7:1b:20:17:83:66:0f:
7b:95:69:bb:f7:85:b2:76:34:14:6a:e6:66:a7:f7:e4:72:5d:
17:e2:5a:cf:0d:87:41:cc:d6:da:41:0f:59:2b:23:d1:2c:ed:
9d:c0:65:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:25:35 2024 by rpki-client on console-fra.rpki-client.org