Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/fpT0vpjSqq6vcmWpglUE8JkgG2w.roa
File: fpT0vpjSqq6vcmWpglUE8JkgG2w.roa (raw, json)
Hash identifier: n0iV4etE0l1TlKiu9QXu5QwZw2IGvgy3BLxhvxsia84=
Subject key identifier: 7E:94:F4:BE:98:D2:AA:AE:AF:72:65:A9:82:55:04:F0:99:20:1B:6C
Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672
Certificate serial: 0191B830AA77018F826584E8FAA467938C3F
Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/fpT0vpjSqq6vcmWpglUE8JkgG2w.roa
Signing time: Tue 03 Sep 2024 14:01:22 +0000
ROA not before: Tue 03 Sep 2024 14:01:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29470
IP address blocks: 139.45.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:30:aa:77:01:8f:82:65:84:e8:fa:a4:67:93:8c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672
Validity
Not Before: Sep 3 14:01:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e94f4be98d2aaaeaf7265a9825504f099201b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:eb:95:66:79:70:8d:90:c7:03:24:4f:ee:
07:88:5f:8f:06:bd:f8:6c:90:e4:bf:7e:5d:e3:3a:
2b:42:24:ec:9a:38:d8:a7:54:94:42:ad:50:8c:07:
6f:1d:49:27:89:ac:12:04:2c:07:55:1e:5b:f1:5d:
17:6d:0f:43:30:91:74:6e:0b:49:97:d9:c4:e7:79:
29:3f:5f:63:a3:b6:60:97:d1:91:6a:26:0a:e4:2b:
3b:63:a5:12:ba:30:3c:4b:af:85:85:dd:d7:11:85:
de:16:e9:72:d4:e5:07:93:2b:a5:b0:8f:d8:16:70:
03:5c:7d:5d:3c:1c:1e:ed:60:8e:8f:3c:2d:d7:b6:
fa:f7:36:4f:85:b1:e6:ff:c6:9b:bb:18:41:a4:ca:
4e:b2:8b:fa:a2:1d:f9:0c:72:66:e4:79:f0:29:23:
0a:04:e3:26:c2:dd:21:0f:8c:24:6d:1b:f8:aa:a0:
7e:5e:6a:34:7f:09:4d:34:a9:2f:28:59:4b:e5:e3:
c6:43:b8:34:8a:03:52:2a:e1:b8:99:5e:05:13:ca:
5b:47:e7:40:24:1c:ff:db:aa:7c:23:78:b9:c3:14:
7f:0d:9f:7a:c1:a6:ff:9d:02:e9:dd:fb:0e:55:60:
ba:f7:dd:c2:6b:b6:2f:47:82:b9:55:4a:55:af:38:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:94:F4:BE:98:D2:AA:AE:AF:72:65:A9:82:55:04:F0:99:20:1B:6C
X509v3 Authority Key Identifier:
keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/fpT0vpjSqq6vcmWpglUE8JkgG2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.45.220.0/22
Signature Algorithm: sha256WithRSAEncryption
90:2c:cd:04:78:f9:bb:2a:3f:c9:7d:ec:6a:74:6e:e1:c7:3e:
05:93:49:e5:4c:6e:95:d4:a3:83:14:41:91:26:69:83:52:21:
0f:85:b9:b8:ab:b3:00:2e:42:25:5f:c2:e6:81:ff:5c:e2:f0:
a9:b3:9b:71:de:93:a8:65:ed:21:a8:57:bf:b0:2c:42:56:b4:
65:21:b3:98:da:e0:c9:83:f4:ae:09:04:02:3e:39:00:47:ea:
7e:55:e6:56:4b:ee:a9:86:43:2d:56:92:50:2d:2d:ad:0b:a0:
f8:72:46:b8:74:c4:5e:89:55:6f:c9:ad:ac:93:0d:a6:bf:35:
38:7e:3f:b6:65:76:ca:51:79:e5:37:2f:4a:ea:b6:10:79:66:
4a:a1:d7:96:2e:ee:66:94:4b:43:d2:9a:43:67:62:78:e0:98:
0d:6e:57:02:36:b6:cc:2a:43:3c:45:fa:98:32:90:51:cd:40:
90:78:3b:b1:e8:60:cd:92:d8:0e:4e:1f:14:b6:c7:3f:48:96:
75:63:8e:c5:45:62:4d:cb:2a:2f:54:bb:ee:11:46:84:f3:60:
60:51:f0:cd:b9:fa:d3:37:73:83:31:ec:c3:dc:0a:f3:fc:e4:
0d:38:76:8b:75:0f:50:09:be:79:49:8a:71:73:ab:ba:53:2a:
a7:b8:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:53 2024 by rpki-client on console-ams.rpki-client.org