Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/_XlGMZ6TifsVMlH8Kk3bBEVY1Mc.roa
File: _XlGMZ6TifsVMlH8Kk3bBEVY1Mc.roa (raw, json)
Hash identifier: ole8n9uyMpdihYElW4Ikl5BL1ehmRoqAkM5yOBCII9Q=
Subject key identifier: FD:79:46:31:9E:93:89:FB:15:32:51:FC:2A:4D:DB:04:45:58:D4:C7
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 01931B1129DE7A52F7A5F0D6315052F5C5D7
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/_XlGMZ6TifsVMlH8Kk3bBEVY1Mc.roa
Signing time: Mon 11 Nov 2024 11:52:09 +0000
ROA not before: Mon 11 Nov 2024 11:52:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214379
IP address blocks: 185.126.255.0/24 maxlen: 24
194.4.71.0/24 maxlen: 24
212.79.125.0/24 maxlen: 24
212.87.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:11:29:de:7a:52:f7:a5:f0:d6:31:50:52:f5:c5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Nov 11 11:52:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd7946319e9389fb153251fc2a4ddb044558d4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:16:fb:f7:11:f2:f2:ae:82:65:63:f4:45:
e2:ef:c6:c1:5b:9a:71:8f:9b:5f:1a:57:51:28:22:
7a:89:b7:b6:4c:92:3a:c6:17:a0:fe:ca:34:dd:bb:
fb:0b:06:7a:44:69:a4:db:9e:2a:3a:bf:0a:27:6d:
80:8e:d3:c7:f5:fc:51:7e:3e:8e:c6:96:2a:91:72:
53:b5:9b:c4:68:a1:99:09:81:6a:6e:eb:cc:b5:17:
93:45:fc:9b:84:1f:8f:f1:33:bf:92:f9:31:b6:57:
31:b2:32:be:11:37:5f:4b:0b:0c:77:c3:44:49:2b:
2f:94:1c:51:8e:94:05:d9:c7:d5:86:f2:2a:2c:e8:
f6:b1:87:1c:f4:95:e0:5f:26:2a:b7:22:d6:c4:b4:
8d:1d:0b:35:37:92:86:97:3b:bd:cf:01:bd:56:ba:
cb:0a:d2:55:d9:f1:43:8d:a5:28:36:10:7c:27:87:
95:62:4a:54:ba:6a:1b:21:18:97:d3:ad:cb:f7:6c:
6d:34:7d:91:d0:ca:49:b7:38:91:aa:f4:95:13:4c:
c3:78:b8:13:33:da:47:e3:f4:28:20:7d:06:b0:a9:
eb:43:92:db:6d:d2:f4:e5:53:a5:41:7f:1d:68:7e:
60:e7:dd:94:28:d0:9a:ff:54:e0:c4:da:f4:1f:66:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:79:46:31:9E:93:89:FB:15:32:51:FC:2A:4D:DB:04:45:58:D4:C7
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/_XlGMZ6TifsVMlH8Kk3bBEVY1Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.255.0/24
194.4.71.0/24
212.79.125.0/24
212.87.168.0/24
Signature Algorithm: sha256WithRSAEncryption
99:67:4f:3f:24:93:43:d6:2b:f2:79:e2:76:0f:e5:0f:01:df:
32:c3:ec:84:d1:2a:61:b0:b9:4a:7b:ee:6b:e6:89:df:7a:ce:
f4:70:0b:26:02:d0:df:f3:26:7c:6f:e5:13:32:04:14:b4:e6:
16:ea:01:4d:c2:6b:69:d2:eb:f8:b1:5b:38:34:50:64:11:57:
e2:c3:de:1c:0a:9a:fb:ea:c1:64:00:d2:0a:43:fe:2c:a3:c8:
fe:2b:44:05:b5:e9:dd:52:65:4f:b5:3c:94:ee:23:c9:18:37:
f7:0d:86:e1:00:80:fe:93:46:11:23:97:69:7a:cf:8f:1d:30:
9c:f6:c0:6b:ff:17:d7:9e:7a:f4:2d:77:57:0d:39:1b:be:d4:
03:09:c3:d4:96:ef:46:02:c1:19:e2:58:73:5f:fb:77:ae:75:
7a:b1:c5:70:c7:b2:8d:86:4f:80:15:8b:44:d7:d3:3c:73:ae:
a4:f1:ec:d7:f1:9b:da:24:29:83:f6:11:13:3a:fa:b0:d6:39:
a0:bc:13:82:c6:77:93:1b:1a:a1:41:00:21:aa:f6:43:fe:16:
42:aa:3e:f8:c8:41:f1:45:67:a8:0b:9f:c4:14:42:1d:17:cd:
76:e3:21:92:26:74:a2:c9:c2:68:e6:a0:5b:37:56:1b:76:f0:
5a:3c:f7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:31 2024 by rpki-client on console-ams.rpki-client.org