Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ddxwLQYI-nA6GYrTs-C9Is6pxeA.roa
File: ddxwLQYI-nA6GYrTs-C9Is6pxeA.roa (raw, json)
Hash identifier: w0Oz8/Cy+UDDvaUuWrI10CQ5GVkG/XMsqv37uqaKMrM=
Subject key identifier: 75:DC:70:2D:06:08:FA:70:3A:19:8A:D3:B3:E0:BD:22:CE:A9:C5:E0
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01931A7DA37C4C825DB399DA179D5AB0D9A9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ddxwLQYI-nA6GYrTs-C9Is6pxeA.roa
Signing time: Mon 11 Nov 2024 09:11:01 +0000
ROA not before: Mon 11 Nov 2024 09:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 84.32.9.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:7d:a3:7c:4c:82:5d:b3:99:da:17:9d:5a:b0:d9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 11 09:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75dc702d0608fa703a198ad3b3e0bd22cea9c5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:a3:08:b7:3b:a4:b3:8c:e2:8d:4c:86:3d:
d7:9f:8e:b7:2f:e4:15:71:2c:53:70:c4:d1:9f:6d:
8d:18:f3:d4:d6:2a:45:ad:30:81:70:3e:a0:15:9c:
a9:79:90:77:a5:88:6c:58:0b:8e:82:c6:20:16:11:
fc:f4:31:21:e5:bc:e5:83:e3:9d:2e:fc:e2:e5:df:
20:7b:94:41:df:fc:58:42:cf:da:44:09:07:66:7d:
37:f3:cd:22:ac:72:41:c7:f9:31:b3:38:22:17:1c:
47:dd:4a:62:57:ca:5d:b5:ba:93:4d:f8:0e:9a:74:
4e:43:9c:87:53:04:f9:73:aa:92:dd:87:61:1d:b6:
31:9e:db:8b:ef:a1:ad:ec:ad:c0:8b:12:46:9d:d8:
52:f3:b8:ef:9e:e8:59:0b:df:fb:fe:0b:67:a0:9b:
86:a5:9c:5c:0f:a5:f8:2b:24:8a:6a:a8:5f:b1:ac:
f7:eb:66:61:5a:85:d0:9b:f6:93:13:21:46:32:31:
42:b2:07:2e:fc:43:df:04:99:9f:ac:ad:9e:57:2c:
ae:7f:b1:5b:90:89:c1:d7:d0:f8:ee:e7:15:fd:da:
c9:87:b6:3b:60:1e:df:9d:d9:49:53:2f:01:35:5e:
79:a4:d4:9a:1a:f1:cc:35:b5:53:1f:2d:c2:0a:0c:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DC:70:2D:06:08:FA:70:3A:19:8A:D3:B3:E0:BD:22:CE:A9:C5:E0
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ddxwLQYI-nA6GYrTs-C9Is6pxeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.9.0/24
88.216.220.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:89:e9:4f:cf:9e:13:e3:bf:5d:8d:86:57:6f:64:0f:e1:4c:
8c:9d:3f:dd:43:01:f3:b3:4c:aa:f8:85:da:0a:97:50:a1:b6:
05:4a:01:c4:df:72:ce:50:dc:73:24:5b:37:05:da:b7:a8:3e:
1f:de:13:67:f2:6e:c4:52:74:d0:78:39:11:7a:49:0d:65:d4:
07:8c:d5:b1:0d:85:9e:30:82:85:65:ef:f9:a5:ba:2f:c7:16:
15:e8:5b:d7:1d:06:e1:26:d8:de:b3:d1:41:15:59:8a:ab:fb:
c5:73:ee:61:fb:d8:1e:b3:76:67:a5:6e:55:36:64:13:30:79:
b2:72:68:86:58:89:a1:fa:6b:f0:10:22:0b:2e:9c:00:8e:70:
79:54:69:d1:20:2c:27:93:14:1c:e6:ba:f7:e7:74:c0:e7:c9:
5c:71:87:d9:6a:09:5e:be:28:7f:8d:2c:30:77:ba:25:0d:30:
ed:51:24:a3:3b:a4:4f:eb:ea:5d:c3:4e:b6:23:5c:d7:9e:2d:
f2:40:58:f0:f9:a5:10:a2:e9:50:1b:a1:75:1a:95:a7:07:fe:
90:cf:7d:5b:be:64:74:2e:61:33:c4:b3:33:31:b1:15:c9:f9:
cc:f3:89:b3:b5:99:07:b4:cb:d5:c1:97:2f:71:9c:6d:ec:18:
93:46:d2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:37 2024 by rpki-client on console-fra.rpki-client.org