Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q0G4b2yU79E3XSUS3_XEvwSap2g.roa
File: q0G4b2yU79E3XSUS3_XEvwSap2g.roa (raw, json)
Hash identifier: KoIRouD1eFux05/5LL32/BSb3S5yk+u99yuCeI1raXY=
Subject key identifier: AB:41:B8:6F:6C:94:EF:D1:37:5D:25:12:DF:F5:C4:BF:04:9A:A7:68
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01920FDFF7C6BD3B22B3A97F370BE0C8A0CF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q0G4b2yU79E3XSUS3_XEvwSap2g.roa
Signing time: Fri 20 Sep 2024 14:39:49 +0000
ROA not before: Fri 20 Sep 2024 14:39:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198510
IP address blocks: 84.32.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0f:df:f7:c6:bd:3b:22:b3:a9:7f:37:0b:e0:c8:a0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 20 14:39:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab41b86f6c94efd1375d2512dff5c4bf049aa768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:00:92:76:34:8c:d1:b2:79:65:be:44:b4:
4b:4d:22:c2:4f:be:02:26:a7:b6:f3:87:8f:68:f7:
1f:33:b5:02:ee:49:9f:c4:05:b4:dd:d9:f6:88:24:
a0:d8:75:bf:29:f4:87:26:f3:21:8a:f7:d1:43:94:
80:b8:1f:e5:3d:dd:8d:25:f6:52:8c:86:61:5c:cd:
65:5b:74:06:47:09:4d:20:c5:43:01:36:bf:62:24:
c8:96:7d:21:dd:5d:bd:79:9f:d0:4a:3a:2d:55:9b:
80:9f:98:bd:b7:23:37:f2:22:1b:7b:98:c2:1d:d9:
95:2a:76:ef:e6:6e:77:c7:b6:8b:c4:4a:eb:58:04:
d1:90:16:6a:e3:79:51:c5:07:02:83:c5:2e:76:a1:
1f:7c:12:9e:61:d9:d3:b7:eb:e5:56:bd:60:67:95:
19:b9:0e:4b:ae:c7:21:a6:64:b5:80:08:96:1e:31:
ff:2a:ea:15:6c:75:0c:48:fe:f0:25:2e:06:ed:b1:
c7:9f:0b:24:2f:04:bd:50:03:50:b2:29:99:d9:35:
48:e9:87:b3:e8:f1:5a:fe:f2:6e:e5:a4:f0:4d:77:
de:4a:fa:70:82:83:dc:15:44:d2:6b:d9:f3:52:5a:
bd:62:e6:19:c1:9c:15:d3:bf:15:7e:d3:2c:b8:54:
9f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:41:B8:6F:6C:94:EF:D1:37:5D:25:12:DF:F5:C4:BF:04:9A:A7:68
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q0G4b2yU79E3XSUS3_XEvwSap2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.104.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1b:aa:52:6e:93:02:9a:ec:5d:6e:eb:b4:f5:a4:9b:0a:ee:
8c:3b:f7:88:29:3b:eb:9a:2c:73:63:a3:d8:27:ad:20:e4:01:
a5:68:e3:95:85:52:22:1c:4d:d1:34:d8:92:39:cb:3c:cc:6f:
07:c2:e4:c5:b3:01:95:67:19:4c:98:7b:a0:62:45:36:e4:ac:
fe:c8:b7:14:c8:9c:ba:90:97:56:86:25:3a:65:b3:58:4e:67:
ed:a0:9c:92:5e:56:8a:87:7a:8a:49:63:18:f6:8f:4f:91:39:
8c:1c:4b:c3:ab:34:a6:8f:f1:f4:85:9e:e7:8f:be:db:ee:5c:
44:32:83:30:87:63:f3:96:72:2d:2e:82:f5:5b:15:94:c4:ce:
b3:41:16:9b:39:b4:3d:07:00:62:53:a3:29:c2:18:74:09:4c:
e3:a9:13:b2:a0:ba:1c:b4:ce:da:26:41:24:ae:cf:a1:29:b1:
a6:56:71:96:8d:ee:dc:65:5a:4e:d8:f5:b2:7a:fd:e2:47:c0:
61:db:33:db:1b:22:d5:7b:ac:be:e3:34:05:b3:5c:2e:64:e5:
ca:9e:53:ea:2d:d3:5f:d3:d0:9e:cf:10:06:2a:66:8c:a6:ed:
d6:cc:d9:9d:eb:17:19:54:ed:7a:8e:b0:3a:b9:ff:c7:12:a8:
a1:e6:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:54 2024 by rpki-client on console-fra.rpki-client.org