Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/RFMsqg-nX6Ty0LGUt9Eu9HAJHBY.roa
File: RFMsqg-nX6Ty0LGUt9Eu9HAJHBY.roa (raw, json)
Hash identifier: i4+5O2cPZmCRWEINaYz77L6dtkHspvCiOk5bqrboiHc=
Subject key identifier: 44:53:2C:AA:0F:A7:5F:A4:F2:D0:B1:94:B7:D1:2E:F4:70:09:1C:16
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 019064743FCF032FFA52049B058AB33C34F2
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/RFMsqg-nX6Ty0LGUt9Eu9HAJHBY.roa
Signing time: Sat 29 Jun 2024 14:44:18 +0000
ROA not before: Sat 29 Jun 2024 14:44:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198785
IP address blocks: 141.138.12.0/24 maxlen: 24
141.138.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:74:3f:cf:03:2f:fa:52:04:9b:05:8a:b3:3c:34:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jun 29 14:44:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44532caa0fa75fa4f2d0b194b7d12ef470091c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:7e:93:07:36:33:cc:87:8f:32:af:48:a1:
e1:8c:80:fd:17:b6:12:5e:2c:c9:98:ad:bb:1f:a9:
05:89:1f:66:62:77:eb:ff:64:03:11:41:ed:cf:6a:
ea:92:73:d2:64:98:e3:62:ec:96:52:94:32:04:b1:
98:b4:bd:7b:d6:38:69:ef:58:9f:93:75:9f:f5:93:
74:a2:f9:24:a1:fa:89:15:ab:84:09:13:08:60:10:
a7:95:31:2b:7b:9a:84:b5:63:9d:5c:65:e4:fa:17:
f9:0a:3f:d9:b8:7b:03:e7:44:5e:ce:ad:40:f0:fd:
03:40:86:8d:18:ea:17:6c:20:bd:c3:8d:ee:fe:f4:
e1:33:b6:db:71:7e:4c:c2:bb:51:aa:d8:d5:ef:fb:
8c:43:07:e3:4d:5f:62:b9:d1:e9:c2:31:16:9a:c2:
4e:10:62:bf:88:c6:12:43:cc:2a:c1:7c:ba:d9:12:
53:18:0c:62:35:04:e3:45:30:70:75:5c:15:86:ee:
d1:fc:d8:8a:3c:85:2a:e0:ae:06:cb:a5:40:e9:38:
93:27:52:50:37:cb:88:0e:5c:07:ce:6f:eb:e2:a1:
4c:f8:d9:7d:93:68:c3:e4:b1:7c:74:95:79:fa:76:
9f:44:70:0d:88:e8:07:35:01:29:a3:ca:e3:73:51:
6e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:53:2C:AA:0F:A7:5F:A4:F2:D0:B1:94:B7:D1:2E:F4:70:09:1C:16
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/RFMsqg-nX6Ty0LGUt9Eu9HAJHBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.138.12.0/24
141.138.14.0/24
Signature Algorithm: sha256WithRSAEncryption
79:73:95:97:98:e1:ec:97:f8:fc:5b:fd:d9:b9:f2:e8:fe:8f:
14:88:84:58:94:07:5e:ed:60:1f:68:a6:d5:f5:17:fe:c1:b1:
25:e4:2e:12:ce:30:35:ab:07:59:a5:1f:de:2a:e2:f4:4f:56:
b9:87:d9:9e:88:f2:bb:37:9b:b4:a0:c5:a3:6d:88:91:be:b2:
10:8a:2e:ba:58:80:76:4b:bc:62:9f:23:03:af:f7:4c:00:69:
e1:fd:06:ad:b4:ab:85:bf:0c:d1:41:3a:dc:27:af:4a:ce:5e:
33:ca:e9:68:5a:55:c5:78:a5:ea:06:a4:6b:70:82:0e:58:d8:
2e:f4:41:95:43:ce:7b:cd:aa:aa:8c:51:52:07:13:09:ca:0d:
d6:c5:ad:32:4c:6a:18:64:76:c8:3e:da:1b:05:3c:87:05:02:
72:7d:de:d4:76:0a:0c:be:fd:54:20:e9:28:e5:d7:cc:f7:99:
01:0b:80:db:fe:66:98:61:7c:db:04:9a:bf:df:d0:aa:1e:9a:
79:2b:f6:d7:1c:6f:41:14:a5:04:36:f4:61:72:aa:b4:8c:21:
7b:0b:aa:6c:fa:74:e0:eb:6b:99:90:a0:7c:b1:9a:fa:8b:d0:
c8:1b:65:0a:bb:3c:b1:32:9c:22:55:92:fb:b0:d4:8f:2f:57:
9c:28:25:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:07:05 2024 by rpki-client on console-ams.rpki-client.org