Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/b3P8ak1Cx2cnZtPxO2p4couMgGE.roa
File: b3P8ak1Cx2cnZtPxO2p4couMgGE.roa (raw, json)
Hash identifier: EU0bBL34KybsvAdWOemzx/TWTm9MfrVmtSiEyKnV+RE=
Subject key identifier: 6F:73:FC:6A:4D:42:C7:67:27:66:D3:F1:3B:6A:78:72:8B:8C:80:61
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01922EEABD67E6F8E8D21501FAC7ADA7C43D
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/b3P8ak1Cx2cnZtPxO2p4couMgGE.roa
Signing time: Thu 26 Sep 2024 15:19:48 +0000
ROA not before: Thu 26 Sep 2024 15:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215633
IP address blocks: 109.122.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:ea:bd:67:e6:f8:e8:d2:15:01:fa:c7:ad:a7:c4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Sep 26 15:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f73fc6a4d42c7672766d3f13b6a78728b8c8061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:0a:0a:fa:a8:bc:97:9c:bd:b3:da:c5:9f:
de:ec:65:9b:1b:3d:ef:3f:04:ab:fa:8f:03:d9:77:
f9:64:4d:a9:92:b7:fb:c9:13:19:32:c6:93:d2:1d:
d8:eb:f1:95:74:b8:a1:4b:be:6d:98:20:f8:83:f2:
2a:b8:f9:99:d8:db:75:2e:f1:51:30:47:1a:c6:fb:
72:3b:02:a6:21:6c:7d:5d:c3:b1:b0:80:d9:f0:49:
6b:e0:44:d7:14:75:20:65:89:da:3c:d2:04:ee:c7:
fb:fb:61:68:2b:67:c5:f8:86:9d:44:93:e2:56:f8:
9a:5e:b8:5d:bc:f2:4e:77:09:e8:4d:80:38:3d:b0:
ce:bb:54:75:50:cb:d4:ff:d8:3b:d2:96:9c:f4:a2:
31:c9:05:6c:30:f6:27:75:76:04:65:dc:59:bc:fa:
f0:4e:ea:d9:a1:1c:ae:ff:63:0c:ce:26:32:30:92:
d1:b6:2d:4c:0a:83:c7:e5:d8:80:00:31:84:3e:cf:
bc:99:ee:1d:a4:ea:14:8a:1a:9c:80:e8:7f:b6:93:
dd:77:2d:01:0b:3f:fe:c0:ec:59:08:34:4f:e8:b1:
5f:9c:6b:c0:ec:44:91:4e:5e:d4:24:ca:a5:72:6f:
7a:ea:66:d0:0c:be:e1:e4:13:3a:d6:5e:bd:55:52:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:73:FC:6A:4D:42:C7:67:27:66:D3:F1:3B:6A:78:72:8B:8C:80:61
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/b3P8ak1Cx2cnZtPxO2p4couMgGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.244.0/23
Signature Algorithm: sha256WithRSAEncryption
16:d3:6f:60:1a:7d:03:a5:db:62:9a:e9:b8:dd:04:84:ed:6c:
76:6e:a0:23:43:dc:7d:9d:b3:4b:d0:50:37:10:89:70:45:46:
21:87:45:58:3b:44:5d:65:6c:8c:ab:16:88:27:b1:a4:e8:d3:
9f:fa:be:90:f2:c2:64:2d:2f:9e:fe:bd:fa:54:7d:07:1c:40:
c2:d9:ea:23:16:2f:a8:f9:1a:4e:e6:92:58:65:21:64:e0:fb:
4e:00:95:d4:94:c5:f6:0e:ca:e5:17:46:02:18:72:1c:5c:de:
e5:16:ce:89:1f:0e:1c:3c:54:25:32:d2:5a:27:5a:04:4e:e5:
be:9a:86:2c:32:d7:57:7e:b9:7b:33:3f:d7:0a:bb:ca:b5:b5:
bc:6f:fc:92:52:aa:33:d3:6f:22:a0:55:32:cb:a3:aa:19:ae:
af:d9:b0:97:3e:69:22:4a:47:e8:ed:b5:c1:f0:5a:a7:0b:17:
36:70:81:e9:67:d5:4a:bf:b4:e5:8e:8d:9e:23:6a:c7:20:53:
6e:80:19:18:b4:7b:c6:7d:aa:34:69:44:a9:5d:c7:91:75:1e:
b5:a2:55:4b:d7:72:82:c8:7a:44:f3:b1:ca:77:6d:bf:28:d3:
bd:cb:e0:83:c3:84:0e:eb:ee:c9:f9:77:20:9a:17:19:1e:d0:
8e:6a:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:52:31 2024 by rpki-client on console-fra.rpki-client.org