Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/mGe8yBFW9lxB-AAnuz1KThZTk9E.roa
File: mGe8yBFW9lxB-AAnuz1KThZTk9E.roa (raw, json)
Hash identifier: ESAJQGIFy+MNW2NVcmwe3jeYqyn2gSey09o0h+ViFUU=
Subject key identifier: 98:67:BC:C8:11:56:F6:5C:41:F8:00:27:BB:3D:4A:4E:16:53:93:D1
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 01902AC7C92B175AE3E7DC82C97D1862FC3F
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/mGe8yBFW9lxB-AAnuz1KThZTk9E.roa
Signing time: Tue 18 Jun 2024 09:57:34 +0000
ROA not before: Tue 18 Jun 2024 09:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210544
IP address blocks: 192.124.252.0/24 maxlen: 24
193.28.64.0/23 maxlen: 24
2a12:6900::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:c7:c9:2b:17:5a:e3:e7:dc:82:c9:7d:18:62:fc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Jun 18 09:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9867bcc81156f65c41f80027bb3d4a4e165393d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:85:0d:c0:d2:48:b4:20:92:4d:26:58:1d:
54:d1:18:d1:a1:c3:bd:ec:b9:43:8e:88:80:ee:99:
8e:e4:c1:5f:e6:9a:cc:1b:02:e1:12:be:05:07:4f:
74:61:d5:81:95:57:1c:f8:dd:16:12:07:c1:99:d7:
56:fb:0a:a1:7c:e5:00:6d:fa:32:14:7a:b9:29:6c:
e5:63:e0:47:47:34:7c:17:40:33:ce:4b:8b:53:f9:
aa:59:4e:3b:c0:24:3e:ba:97:a8:d0:04:72:9f:31:
db:20:5a:6e:83:6f:d6:e1:ae:cd:ae:eb:2b:24:9c:
76:6a:ee:5d:0c:65:a1:a8:a5:14:d1:c7:d8:47:8a:
2f:1c:0d:92:55:a2:20:6e:32:00:cd:ed:bc:87:ea:
ff:7e:83:8c:d2:31:b3:02:d3:9b:7e:8d:9f:a3:cc:
ad:4d:cd:93:8a:b0:6f:1f:cd:f9:e6:bd:12:7e:d7:
aa:da:fc:a8:c2:5f:52:bf:b3:85:90:07:de:8b:86:
f4:99:23:cb:01:0d:4d:d7:06:91:cf:15:74:a7:d9:
6a:95:a3:f8:9c:9b:2e:84:1e:c8:c5:01:3b:5e:03:
f4:b9:c1:22:61:59:46:f8:46:f6:70:4e:03:dc:03:
69:bc:79:63:0d:69:1f:f6:a2:c1:67:38:fb:d9:a5:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:67:BC:C8:11:56:F6:5C:41:F8:00:27:BB:3D:4A:4E:16:53:93:D1
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/mGe8yBFW9lxB-AAnuz1KThZTk9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.252.0/24
193.28.64.0/23
IPv6:
2a12:6900::/36
Signature Algorithm: sha256WithRSAEncryption
6e:27:69:59:04:69:f6:07:14:9b:e1:46:4f:86:4e:4b:05:82:
b0:54:aa:0e:57:aa:7f:02:d5:6f:27:59:6a:0f:43:f7:03:98:
40:3f:ac:8b:73:65:21:05:93:e3:e3:54:7f:47:3c:ea:34:7f:
a1:50:6e:b1:e4:35:9f:90:f7:08:12:d9:36:0f:53:8b:78:22:
26:92:eb:46:fa:57:37:da:cc:16:fd:0a:14:1d:f5:33:23:1b:
6e:1e:11:ac:fc:fa:4c:81:6e:f8:06:f2:be:6f:7e:c4:cf:3e:
6f:33:5b:4a:9e:ee:34:0b:85:c5:fc:da:0c:6c:0a:ea:fc:d7:
4e:f4:0a:d4:a6:2d:ed:9d:5c:a9:89:24:7b:72:71:62:bc:eb:
cb:20:88:c2:8d:15:b7:62:ef:67:a4:54:ad:10:47:3b:fc:b3:
03:62:47:ed:d6:d9:63:99:85:d4:7b:3d:43:0e:02:c1:c3:b5:
df:f9:57:40:2f:00:b0:08:b7:bc:0a:71:7b:23:6a:dc:cc:3e:
67:64:fd:8a:09:b6:ae:f2:16:f3:c2:5c:58:58:e3:04:0b:d7:
38:4a:e9:d8:e9:97:e7:6e:f1:aa:94:33:74:3d:78:d5:72:6c:
69:97:b9:a6:ec:a5:98:00:08:db:f4:d6:01:2b:2a:b5:ad:43:
cc:72:c7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:05:25 2024 by rpki-client on console-ams.rpki-client.org