Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rFnelL_IPvUbHO4h77gkUBcx3_I.roa
File: rFnelL_IPvUbHO4h77gkUBcx3_I.roa (raw, json)
Hash identifier: OtHLSeFaHfUxy8Zs/fQ813hn8kXjKiK4H4B3XD7O2gc=
Subject key identifier: AC:59:DE:94:BF:C8:3E:F5:1B:1C:EE:21:EF:B8:24:50:17:31:DF:F2
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01931A6A691A7BB0CAF4C8498B0E6201EC5D
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rFnelL_IPvUbHO4h77gkUBcx3_I.roa
Signing time: Mon 11 Nov 2024 08:50:01 +0000
ROA not before: Mon 11 Nov 2024 08:50:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 87.229.31.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:6a:69:1a:7b:b0:ca:f4:c8:49:8b:0e:62:01:ec:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Nov 11 08:50:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac59de94bfc83ef51b1cee21efb824501731dff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:6d:dd:a2:ff:84:dc:11:71:4c:85:82:1a:
ea:09:5c:bd:04:18:36:3b:56:4d:ef:f8:0a:b2:06:
28:33:44:b8:16:f6:87:42:09:6b:b8:8e:7c:54:83:
fc:5b:6e:71:04:fe:56:c8:51:18:ae:df:77:6a:fc:
5b:97:36:91:74:61:3a:9f:28:ee:aa:a8:51:ae:55:
d2:b1:3b:f8:cc:dc:0c:37:0d:85:7a:2a:77:f4:e9:
77:2a:94:c7:d2:fc:31:35:d6:f4:fe:ad:5a:fa:4f:
2d:15:96:52:45:ef:ea:1b:de:bf:aa:9c:84:b8:41:
ea:49:d5:d1:01:f4:93:6d:36:fa:95:ea:56:de:55:
da:c8:0b:7f:c3:1a:e0:28:5e:7b:b2:94:ba:3b:ad:
aa:f8:fb:4b:63:79:13:96:ba:c2:ca:53:bb:b1:1c:
8e:60:eb:dc:00:6f:28:f1:fb:fb:e7:37:c1:28:67:
4c:1c:52:0b:50:f7:4f:ac:96:f3:3d:da:ce:1c:63:
67:12:cb:53:05:c0:2f:e7:4f:4b:7a:d4:e6:7a:32:
70:f8:93:12:e9:9b:6f:02:7f:70:b8:89:59:0b:1b:
e3:dd:9a:83:df:19:ee:ab:5b:a2:69:1f:04:37:a3:
1d:a0:ea:40:41:eb:99:02:8f:33:3f:8d:9a:20:a1:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:59:DE:94:BF:C8:3E:F5:1B:1C:EE:21:EF:B8:24:50:17:31:DF:F2
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rFnelL_IPvUbHO4h77gkUBcx3_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.31.0/24
87.229.48.0/24
87.229.50.0/24
87.229.97.0/24
Signature Algorithm: sha256WithRSAEncryption
93:70:cb:9f:17:19:1b:86:4a:2a:a5:04:19:ca:96:b4:b7:a1:
ee:1d:2c:80:65:f2:06:e1:c6:da:0e:e5:2e:8c:c5:eb:6a:c1:
d0:83:74:43:77:74:07:33:7a:ff:06:d4:95:02:99:a3:d8:ef:
70:6e:25:77:94:df:55:76:99:b2:4d:be:a2:26:d3:9d:13:05:
67:78:23:0f:ab:6a:f8:5c:01:97:c7:3f:29:4e:a1:15:34:1f:
96:1b:d2:1a:af:06:ef:8f:7a:d6:6d:ec:59:f8:a1:3c:36:0b:
e6:51:34:c2:e8:00:70:66:bb:54:41:0b:5c:96:07:64:fd:64:
67:7d:20:8a:17:e0:79:ac:96:1d:07:b0:6f:cc:6f:b3:e0:7a:
92:70:20:09:fb:3b:e2:ad:bc:0d:e4:bb:66:9f:02:34:a2:15:
04:9a:0b:48:95:6b:f9:2e:20:9a:14:81:bc:b0:03:02:06:97:
89:47:c7:cc:63:96:09:ed:2b:f1:7a:11:f1:c0:7d:0c:c8:38:
c8:c0:47:93:35:cf:41:b2:48:9f:52:e1:e8:2d:b6:9e:6a:fe:
a7:d9:bd:47:e1:f5:f2:63:30:23:8a:48:4d:81:fc:96:41:b3:
9f:f8:b2:5b:cf:48:6f:86:ea:44:1b:d8:b4:75:5a:ed:0a:bf:
a6:e5:ce:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:49:52 2024 by rpki-client on console-ams.rpki-client.org