Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/dHh9c7wAw3kOopq1dLDvayUx0hM.roa
File: dHh9c7wAw3kOopq1dLDvayUx0hM.roa (raw, json)
Hash identifier: MvBDVaEMs2SOlN33loawadaCSsNQtUnmNVWhUWcys00=
Subject key identifier: 74:78:7D:73:BC:00:C3:79:0E:A2:9A:B5:74:B0:EF:6B:25:31:D2:13
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 019321518E596C307DDD923477F334EC92CE
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/dHh9c7wAw3kOopq1dLDvayUx0hM.roa
Signing time: Tue 12 Nov 2024 17:00:12 +0000
ROA not before: Tue 12 Nov 2024 17:00:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199195
IP address blocks: 194.39.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:21:51:8e:59:6c:30:7d:dd:92:34:77:f3:34:ec:92:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Nov 12 17:00:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74787d73bc00c3790ea29ab574b0ef6b2531d213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:c7:cb:c5:87:fc:38:7e:2f:d0:c8:86:59:
31:36:b0:77:f4:9b:29:46:fe:01:d1:32:85:c8:27:
b3:04:ba:d4:06:d0:a2:66:98:96:55:05:95:df:ac:
08:81:7d:45:77:fc:ef:0b:31:2a:69:6d:d0:70:43:
12:67:31:c7:25:1e:fb:16:e2:a1:90:01:d4:a3:64:
36:7a:cf:de:15:97:43:a0:4f:76:8f:7e:ee:57:f7:
a7:ff:18:a6:49:f1:6b:8a:ec:ab:90:c1:37:68:b4:
f3:ae:71:82:28:d0:f0:64:dc:07:a6:74:1d:8d:15:
a0:82:cb:b4:3b:f3:93:88:4e:a1:d0:a2:7d:5b:0e:
89:44:fc:31:1d:3b:4b:49:9c:a0:d2:fc:0c:42:24:
47:5a:2f:6c:87:9e:fd:f4:68:bf:b6:65:64:21:69:
08:44:9f:48:44:63:34:90:c8:2f:6c:b9:6c:3a:61:
03:31:ee:02:53:aa:6d:23:91:8a:7a:68:83:14:54:
54:da:20:92:e9:03:a0:7c:b2:72:8e:29:aa:38:2b:
43:d2:e1:2e:99:e1:cc:d8:83:7c:1f:46:32:65:12:
4d:7f:1b:c0:62:54:0f:59:7f:ba:86:22:e4:9b:38:
81:44:59:6d:5e:ed:95:20:27:d2:ce:f4:c8:06:78:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:78:7D:73:BC:00:C3:79:0E:A2:9A:B5:74:B0:EF:6B:25:31:D2:13
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/dHh9c7wAw3kOopq1dLDvayUx0hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.253.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:3b:e2:78:2d:7e:f6:58:fa:0d:7c:7e:ea:19:c1:c6:a0:12:
e5:ff:d8:9b:11:79:07:7d:79:04:a8:d4:d3:27:3c:c2:8a:24:
64:1e:cc:5f:52:4e:d2:ff:bd:1c:ba:ed:8d:5f:36:a9:ed:fe:
67:c9:7c:9e:3b:1b:1b:2f:e6:26:0b:7d:86:94:3e:56:b6:52:
77:6b:da:29:12:bb:57:2f:0a:7c:18:03:b6:bd:fd:fd:47:63:
ea:56:83:ef:a8:f6:4f:da:44:f7:61:7a:42:3e:4c:7c:46:25:
e4:2a:5e:7c:18:02:f1:bd:94:52:eb:f9:a6:19:b5:2c:58:a3:
f9:c9:af:75:dc:92:1d:3f:bd:e9:51:db:c1:59:9f:41:8a:4d:
af:a0:bd:ba:cb:11:b9:e6:fd:d2:19:02:64:dd:69:b9:e3:c0:
96:bc:0f:b6:9e:3a:75:2a:00:42:c6:83:a6:7c:8f:cb:43:4e:
88:75:04:ef:e4:bf:1d:7a:d5:75:2e:04:fa:e9:ef:59:d9:d5:
6f:51:ed:3c:1a:23:ca:e5:fd:f5:68:9d:49:8a:22:13:f3:74:
36:49:c4:13:14:5b:4d:34:fb:86:28:97:0c:cc:84:38:3e:22:
e4:9a:f2:29:78:0a:15:4e:ee:06:f5:dd:4a:2d:0f:20:7f:11:
68:65:33:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:19 2024 by rpki-client on console-ams.rpki-client.org