Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/3e7fkY5lgtpMXPVJDPQa-Dj_9E0.roa
File: 3e7fkY5lgtpMXPVJDPQa-Dj_9E0.roa (raw, json)
Hash identifier: 6zV26cQpXxo76zK0NBeBp+xoE30z7OHqYWAoTT6MFM4=
Subject key identifier: DD:EE:DF:91:8E:65:82:DA:4C:5C:F5:49:0C:F4:1A:F8:38:FF:F4:4D
Certificate issuer: /CN=1a59e9a3fc3fb5b0d582056a3b24553c56bd27f0
Certificate serial: 018DB1043E5F294BAC68135AC0DC6F99307C
Authority key identifier: 1A:59:E9:A3:FC:3F:B5:B0:D5:82:05:6A:3B:24:55:3C:56:BD:27:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/3e7fkY5lgtpMXPVJDPQa-Dj_9E0.roa
Signing time: Fri 16 Feb 2024 08:24:21 +0000
ROA not before: Fri 16 Feb 2024 08:24:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199631
IP address blocks: 94.46.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:04:3e:5f:29:4b:ac:68:13:5a:c0:dc:6f:99:30:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a59e9a3fc3fb5b0d582056a3b24553c56bd27f0
Validity
Not Before: Feb 16 08:24:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddeedf918e6582da4c5cf5490cf41af838fff44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:13:28:2e:59:0f:ab:bf:eb:ee:c4:36:4f:83:
1b:9d:b5:c6:1b:01:56:a7:b1:a7:c7:eb:85:f6:83:
2f:58:16:4f:60:35:52:98:a7:e5:30:2c:a1:0d:78:
55:ad:c6:73:79:0d:77:f8:0e:b8:f8:58:90:33:01:
8f:db:4d:84:92:48:c4:e3:c2:01:c2:c7:c8:60:51:
c7:29:06:a2:bc:bc:27:a6:45:13:85:30:59:5e:88:
1a:26:63:71:20:54:4c:4a:89:01:ae:89:ed:b2:5a:
ef:84:a8:03:82:e4:df:1e:32:90:54:07:df:2c:e6:
43:88:91:fb:fa:b4:e7:44:a7:60:a8:ba:c9:26:d3:
1c:0b:19:ea:b7:c0:97:31:44:04:ca:85:28:db:b1:
92:73:4b:c1:9e:5f:d6:bd:22:2e:0e:e1:f0:37:aa:
60:d3:b9:80:e8:26:6c:e1:9a:53:b1:02:1d:d8:72:
7e:07:04:82:3a:18:81:00:b4:5e:9d:18:fc:8d:39:
2d:ae:6f:c0:fb:c3:8f:80:41:92:86:c2:f6:30:d9:
02:49:cf:1f:db:1b:b6:5b:a0:a4:44:ed:52:ff:bb:
b3:f9:db:27:9a:35:83:7d:ea:d1:30:ae:6b:ac:3b:
ba:d8:f2:17:e8:4e:10:4a:54:90:22:49:0b:54:e4:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EE:DF:91:8E:65:82:DA:4C:5C:F5:49:0C:F4:1A:F8:38:FF:F4:4D
X509v3 Authority Key Identifier:
keyid:1A:59:E9:A3:FC:3F:B5:B0:D5:82:05:6A:3B:24:55:3C:56:BD:27:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/3e7fkY5lgtpMXPVJDPQa-Dj_9E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.46.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:cf:4e:9e:42:fe:3d:fe:b3:cd:2d:c2:6e:51:ef:f9:c3:40:
45:80:a3:f6:a9:1f:1e:f4:9d:67:ae:a9:29:d3:f7:92:17:82:
ea:93:8e:ef:19:d5:02:e2:0d:b6:05:ca:20:26:62:3c:24:09:
77:94:0d:bd:60:fa:22:84:a2:91:20:81:3c:07:9a:d4:b4:4a:
5f:e6:93:70:db:db:80:0e:79:b0:ad:c9:e2:2d:67:33:43:9c:
0b:38:7a:b5:2d:ab:6a:d5:de:f8:b8:bc:85:cf:d8:18:dd:a9:
d2:e0:cb:91:ce:5c:4e:fc:25:8d:c5:1d:21:b2:11:27:9e:2c:
90:20:f9:74:5e:fb:e5:e9:65:e7:01:d7:f4:43:84:e5:47:9e:
68:67:27:b6:6d:15:d6:90:4a:c6:82:c1:6f:59:ab:3c:49:e9:
d2:7a:40:84:47:3b:d1:f2:2e:bc:45:4f:a3:2a:4e:08:f2:6b:
c1:36:9a:d7:56:af:43:de:00:33:41:28:61:ee:31:89:a8:97:
37:78:42:48:3a:47:18:31:31:4d:0d:47:d4:74:ed:aa:1f:e3:
1f:1e:8d:87:d0:fd:cb:cb:0a:bb:53:03:71:bb:d5:c7:43:76:
b6:b6:96:6d:3d:d3:51:2b:d4:36:fd:5e:d4:d7:d5:ba:87:70:
83:1d:6a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:02 2024 by rpki-client on console-fra.rpki-client.org