Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RRnHnTmlgUcpHBC-knv4wywcdYI.roa
File: RRnHnTmlgUcpHBC-knv4wywcdYI.roa (raw, json)
Hash identifier: CyOte0wavOWhVSx2/j15xP53/sgey9rJGYPEhXMJSVg=
Subject key identifier: 45:19:C7:9D:39:A5:81:47:29:1C:10:BE:92:7B:F8:C3:2C:1C:75:82
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01917622E6FDA44295010611DA35B50F209C
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RRnHnTmlgUcpHBC-knv4wywcdYI.roa
Signing time: Wed 21 Aug 2024 18:11:24 +0000
ROA not before: Wed 21 Aug 2024 18:11:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57724
IP address blocks: 185.149.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:76:22:e6:fd:a4:42:95:01:06:11:da:35:b5:0f:20:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 21 18:11:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4519c79d39a58147291c10be927bf8c32c1c7582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:e3:c3:e4:e7:cc:d6:dc:2a:8a:40:1f:24:
8e:1a:2a:44:1a:1e:5f:04:95:9d:8c:d4:ff:fa:b6:
f9:65:e9:14:10:5b:d4:d2:78:0e:3e:ed:07:d1:e1:
a5:8d:37:d4:43:bd:a4:4b:66:f6:b0:fe:41:f0:a4:
e0:6d:80:13:a5:d0:95:3a:bc:06:74:b9:00:d6:4a:
11:38:c7:0d:8e:12:bf:19:9f:e7:14:f2:af:f6:20:
96:1b:b7:13:b4:de:19:74:68:b3:2c:86:0d:87:57:
02:36:36:7b:05:9a:b1:30:1b:61:8e:df:35:f2:28:
ab:68:3d:df:79:2d:70:73:3f:1e:26:76:df:bd:1b:
b5:1b:93:3e:d7:2d:1b:47:56:33:6f:af:92:5f:19:
23:41:46:65:18:4d:2c:c5:94:ed:3a:76:48:e8:f6:
e1:a9:91:2f:e4:7e:01:77:88:b4:98:04:63:33:03:
7b:5f:bd:e7:eb:88:ce:9c:04:f8:05:31:50:b6:a5:
ac:f9:78:40:1b:91:ab:af:e6:ba:c7:3f:7c:14:24:
06:f0:17:95:d5:ef:a3:fc:70:91:fd:01:d5:4f:62:
a0:12:c6:bd:17:09:4a:32:cf:d5:6a:90:7b:e3:29:
5e:d6:3d:7e:35:9a:c8:b4:8c:8b:59:f1:84:68:c7:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:19:C7:9D:39:A5:81:47:29:1C:10:BE:92:7B:F8:C3:2C:1C:75:82
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RRnHnTmlgUcpHBC-knv4wywcdYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:8e:96:58:b1:ce:fb:7c:56:17:d0:e9:6a:95:cc:f6:d9:34:
a8:1e:cb:6a:33:31:85:24:87:c3:09:bd:c6:be:1e:36:8b:cf:
18:ee:d8:75:f3:ea:77:30:e1:51:20:37:49:78:75:6a:8e:09:
5f:9b:9c:f7:d4:a2:d1:23:c7:18:04:29:5a:bd:7e:10:11:68:
ff:2b:e9:a3:93:08:76:61:d6:90:f0:c2:84:3f:f4:12:82:5e:
4e:9c:93:18:69:a9:ff:34:74:ee:6b:1c:73:fb:bf:8e:bd:4d:
5c:46:d4:d9:b4:d0:40:12:f1:28:e5:87:db:01:55:de:a4:79:
d6:b8:07:55:98:c0:3a:7f:53:3c:54:47:35:40:c7:bd:e5:43:
fb:b7:a7:17:c7:3f:48:f9:0f:04:1b:a6:93:81:3c:86:7c:f9:
e2:0c:71:ca:17:d6:ff:8e:f0:91:6c:66:87:34:66:3d:44:da:
f8:b9:ff:cc:75:41:1a:7d:42:6d:98:77:a3:7e:3c:7e:49:1a:
ab:88:f4:d1:60:54:a8:d8:eb:51:27:e8:85:5f:0d:53:72:80:
66:4f:10:93:11:b2:80:fc:4a:95:95:8f:06:fb:cf:03:ca:9d:
c0:e2:40:11:58:eb:a8:3f:42:8c:2d:dd:ce:c9:a7:3a:6b:41:
9d:77:3d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:03 2024 by rpki-client on console-ams.rpki-client.org