Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pqoW2bNpZxMRCAWJQFtv1MU4znw.roa
File: pqoW2bNpZxMRCAWJQFtv1MU4znw.roa (raw, json)
Hash identifier: LYKgdRkPgCeYE6mKVHtHf5erOw9fDtxf8W8tP1mkBBM=
Subject key identifier: A6:AA:16:D9:B3:69:67:13:11:08:05:89:40:5B:6F:D4:C5:38:CE:7C
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019007751EC24A2DC507A254EDCBD64D01D5
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pqoW2bNpZxMRCAWJQFtv1MU4znw.roa
Signing time: Tue 11 Jun 2024 13:20:34 +0000
ROA not before: Tue 11 Jun 2024 13:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214727
IP address blocks: 80.242.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:75:1e:c2:4a:2d:c5:07:a2:54:ed:cb:d6:4d:01:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 11 13:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6aa16d9b369671311080589405b6fd4c538ce7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:2a:83:9c:36:b9:9f:3f:ed:72:a9:74:48:
e3:00:c7:3d:53:bb:23:39:fc:19:94:4e:61:76:29:
be:d9:8f:95:13:3e:0c:38:6b:64:15:17:fd:11:10:
5e:16:e9:b5:90:15:6d:c7:43:0c:ea:66:65:f8:06:
f2:0e:d9:2c:05:d1:13:30:5b:c3:b5:a4:7a:1c:ff:
6a:5b:62:a5:e4:da:1f:8b:24:c8:0a:e4:6c:95:e7:
f5:42:ca:da:4b:4f:ae:b0:6d:15:bc:7c:8f:13:57:
01:df:21:5d:97:2c:1d:3a:9a:91:5c:5a:8c:b4:88:
cf:d2:ba:ba:45:e3:09:bb:4f:77:43:9a:85:62:ea:
21:f8:f3:ff:1e:06:8a:e7:3b:2e:a3:32:2c:63:82:
bc:b8:ca:01:50:9a:89:56:76:85:8e:86:5e:dc:f8:
2e:36:17:4e:7e:fd:bc:d2:6e:ec:2b:da:38:f7:b9:
40:be:d4:48:b3:b9:4a:39:a2:14:1e:af:7f:c5:f1:
77:ed:e4:75:47:f7:0b:e8:dc:be:f5:fd:fd:33:c5:
e3:b3:9f:33:ce:3e:d3:60:d6:b9:27:96:07:c0:bc:
90:74:46:87:23:8e:5d:84:75:59:f5:4a:9d:0d:1f:
91:6b:b0:b2:14:f5:16:9f:c9:cb:c6:e3:ab:96:67:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AA:16:D9:B3:69:67:13:11:08:05:89:40:5B:6F:D4:C5:38:CE:7C
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pqoW2bNpZxMRCAWJQFtv1MU4znw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f2:1a:95:19:f2:2d:01:53:42:2a:35:22:fe:3e:75:90:36:
9b:56:cd:bb:da:22:37:0e:a3:92:81:59:0e:a1:ba:70:56:48:
2f:00:67:7f:be:7c:f9:f0:eb:2f:18:0b:5b:b4:4b:a5:c1:0f:
71:b0:e8:a2:31:dd:23:42:0d:4a:ba:0c:93:01:db:48:0e:8e:
62:45:48:3a:34:9f:8f:58:13:90:f3:a8:74:de:af:51:f1:c9:
90:c7:da:75:2e:be:1b:2b:b3:27:f3:0a:ac:da:6d:94:97:0a:
59:0f:c8:f8:23:a5:c3:fd:37:a4:4d:38:ab:8f:1d:f9:86:77:
62:b0:03:87:ca:15:de:4a:ca:1c:5d:aa:12:9d:35:af:14:69:
a7:78:5e:b3:35:b6:bd:c4:cb:d2:57:f1:6e:ac:13:34:98:4b:
fd:27:0b:f2:ef:50:90:2e:e0:1e:a7:0c:f1:06:ec:7e:6b:84:
84:ce:ed:9a:f2:56:71:71:0e:d6:d1:ac:6f:f3:1b:f7:db:97:
49:29:33:53:01:91:2a:99:c9:a0:a4:5f:e7:f7:b0:80:06:7c:
70:15:d9:8a:26:9f:d4:b0:e7:bd:0e:e0:26:73:43:05:f5:0a:
ac:35:2b:0f:6d:3d:36:d7:c1:51:85:4f:fc:c2:60:d0:33:71:
e4:aa:fc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:18 2024 by rpki-client on console-fra.rpki-client.org