Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vxE9b4KrZDcmxcUR8Wb70r5zLMc.roa
File: vxE9b4KrZDcmxcUR8Wb70r5zLMc.roa (raw, json)
Hash identifier: Q/EtkpDkLLA/LQy/Is5/AzhMRzLSn9xfRUT7i0MrEO8=
Subject key identifier: BF:11:3D:6F:82:AB:64:37:26:C5:C5:11:F1:66:FB:D2:BE:73:2C:C7
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191526CFECA002CE4D9FD778E403EFA9857
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vxE9b4KrZDcmxcUR8Wb70r5zLMc.roa
Signing time: Wed 14 Aug 2024 19:46:00 +0000
ROA not before: Wed 14 Aug 2024 19:46:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49648
IP address blocks: 37.140.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:6c:fe:ca:00:2c:e4:d9:fd:77:8e:40:3e:fa:98:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 14 19:46:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf113d6f82ab643726c5c511f166fbd2be732cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:26:1f:9e:8d:77:aa:01:0e:09:24:1c:ff:
db:b8:35:1f:04:b9:76:1f:29:17:8b:3b:19:1f:53:
27:bc:d0:07:0b:26:a7:72:04:13:38:7d:0b:a8:86:
a9:61:0d:8c:b0:8d:5f:a5:22:ee:7a:3e:ab:c6:bd:
12:f0:5f:67:f3:fc:72:d3:99:d3:e5:5a:aa:7e:c4:
56:6d:bb:37:12:6a:67:de:74:13:cf:46:21:46:61:
53:56:77:37:df:46:30:44:76:d7:82:19:fd:fd:7b:
d3:30:ce:36:8d:5d:04:b7:7f:6f:a9:55:19:51:02:
dd:ee:93:d1:4d:23:61:47:c8:a6:f5:78:70:cf:55:
a2:3a:14:3c:92:8d:54:8f:ac:fc:ca:ce:bd:f3:f6:
61:07:6e:0c:e6:e9:c2:69:29:bc:96:40:97:90:d7:
14:1a:4e:50:13:50:ca:ce:da:d7:3d:49:25:5f:e3:
7d:79:c1:de:b8:9e:c4:06:89:51:15:fb:e7:57:98:
75:3b:bc:f5:26:d0:43:46:10:06:dd:1f:21:4b:6d:
18:da:d1:b9:36:dd:b6:42:80:fd:45:5f:1f:c1:ef:
dc:ef:30:77:b4:15:ee:4d:c9:18:b8:c0:9a:b7:15:
7f:94:e2:b7:2a:fd:21:fe:55:13:11:33:94:fe:15:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:11:3D:6F:82:AB:64:37:26:C5:C5:11:F1:66:FB:D2:BE:73:2C:C7
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vxE9b4KrZDcmxcUR8Wb70r5zLMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.245.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d5:1b:b6:08:c7:7f:90:58:5a:65:39:f1:ca:be:e0:f4:0c:
f9:e0:a8:50:53:84:45:53:d6:c5:36:4c:cc:71:ce:e2:1f:88:
be:47:26:5c:67:61:a0:22:a2:02:cc:81:f7:e9:0c:ba:d6:3c:
82:9a:44:8e:d6:ed:4f:6c:2d:33:07:55:3c:55:76:51:c0:98:
9e:e4:30:67:dd:ae:72:1a:e3:f3:6c:2c:19:20:84:72:bb:9e:
b1:dd:31:1e:a3:b2:6f:78:c8:9a:2e:7a:0c:00:ca:74:97:5f:
36:b0:20:14:0e:b3:b0:28:7c:f3:73:a5:be:ec:03:7c:71:bb:
ca:4d:ff:9f:73:ad:8e:32:e1:7d:ad:39:1c:5f:a9:66:18:da:
48:49:66:bd:10:24:40:6e:eb:07:fc:57:ae:da:c7:ed:23:f3:
cb:2b:3c:fd:b1:9b:ac:19:dd:db:87:97:e0:cd:a6:b2:de:3f:
02:ce:7c:50:df:6a:cc:c5:3b:e8:6b:62:b7:42:8b:4a:c9:66:
af:fa:5b:6f:a4:c6:e3:93:7c:9a:05:cc:7f:a2:8c:17:53:5d:
f5:7d:86:a7:53:e3:f6:f3:a0:cc:2e:95:98:29:10:3c:77:e0:
19:a2:d7:57:4b:18:05:05:da:6e:f6:92:ff:d3:d3:e1:50:0c:
ab:24:2c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:18 2024 by rpki-client on console-fra.rpki-client.org