Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/26bchQcVWqJKm6q-PkuM33kRRt8.roa
File: 26bchQcVWqJKm6q-PkuM33kRRt8.roa (raw, json)
Hash identifier: OtDb4yutcULPYJREydCMkRuk2lF4T5O9+79f/eUKIMM=
Subject key identifier: DB:A6:DC:85:07:15:5A:A2:4A:9B:AA:BE:3E:4B:8C:DF:79:11:46:DF
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 01922ACECC1E94225E55D428D1F898E1CF2D
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/26bchQcVWqJKm6q-PkuM33kRRt8.roa
Signing time: Wed 25 Sep 2024 20:10:48 +0000
ROA not before: Wed 25 Sep 2024 20:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 185.124.84.0/24 maxlen: 24
185.124.85.0/24 maxlen: 24
185.124.86.0/24 maxlen: 24
185.124.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2a:ce:cc:1e:94:22:5e:55:d4:28:d1:f8:98:e1:cf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Sep 25 20:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dba6dc8507155aa24a9baabe3e4b8cdf791146df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:ef:40:3e:cf:13:04:1f:44:dc:d8:4d:51:
4c:c8:bd:dc:83:a7:9d:49:86:a5:a8:a9:3a:99:5b:
c3:c5:45:52:92:ab:a1:78:09:73:63:60:64:4c:52:
10:80:d6:66:69:87:15:57:27:75:69:cb:db:4c:17:
25:44:c2:11:33:4f:3f:e8:61:9e:84:6c:45:da:8f:
05:5a:03:f3:8b:c7:e1:3f:62:57:b8:1a:86:26:4e:
e0:2b:2a:6e:a2:b8:53:d5:25:80:12:4e:52:11:ef:
2d:d7:26:92:73:20:df:1c:51:72:cf:52:b8:92:7e:
c9:8c:a9:e6:d4:26:d0:68:5b:0c:bd:3f:df:70:ad:
a5:28:1d:30:f3:a2:7e:6e:02:78:ed:5c:72:77:70:
fa:a8:b3:7c:5c:fd:40:b7:f7:ed:8c:ca:03:3a:dc:
49:ab:7a:0f:12:82:7a:18:e2:7c:f5:c3:07:7f:d9:
b6:dd:6f:f7:37:e4:63:4d:73:17:88:19:bd:e6:65:
2a:8a:81:12:e0:19:1b:46:3e:0c:9c:1f:fd:0b:5f:
06:59:6f:73:c2:a3:b1:2c:76:a1:cc:56:7c:49:6b:
0c:77:fe:9a:c6:f8:13:df:ad:fd:0c:f8:7b:a6:79:
34:16:fb:99:d5:8e:1b:5d:bf:55:03:90:b3:fc:65:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A6:DC:85:07:15:5A:A2:4A:9B:AA:BE:3E:4B:8C:DF:79:11:46:DF
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/26bchQcVWqJKm6q-PkuM33kRRt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.84.0/22
Signature Algorithm: sha256WithRSAEncryption
46:f7:48:82:ed:90:2f:4e:a7:b9:1e:ab:6a:fc:8a:01:33:6a:
6b:05:ed:99:a7:36:3c:53:e6:72:0b:f0:97:ff:e0:fe:92:f3:
96:ba:d2:91:ed:74:32:fc:57:ad:a5:e8:31:21:d5:65:fd:f8:
4b:80:16:3e:ff:e4:1f:d5:14:ad:4a:29:d7:ac:e0:34:c1:e3:
d1:57:a3:63:98:ed:c9:d9:bc:ed:bc:48:22:ce:c7:19:fb:e5:
c3:24:82:04:97:13:c4:a2:11:51:e8:f4:3f:e7:64:74:10:74:
44:d3:b3:bb:f6:9d:4d:c3:af:df:2b:9d:37:21:ea:84:1c:45:
8f:d1:61:2d:e4:66:93:28:1b:49:0c:bb:25:3d:b0:35:30:5a:
40:a7:c7:3f:00:70:b3:f5:1a:9d:9e:48:98:9e:c0:5b:a1:68:
6d:ae:df:06:67:2c:cc:66:46:17:f0:ec:9b:fd:04:0c:18:fb:
c5:f4:32:f7:66:b6:4c:64:3e:bd:0f:75:95:ff:a4:7b:3c:9c:
e9:bc:7c:1a:b9:a0:17:2c:ed:b1:49:c7:a9:d7:95:6a:70:bf:
37:80:09:ed:00:64:dc:cf:20:41:3c:f9:04:ee:56:1c:dc:43:
e3:0b:24:eb:60:6b:62:45:25:2b:e6:67:93:f2:ac:70:c3:4f:
a0:c2:c6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:06:34 2024 by rpki-client on console-ams.rpki-client.org