Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/A_jBf3zR3PhpDyITi2xveNZUkCk.roa
File: A_jBf3zR3PhpDyITi2xveNZUkCk.roa (raw, json)
Hash identifier: IZbsZrlKGCtqRlG2/J7t4wd+63Tmo4sA8s6ZEKnXRSw=
Subject key identifier: 03:F8:C1:7F:7C:D1:DC:F8:69:0F:22:13:8B:6C:6F:78:D6:54:90:29
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01928F0301665436BCB798AD41EBC23F3C70
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/A_jBf3zR3PhpDyITi2xveNZUkCk.roa
Signing time: Tue 15 Oct 2024 07:09:51 +0000
ROA not before: Tue 15 Oct 2024 07:09:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 95.111.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:03:01:66:54:36:bc:b7:98:ad:41:eb:c2:3f:3c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Oct 15 07:09:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03f8c17f7cd1dcf8690f22138b6c6f78d6549029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:d5:a7:ef:bb:75:bd:68:7b:8d:5d:4c:fb:
37:cb:12:e9:43:23:bb:b3:9c:0d:97:4b:f9:8b:d0:
f0:a4:06:b1:4c:ba:60:dd:d2:a4:f0:c6:ef:01:a0:
83:b0:a0:8a:45:84:e6:1b:7c:6c:72:00:62:04:83:
c5:3c:29:00:02:e8:58:90:f9:2a:08:6a:eb:3a:42:
23:e3:b7:a6:fc:a0:c3:41:4b:ea:7c:1a:42:44:a0:
f0:c4:36:54:1b:b1:69:72:e5:8a:58:7b:3c:9c:b7:
99:4c:fd:cb:14:7f:7c:46:7d:bc:c0:f8:cc:d0:48:
69:5f:41:91:c9:62:e5:5c:86:5f:52:be:98:9a:4f:
d0:1c:68:1e:f8:b3:b0:dc:11:93:39:cf:85:8c:a5:
e2:86:a1:8b:7a:d2:5a:07:e8:2c:28:4b:a1:b4:7a:
bc:44:60:9e:cd:3b:31:cc:a4:8a:6a:b6:12:65:3f:
a7:bb:92:b0:a3:b6:91:42:ea:7f:99:86:71:03:28:
e5:c9:98:8e:24:78:f2:b4:8c:1d:fe:79:0f:e2:5d:
f1:23:1d:ff:b1:fb:3a:80:e2:4e:bd:27:ae:7b:e2:
b7:b1:7b:d0:81:fc:4a:01:4a:ef:c1:45:4f:bc:52:
29:42:b1:b1:75:8c:af:d0:30:01:44:b7:d4:b0:1c:
ad:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F8:C1:7F:7C:D1:DC:F8:69:0F:22:13:8B:6C:6F:78:D6:54:90:29
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/A_jBf3zR3PhpDyITi2xveNZUkCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.128.0/19
Signature Algorithm: sha256WithRSAEncryption
72:f1:59:b9:9c:63:83:53:6c:20:d9:85:40:f1:63:3a:a1:4c:
c3:45:5c:e3:14:6f:d2:89:20:5d:73:4b:0f:6b:ec:c2:9b:49:
ba:a9:96:08:46:05:f8:3e:7b:8a:64:7b:e3:e3:e5:be:92:55:
ac:2f:6a:74:7f:86:26:c8:26:da:7c:9b:fa:18:39:f9:84:9b:
df:6e:a2:ae:f9:c2:8e:de:e6:a5:f7:9d:bc:07:ed:a6:59:ba:
43:9a:24:e4:36:bf:2f:82:61:84:ac:97:e1:87:96:2d:bb:b8:
bf:c4:18:96:ef:cf:7f:26:a8:69:80:2d:a2:f9:0c:9b:f1:d9:
1d:76:88:7b:df:45:2f:1c:f5:97:01:6d:6d:99:fe:0f:2c:81:
8e:81:ae:ad:63:6f:f7:02:ef:b8:6e:0b:42:e5:ad:f3:97:b5:
1f:f3:ad:b5:d3:69:f1:ee:50:90:a9:af:2a:65:bb:67:f3:9f:
28:34:96:92:15:33:c7:d5:ce:75:a6:4a:5e:c4:40:86:1d:77:
57:c2:98:e3:dc:63:89:f9:4b:e6:ce:bb:e1:e7:12:db:4e:61:
bd:1f:46:a9:59:8e:62:d9:4c:41:df:6c:5b:9f:c0:0f:29:df:
77:57:42:ce:65:c7:52:4a:dd:33:13:ab:70:df:66:b9:e0:9e:
10:3d:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:25:07 2024 by rpki-client on console-ams.rpki-client.org