Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/l3gV9CeMMuts7AcJ4xmW0hcA8Lo.roa
File: l3gV9CeMMuts7AcJ4xmW0hcA8Lo.roa (raw, json)
Hash identifier: Xvk7hPPe7cf2uPelWIsLigJaTVL9bZJZ8tIYVjH18CM=
Subject key identifier: 97:78:15:F4:27:8C:32:EB:6C:EC:07:09:E3:19:96:D2:17:00:F0:BA
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 018CC64AF6DD65AAAD4DF16265D1493B2B06
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/l3gV9CeMMuts7AcJ4xmW0hcA8Lo.roa
Signing time: Mon 01 Jan 2024 18:30:50 +0000
ROA not before: Mon 01 Jan 2024 18:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61024
IP address blocks: 185.124.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f6:dd:65:aa:ad:4d:f1:62:65:d1:49:3b:2b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Jan 1 18:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=977815f4278c32eb6cec0709e31996d21700f0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:87:ff:c7:10:07:26:70:28:64:94:b3:5a:aa:
29:54:e3:c3:1a:d4:f6:b4:55:88:a9:c4:1c:af:2e:
4c:2e:e1:aa:23:86:3d:f6:55:07:29:cd:7f:c5:64:
fd:e8:29:bf:fd:6a:a1:e8:fa:24:44:b9:e7:2b:5b:
f1:91:60:18:bb:06:89:b1:0b:05:bc:31:da:15:15:
4e:a6:6d:cf:b2:ed:f8:1a:7d:c9:b3:41:ea:72:66:
0f:31:51:ac:65:ea:81:48:31:48:78:0d:e8:62:c4:
87:1d:6e:da:22:17:39:24:03:d6:3b:4c:57:cd:e6:
36:07:56:62:8d:ea:ec:0c:65:77:eb:2a:1d:b6:d1:
09:5a:fc:0e:91:13:9d:25:8a:0e:64:dc:c5:ef:aa:
8c:91:79:aa:bd:1d:9e:ac:91:47:de:e2:8a:95:f0:
e7:30:e3:bb:d3:b7:4c:43:b8:de:c5:12:6c:9f:ad:
bd:51:d3:30:29:b7:ef:1e:04:24:8d:56:88:57:70:
f7:d6:62:84:ac:c5:96:02:a2:d2:94:33:fc:9a:ce:
e2:42:0d:06:68:03:48:4f:a8:d0:23:ff:9d:16:dd:
af:66:4d:83:8e:75:fa:40:3f:9a:af:df:35:ad:a9:
30:25:46:2c:2a:bc:9a:46:d2:2f:3e:0c:f4:fa:d4:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:78:15:F4:27:8C:32:EB:6C:EC:07:09:E3:19:96:D2:17:00:F0:BA
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/l3gV9CeMMuts7AcJ4xmW0hcA8Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.160.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:8c:ef:77:08:99:fa:f7:f1:ec:e7:97:4e:6c:9b:5a:d6:c2:
aa:ff:6b:9c:9d:ef:27:92:0c:cd:55:09:ec:35:0f:30:ef:77:
47:42:22:b1:22:fc:85:c6:79:0d:31:49:86:91:31:c0:8c:84:
e1:c8:83:88:05:94:b0:20:e8:a8:aa:ef:5b:5e:0a:16:86:4e:
18:03:1b:de:90:1a:b8:27:56:e7:2e:16:74:79:83:74:59:39:
8e:73:73:e3:5c:62:26:04:2d:42:99:45:47:39:0a:a9:7f:77:
ee:a5:bf:11:11:31:04:59:d7:2e:5b:5c:55:6e:3f:0e:a6:02:
73:b1:92:7a:a0:52:d5:4e:1d:73:08:4c:ca:da:8c:6e:33:96:
d2:8b:b9:7c:cb:02:78:89:e6:7b:ec:b5:ff:46:19:0d:c2:31:
ab:c3:8d:78:1b:de:89:6f:43:8a:e3:15:e5:1a:3a:9b:24:63:
83:e4:68:a7:68:e7:29:21:f1:65:3a:75:4b:ea:54:24:7b:3d:
10:3b:74:55:a8:ba:bc:be:b8:cc:14:0f:01:5d:4a:45:d6:fd:
b1:d9:29:d9:32:1f:2a:5f:1c:e8:e5:1c:ae:3e:50:0f:95:e7:
76:95:cc:62:06:20:ec:25:88:a3:1e:b0:7b:16:56:fc:6e:53:
a3:40:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:23 2024 by rpki-client on console-ams.rpki-client.org