Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/r-Z401v1F3SVlim8s9mMwMTrfiM.roa
File: r-Z401v1F3SVlim8s9mMwMTrfiM.roa (raw, json)
Hash identifier: ewy7/zKRPiOw2pi5Mz7CrDZ4E5KQpFRHDQoWPO5Lu1k=
Subject key identifier: AF:E6:78:D3:5B:F5:17:74:95:96:29:BC:B3:D9:8C:C0:C4:EB:7E:23
Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial: 01912794207109638EA3E3681AB6298CACBD
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/r-Z401v1F3SVlim8s9mMwMTrfiM.roa
Signing time: Tue 06 Aug 2024 12:05:04 +0000
ROA not before: Tue 06 Aug 2024 12:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50949
IP address blocks: 84.23.46.0/24 maxlen: 24
84.23.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:94:20:71:09:63:8e:a3:e3:68:1a:b6:29:8c:ac:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Validity
Not Before: Aug 6 12:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afe678d35bf51774959629bcb3d98cc0c4eb7e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:30:8e:78:1c:44:c5:54:0c:52:05:fa:92:
32:02:ce:42:0a:79:b2:11:90:e6:e7:a9:81:ec:03:
d8:f9:ba:8d:74:21:03:2e:f8:f3:e3:6e:c1:fc:97:
a9:d3:59:2b:56:f8:f5:39:41:33:a7:39:0c:89:5e:
69:12:ba:9d:cf:68:1a:93:2e:dd:f4:e1:73:60:7b:
9e:df:bb:af:da:82:8e:c0:bc:43:1d:e0:90:9b:23:
86:52:d3:df:59:61:50:e4:ec:55:82:ca:e8:44:e5:
c7:b8:87:88:d5:dc:0e:e4:12:ef:95:26:78:4b:72:
88:f7:d6:0b:7a:67:11:fd:2f:e2:a0:c5:3c:b9:13:
69:e1:8c:cc:ce:0b:f8:1e:6c:c8:f7:d7:02:05:ed:
03:a2:b3:40:5c:8b:49:04:41:85:cd:57:f3:c9:4a:
ce:85:85:f9:fd:b0:57:1f:7b:ae:54:bb:32:23:2a:
ce:11:67:ba:66:2c:f7:b2:d5:32:f7:48:85:83:0f:
d9:f5:ea:f5:d4:6b:27:c7:5f:b1:77:41:20:ef:95:
05:20:6c:d0:a7:65:97:38:f4:6b:05:ab:b6:2c:2d:
1e:af:ff:79:67:ea:e0:fb:d3:a0:35:57:79:92:f7:
91:b4:2f:c9:77:9b:e3:e2:f3:51:34:9e:b7:45:3a:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E6:78:D3:5B:F5:17:74:95:96:29:BC:B3:D9:8C:C0:C4:EB:7E:23
X509v3 Authority Key Identifier:
keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/r-Z401v1F3SVlim8s9mMwMTrfiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.23.46.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:50:26:52:bb:f6:c6:e9:e9:ab:a4:db:96:ea:d2:0e:e8:b4:
6d:91:35:c2:2a:85:b6:2b:9a:1f:f3:fe:9a:a1:df:c7:33:9b:
29:36:16:9c:05:92:43:06:53:6b:a8:e9:fb:29:22:8d:fe:5a:
20:9e:f8:7e:0a:5d:54:72:5e:6c:d5:b5:d6:0b:37:93:e1:18:
62:4f:11:67:40:62:a9:43:ba:a4:cd:14:20:65:5e:d4:a5:20:
fe:19:3c:47:54:5d:41:53:83:d9:2f:84:9b:3a:0d:61:46:84:
c0:31:03:51:8b:c2:80:0c:d4:84:61:71:b9:40:8a:fe:c8:15:
07:c4:dc:6d:a1:dc:88:8e:00:04:a5:48:84:9b:e8:4a:e8:3f:
9b:27:fe:50:b2:80:5f:4b:8d:95:64:9f:b6:da:77:3b:d6:89:
5f:57:be:4e:c3:78:26:48:c3:40:07:5d:42:b1:d0:00:4e:6c:
9d:bf:dc:21:c4:54:af:c1:85:83:2a:28:eb:10:47:7a:9c:fc:
c9:49:26:7e:06:bb:d3:c2:1c:3c:a4:d1:10:ad:3c:ef:13:61:
f5:3c:c9:7c:71:f9:41:04:aa:eb:eb:36:00:3a:ed:85:7e:62:
9f:1c:cf:cc:f5:37:8e:2c:32:ef:f4:90:00:ca:8b:08:37:35:
bf:a4:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:35:54 2024 by rpki-client on console-ams.rpki-client.org