Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/k7d3LA1YIWqnahmt-7x8f3_nXM4.roa
File: k7d3LA1YIWqnahmt-7x8f3_nXM4.roa (raw, json)
Hash identifier: Ut5wyTFNMnOguvZ/IXfxpTL5+wEhKu4r94ZXUtHnpvA=
Subject key identifier: 93:B7:77:2C:0D:58:21:6A:A7:6A:19:AD:FB:BC:7C:7F:7F:E7:5C:CE
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0192B797E2113D24B6FF0CCEC3A16EC4EFEB
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/k7d3LA1YIWqnahmt-7x8f3_nXM4.roa
Signing time: Wed 23 Oct 2024 04:17:17 +0000
ROA not before: Wed 23 Oct 2024 04:17:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42708
IP address blocks: 198.55.30.0/24 maxlen: 24
212.78.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b7:97:e2:11:3d:24:b6:ff:0c:ce:c3:a1:6e:c4:ef:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 23 04:17:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93b7772c0d58216aa76a19adfbbc7c7f7fe75cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:57:3c:34:4e:76:c9:56:56:74:ce:20:af:
4c:a6:2f:26:4c:e0:36:06:fc:cb:3b:79:4e:c3:6b:
27:e6:16:6b:2e:e7:ec:3d:ad:2f:0b:c7:39:03:25:
63:c8:ae:0c:04:15:24:12:b6:49:81:22:14:ee:8c:
52:b0:f7:c4:7d:41:e9:5f:d9:32:35:14:9b:ce:11:
8c:48:a3:73:1e:62:01:2f:48:5f:da:c9:8e:03:80:
e0:12:d4:8e:70:51:33:ae:b1:6e:94:c5:e3:ba:84:
e0:20:a5:bd:ca:94:ff:fc:ce:26:2c:9e:f1:33:36:
7f:94:ee:b7:ea:eb:4f:96:a7:57:75:af:21:98:26:
93:58:d8:15:81:ae:99:5c:bc:35:cf:b8:11:f3:12:
ae:3d:32:b5:4c:2a:c2:ab:cd:9c:a9:27:d5:09:29:
28:1b:64:e8:a2:29:ef:f0:61:1e:48:8f:6e:c5:5c:
9c:84:fd:29:f6:e6:a9:1b:28:69:aa:26:10:48:37:
02:58:b7:1b:6f:e0:97:1c:21:52:6b:c5:8d:5a:88:
04:33:71:be:d3:4c:ce:7b:05:c5:35:ba:47:7f:c1:
79:06:41:88:c4:26:d4:89:2e:f4:f5:3f:d2:28:26:
59:d4:89:7d:43:fb:1f:96:07:22:b9:74:ae:7b:b5:
9f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B7:77:2C:0D:58:21:6A:A7:6A:19:AD:FB:BC:7C:7F:7F:E7:5C:CE
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/k7d3LA1YIWqnahmt-7x8f3_nXM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.55.30.0/24
212.78.244.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ef:1b:8c:bf:33:d8:57:87:d7:26:45:0d:18:56:8c:65:86:
3a:36:d8:8e:a6:c5:e5:55:3b:42:db:2e:fb:c9:ac:60:0c:6b:
0b:30:20:a0:0c:31:2c:d3:44:52:f6:65:6a:2d:17:05:44:a2:
7c:ee:a8:95:9d:24:cb:07:ff:10:37:d9:3c:6c:8d:be:a3:2b:
08:a5:1c:d5:ca:95:f8:7f:6f:f3:9d:9b:9c:a0:14:bc:e9:b9:
0c:5c:7c:de:77:65:2a:f0:d8:f6:b3:0c:11:5d:04:c1:bd:70:
98:f4:b6:59:08:01:1c:e7:05:0a:cd:80:c2:21:0d:ed:b1:db:
1e:7c:54:8a:6c:d3:ef:1d:38:7d:42:75:76:77:08:da:77:61:
d9:ef:d6:64:c5:e0:67:f8:e8:a8:41:0c:cb:72:b7:44:03:89:
ba:20:73:6a:98:c2:ac:f4:b2:68:cb:70:75:c3:e6:99:62:b9:
4d:ca:ce:ee:e3:79:09:ec:d4:69:9b:26:07:80:77:ce:0f:81:
30:0a:fe:5e:c0:32:a1:92:f3:91:9c:ff:46:22:d0:6c:ee:6b:
05:11:df:f9:d5:54:fb:d4:28:08:bd:ca:7b:28:43:b0:e3:4a:
0e:42:4d:6e:52:eb:b4:b8:7d:41:a9:68:9e:1b:8f:de:01:ec:
3f:7d:02:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:09 2024 by rpki-client on console-fra.rpki-client.org