Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/01rtrIhPqjt3mmMsBpKVaPGIOBs.roa
File: 01rtrIhPqjt3mmMsBpKVaPGIOBs.roa (raw, json)
Hash identifier: sjNe2K9xbg9DWg3ubxyUZ4BEKQZr7dKWEGKSP66HVKM=
Subject key identifier: D3:5A:ED:AC:88:4F:AA:3B:77:9A:63:2C:06:92:95:68:F1:88:38:1B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0191B137632EEB45817D4260F56FDFA0DEB3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/01rtrIhPqjt3mmMsBpKVaPGIOBs.roa
Signing time: Mon 02 Sep 2024 05:31:22 +0000
ROA not before: Mon 02 Sep 2024 05:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214577
IP address blocks: 128.0.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b1:37:63:2e:eb:45:81:7d:42:60:f5:6f:df:a0:de:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 2 05:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d35aedac884faa3b779a632c06929568f188381b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:d3:f2:53:28:81:5e:c8:b4:4e:3e:61:4a:
bb:a3:f2:8f:c2:16:f7:53:35:e6:0d:0c:10:ea:2f:
7e:14:8d:6b:84:ac:e4:28:ba:77:3e:95:9e:35:4b:
3a:d3:78:8d:d3:73:46:ec:bd:a7:43:1e:c0:b7:e7:
cd:4c:3e:f1:83:8a:c5:47:b5:56:a8:c9:08:7c:47:
8b:0d:2d:ea:5a:b2:4e:d3:91:ca:a5:dc:32:3c:12:
30:95:40:0c:34:3c:32:dd:0e:cc:99:79:d4:fc:40:
7d:6e:a2:7c:0b:a4:df:79:8c:f2:0a:75:4a:b5:e6:
3f:d1:c2:fd:60:32:81:fe:be:c1:33:5d:27:a1:3b:
5f:e4:ad:6a:5d:ae:e7:d6:61:ce:1d:e4:d4:55:59:
c1:ae:f5:44:5e:9e:f8:ac:7a:10:15:34:ac:41:43:
4b:3a:4c:bb:f5:18:ac:3c:3e:1c:d9:91:c5:9d:cf:
05:a7:72:04:75:8f:da:5a:91:d4:70:16:eb:3f:75:
be:0c:07:90:e5:73:2d:cf:d6:e7:f0:a8:a5:f5:e9:
ca:3a:ca:6a:cd:ba:2a:f4:29:25:a7:9c:97:29:f3:
ee:68:a3:c7:07:1d:3f:2f:7a:0f:07:23:c6:0c:6f:
bd:e2:9c:7f:71:e9:9e:b2:13:22:74:e7:35:f6:c0:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5A:ED:AC:88:4F:AA:3B:77:9A:63:2C:06:92:95:68:F1:88:38:1B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/01rtrIhPqjt3mmMsBpKVaPGIOBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.1.0/24
Signature Algorithm: sha256WithRSAEncryption
99:18:1f:aa:51:e9:d4:86:9b:68:24:af:4d:5a:9f:7b:31:56:
13:74:fc:6d:db:af:18:86:d8:2f:3d:ea:78:43:ab:8a:9b:23:
2c:bd:32:27:7d:39:27:42:e2:35:96:b2:6e:fe:8c:8e:2e:a9:
ef:17:b0:6b:dd:04:e3:d2:87:6f:35:9c:1e:be:f1:0f:95:fa:
55:16:e4:b8:2c:d0:0f:32:20:c8:41:c3:25:cc:04:63:0e:2d:
c8:cc:8b:47:c5:2a:eb:e1:79:9b:9f:4e:5f:09:d6:e6:82:cf:
b1:d8:3c:43:70:7b:48:a9:ca:e5:0c:04:3e:fe:ab:f9:be:43:
a9:df:3b:c2:05:8a:e8:d6:ff:46:be:58:bd:bf:d9:b1:4d:df:
87:1f:c8:02:d8:c7:a2:fa:0b:75:2c:89:cc:60:8a:f5:ea:55:
04:27:94:f9:a7:cf:d6:64:ad:57:c9:30:30:4d:07:6e:19:9f:
f1:79:52:93:f9:8c:a6:54:05:36:25:85:fe:af:25:98:42:6a:
d5:15:5e:60:7a:ee:72:58:9c:f7:e6:71:57:5e:47:eb:14:c8:
09:4e:83:5b:c0:69:c3:d3:e6:10:b5:10:35:fe:60:be:5f:98:
17:dd:2a:54:5c:ec:ca:75:f8:3a:c2:eb:ec:68:cd:56:e2:93:
2c:ea:c9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:14:36 2024 by rpki-client on console-fra.rpki-client.org