Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/61tOqLTj93BsVG2h4dOtsd6vThE.roa
File: 61tOqLTj93BsVG2h4dOtsd6vThE.roa (raw, json)
Hash identifier: ZEnhNSzafNDQFjoYCXwyhzjzP17t5/8+eMgpNkdgfGQ=
Subject key identifier: EB:5B:4E:A8:B4:E3:F7:70:6C:54:6D:A1:E1:D3:AD:B1:DE:AF:4E:11
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01930135C6774860B25FFBF0C2A340A1172C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/61tOqLTj93BsVG2h4dOtsd6vThE.roa
Signing time: Wed 06 Nov 2024 11:22:01 +0000
ROA not before: Wed 06 Nov 2024 11:22:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215620
IP address blocks: 89.45.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:35:c6:77:48:60:b2:5f:fb:f0:c2:a3:40:a1:17:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 6 11:22:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb5b4ea8b4e3f7706c546da1e1d3adb1deaf4e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:26:6e:0a:f4:da:c9:62:08:79:66:cf:4e:
a2:24:50:0c:7d:79:48:61:b5:27:7a:37:b8:ab:8f:
4c:71:91:d6:43:64:fa:e5:74:32:e3:0a:98:a5:68:
9a:6e:5d:7c:30:51:71:ab:dc:26:8d:22:08:a7:86:
35:15:50:0b:a2:9e:0d:d7:f7:95:12:72:89:8e:cf:
e7:e2:ff:c0:8c:85:ec:e2:41:6c:db:27:15:8c:54:
de:24:8d:41:62:fa:db:0e:b7:be:cc:7d:ab:1b:9b:
22:ff:47:d9:7d:dd:6a:50:5d:68:f4:b1:68:e5:dd:
04:2d:65:83:43:8c:8d:ad:da:7f:7c:32:60:62:64:
b0:ff:5b:64:9d:84:cc:f3:bd:be:c6:fb:21:a0:68:
a1:4c:9b:c3:eb:11:74:6d:a9:18:7e:b1:c5:cf:31:
1c:12:71:99:68:1c:c6:ef:de:6b:6b:69:1b:d4:61:
5b:43:85:3d:87:35:fc:8a:bd:86:ce:1a:89:25:69:
50:02:4a:22:e6:e4:3d:89:74:1d:95:62:9f:4d:b6:
25:d9:42:8c:08:e2:be:21:fc:d7:7f:7b:db:30:a2:
91:54:a6:3a:42:e7:52:c3:d0:33:bf:13:b4:be:59:
5a:12:71:81:de:13:64:35:17:57:b6:e7:8c:bb:c8:
5f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5B:4E:A8:B4:E3:F7:70:6C:54:6D:A1:E1:D3:AD:B1:DE:AF:4E:11
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/61tOqLTj93BsVG2h4dOtsd6vThE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.44.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6a:94:66:c9:79:95:ec:cb:8f:74:75:eb:15:51:fa:8f:2a:
28:42:82:3d:63:0b:dc:7c:a8:ac:ea:ef:fb:10:e6:a8:b8:3d:
cf:a8:77:2c:d1:46:74:3f:89:b8:42:9a:44:aa:f6:c9:e7:1a:
d4:82:e3:f5:57:f6:4f:52:94:64:29:e9:fd:eb:e8:31:76:aa:
11:09:bd:4f:93:cf:40:b8:da:0d:ac:da:93:c0:79:af:66:aa:
89:f4:31:42:91:f8:05:86:4a:b1:23:cf:7e:94:cd:a7:d5:78:
76:0b:8c:38:09:99:1c:79:3a:e7:91:d7:30:b5:32:7a:c8:02:
09:bd:0a:27:d9:e7:b0:b6:bf:df:6d:6b:f5:ab:d9:a1:b1:83:
6a:e7:e5:28:d6:ff:c9:71:15:4c:da:01:76:b6:ca:2f:fc:ce:
c6:50:87:23:05:52:09:07:09:17:99:17:f0:26:2f:ec:f3:7e:
84:00:92:0d:53:c7:eb:ea:be:31:22:36:e3:4f:75:7d:d7:97:
ad:48:ef:a7:cb:b8:f3:e4:c5:f6:fb:66:5d:3d:7e:92:ac:70:
00:17:a5:c9:05:40:29:47:4e:0d:b3:76:ec:34:7d:91:90:8c:
4e:56:b5:7f:0d:82:19:88:c5:9e:da:7d:11:42:d6:14:14:b8:
63:1c:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:27:04 2024 by rpki-client on console-ams.rpki-client.org