Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_ooCmsp7_7rTZrzQs1R8HpaCIIQ.roa
File: _ooCmsp7_7rTZrzQs1R8HpaCIIQ.roa (raw, json)
Hash identifier: 5XwKcBYxgHFiXRiqhg6fcjr+NNzaHp1sl8wm45WL3SI=
Subject key identifier: FE:8A:02:9A:CA:7B:FF:BA:D3:66:BC:D0:B3:54:7C:1E:96:82:20:84
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192227F1D8ECD444585C315ACD8DAC2E2FB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_ooCmsp7_7rTZrzQs1R8HpaCIIQ.roa
Signing time: Tue 24 Sep 2024 05:26:48 +0000
ROA not before: Tue 24 Sep 2024 05:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214209
IP address blocks: 94.177.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:7f:1d:8e:cd:44:45:85:c3:15:ac:d8:da:c2:e2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 24 05:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe8a029aca7bffbad366bcd0b3547c1e96822084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:17:c0:42:99:0e:cb:30:f2:96:31:63:12:
7c:ee:7f:bd:18:aa:a2:6d:5c:6d:d1:d0:c3:b1:41:
c3:bf:be:5c:66:3c:f8:a6:65:0e:19:12:d0:07:f7:
24:ef:5b:26:d3:5b:78:9c:3a:b8:93:94:e6:69:01:
7e:4e:2f:8e:a8:be:63:f8:88:67:18:09:b9:db:5d:
03:00:80:ba:73:3a:c6:59:d7:89:fc:bf:c7:41:31:
22:68:b0:5a:6d:ff:b0:ce:37:ec:d0:12:ef:50:1c:
52:c4:98:f5:14:19:eb:34:3d:9b:57:06:39:59:e9:
a6:44:d8:e5:89:9c:40:8f:b8:b4:8a:e5:78:97:40:
c8:43:63:2c:3c:bb:3c:8b:7a:d9:ac:2b:9c:4b:94:
32:ad:4d:bd:ad:22:fa:b5:f1:f8:52:e6:3b:e9:5f:
64:5c:eb:dc:3f:7d:f8:b3:e9:96:c8:58:01:be:73:
5d:3e:86:fb:fc:e7:28:55:4e:cb:fa:fc:5f:d4:1a:
7d:10:d3:fd:db:3d:e2:83:7e:6a:75:6d:18:35:b1:
d1:aa:6f:f1:ac:a2:8e:de:3f:88:2e:01:1c:6d:c3:
68:c3:68:a2:24:94:17:83:f8:75:d2:eb:cf:dd:20:
6f:4d:82:e0:26:32:9d:5a:ea:fb:70:ee:de:aa:36:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8A:02:9A:CA:7B:FF:BA:D3:66:BC:D0:B3:54:7C:1E:96:82:20:84
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_ooCmsp7_7rTZrzQs1R8HpaCIIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d6:a4:e2:82:31:0d:b3:fd:ab:33:e3:00:27:f2:cb:e5:e5:
88:fa:48:74:54:f9:9b:2e:fc:ec:df:0a:10:71:df:8d:c3:f3:
ad:4e:cb:18:f9:86:eb:61:29:e0:6a:52:72:7a:3c:f9:9a:a0:
71:da:fd:c9:c5:ef:05:a0:6f:5a:24:23:1f:62:44:eb:45:3a:
c3:d9:a4:d1:38:81:56:40:27:ac:38:69:d2:7a:db:ff:73:e4:
a3:3e:e0:c5:91:d7:55:69:95:9d:58:c7:18:f9:29:98:91:1a:
c6:61:52:0a:47:da:c9:da:2b:5e:22:47:21:d9:97:e2:82:a4:
85:97:6a:19:6b:60:2c:06:07:e6:60:4c:d2:ff:1b:6f:c2:e6:
a0:e8:7a:27:55:a9:12:98:87:59:7c:87:ea:02:de:e8:5a:68:
9a:07:dc:cd:bc:89:99:15:13:63:0a:df:65:42:af:df:b6:8e:
de:8c:05:70:11:5a:c0:cd:15:9c:95:59:06:3f:a2:52:fd:05:
2f:3d:3c:c3:b4:d2:74:53:c7:f7:1b:f9:23:2f:dc:da:f4:db:
a6:96:69:d5:d2:5c:19:88:a2:5d:af:14:09:f4:8f:a9:10:bc:
03:a0:56:e0:5f:e1:81:73:84:38:43:22:1e:d0:57:90:05:00:
d6:b6:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:51:07 2024 by rpki-client on console-ams.rpki-client.org