Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rOnUFFSW9p1ryf9xGzo0m2ywyd0.roa
File: rOnUFFSW9p1ryf9xGzo0m2ywyd0.roa (raw, json)
Hash identifier: 4zbxP0pZxFnR2o06tdwnT9vUPNqTsUCGysktystvMZM=
Subject key identifier: AC:E9:D4:14:54:96:F6:9D:6B:C9:FF:71:1B:3A:34:9B:6C:B0:C9:DD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192C822330C60F90E119D4D43256CD1597E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rOnUFFSW9p1ryf9xGzo0m2ywyd0.roa
Signing time: Sat 26 Oct 2024 09:22:17 +0000
ROA not before: Sat 26 Oct 2024 09:22:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 85.204.22.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c8:22:33:0c:60:f9:0e:11:9d:4d:43:25:6c:d1:59:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 26 09:22:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ace9d4145496f69d6bc9ff711b3a349b6cb0c9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:13:5f:8e:ae:d4:f9:a0:d6:d0:a3:43:8f:
18:a3:a2:dd:2d:f2:de:c7:60:39:b9:85:54:a4:10:
6a:6b:39:0f:27:a8:37:75:8c:b8:53:a2:b9:6e:3c:
67:2a:93:27:19:a5:63:0a:ac:b8:ba:bb:f2:b8:0c:
d5:52:89:e6:8f:b3:5c:90:88:bb:89:90:5e:be:80:
37:62:48:bc:39:b5:99:b4:88:bc:70:0b:b2:75:3d:
37:5a:2a:cb:83:40:fb:c9:7c:95:6a:51:9e:4c:e3:
90:7c:a5:3b:a8:40:8e:38:f1:77:e9:9e:ba:c6:e4:
89:4a:f6:c5:3f:7f:89:95:ba:64:a3:fb:3e:b1:05:
92:f0:51:da:31:c4:54:56:28:c1:62:87:ab:97:00:
47:41:3f:f9:ed:55:7a:50:64:fc:b9:35:16:10:c0:
6a:57:03:fc:2c:30:03:39:e2:8e:0d:bf:03:c7:36:
44:19:44:4c:0f:01:15:ab:07:26:c0:f2:3c:06:fc:
cd:dc:8c:2f:c0:03:e4:c6:b1:d5:9e:d1:6d:99:46:
2e:6e:36:f6:60:0e:8a:8e:8c:bd:3b:5c:3d:ed:2e:
9c:fb:3f:46:ca:53:b4:a6:e5:19:df:aa:64:45:0c:
c7:bd:8d:eb:b8:3b:32:7f:4c:65:93:87:f6:e7:9c:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E9:D4:14:54:96:F6:9D:6B:C9:FF:71:1B:3A:34:9B:6C:B0:C9:DD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rOnUFFSW9p1ryf9xGzo0m2ywyd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.22.0/24
92.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
79:68:65:39:68:54:45:6b:26:eb:96:3f:a3:e1:03:ae:ff:01:
e7:a4:4e:95:a7:95:13:40:fa:a0:63:e5:11:be:ac:e9:47:07:
b1:cc:c5:26:37:5d:80:30:b4:15:5c:40:33:5b:a9:d8:71:4a:
95:12:8a:43:7b:d3:0b:18:df:6c:3d:d5:b1:d5:40:e0:e1:0d:
ea:8b:c1:d8:90:3e:fa:93:48:e1:71:bb:95:32:53:6a:a0:2b:
0a:26:fb:8c:7a:db:7a:e6:f8:43:ee:28:89:36:b6:3b:fc:5f:
9c:bd:72:19:34:c1:e3:c5:a8:bf:11:44:fe:07:5b:32:3f:1b:
3e:a7:96:2d:6a:c7:c8:22:c6:9a:e0:82:49:0a:c9:e7:af:35:
ad:ba:67:e6:ab:b6:7c:5f:5f:a7:c1:7e:18:a4:28:8d:bf:d5:
14:11:e1:dc:e6:b1:c3:02:d9:41:a7:98:5c:c8:a5:ab:e1:5c:
f6:3a:f6:bb:a1:98:1e:7b:78:29:5a:ab:90:b7:a6:3c:39:90:
6c:bd:ec:48:db:21:bb:5f:ed:17:62:15:6c:6e:34:f5:8b:7d:
7c:87:bb:66:9f:ed:1a:a0:fd:a7:bc:49:28:2b:97:aa:95:10:
69:a1:a5:95:f4:52:96:6c:4a:b0:c9:89:57:6d:5a:8d:9f:0d:
7c:7a:97:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:14:16 2024 by rpki-client on console-ams.rpki-client.org