Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rf7TJ1ixayUiGVLUn5O4N0FEk64.roa
File: rf7TJ1ixayUiGVLUn5O4N0FEk64.roa (raw, json)
Hash identifier: EgGOFHP7hBvEIv2Cq9f2qD+Ov/6IXkFpy+vIVUuSi6A=
Subject key identifier: AD:FE:D3:27:58:B1:6B:25:22:19:52:D4:9F:93:B8:37:41:44:93:AE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019055A16684B1A54F44AC618CA08985BCEC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rf7TJ1ixayUiGVLUn5O4N0FEk64.roa
Signing time: Wed 26 Jun 2024 17:39:19 +0000
ROA not before: Wed 26 Jun 2024 17:39:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 92.114.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:55:a1:66:84:b1:a5:4f:44:ac:61:8c:a0:89:85:bc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 26 17:39:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adfed32758b16b25221952d49f93b837414493ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:74:aa:ae:e0:08:8e:3b:cf:ec:31:95:35:
b8:e8:a9:68:8d:70:a2:19:3c:72:d3:24:32:a5:4f:
95:9e:16:40:a3:89:7e:54:fd:4a:a4:ac:75:c6:d3:
03:7f:3b:44:2d:62:5f:08:be:3b:3f:bf:4a:0b:b0:
0d:95:ad:78:c1:e5:2f:57:f9:43:ea:4f:78:19:5b:
a3:ef:67:8c:fd:ca:a3:fd:0d:ca:87:74:42:1a:c7:
b2:c7:17:9a:e7:bf:b9:7d:0a:b6:61:a0:8e:61:83:
d3:0f:04:9f:f8:e2:12:e9:fe:c1:73:9e:41:e2:19:
7a:e0:9a:05:99:2b:94:cd:82:5e:f6:e9:5a:65:a2:
ee:17:02:24:e3:f5:20:02:a7:15:aa:50:3b:7e:e3:
c1:64:17:28:1c:44:98:c8:f7:de:9d:ab:1b:62:40:
d6:3e:4e:3a:03:8c:cf:90:08:44:de:13:8d:08:6b:
4c:57:ab:31:8a:60:a8:34:31:7a:42:70:c3:8a:ba:
eb:a8:36:7f:26:b4:c6:33:f6:40:b2:b5:8d:b3:81:
40:5b:a0:0f:aa:e2:cc:70:da:5e:8d:65:c8:b2:43:
c8:89:1a:3d:af:0f:74:00:5f:40:95:17:5f:82:eb:
4a:41:e6:84:9d:3b:e4:45:86:45:07:c1:04:59:31:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FE:D3:27:58:B1:6B:25:22:19:52:D4:9F:93:B8:37:41:44:93:AE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rf7TJ1ixayUiGVLUn5O4N0FEk64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1c:8e:f3:bb:27:45:c8:65:69:81:c3:fa:4a:5c:54:ff:21:
a6:f5:64:1c:b1:f9:64:d7:4b:bd:d8:0f:5b:8f:c5:30:7e:3a:
89:0c:b1:01:57:13:af:72:fe:bc:0b:38:2f:eb:89:56:81:0a:
04:5d:0a:f7:df:11:52:b9:05:16:ba:77:76:dc:c6:62:66:08:
79:85:6d:57:63:52:19:04:b3:9d:a8:5a:60:46:6e:c5:90:59:
da:c4:58:8c:0b:ef:e4:87:75:03:6b:18:e0:8e:69:12:66:47:
ef:32:95:85:f5:90:7a:9a:5c:55:79:b0:ed:07:75:48:b4:c3:
08:53:60:d4:01:88:b9:98:17:48:47:69:96:81:b9:d1:ed:5d:
0d:93:01:f9:d8:4b:21:ab:77:9d:93:b6:af:61:11:ea:3c:c9:
92:9a:33:e7:8b:5d:7a:fa:1e:fb:32:0d:45:01:01:1f:3c:96:
c6:ba:f0:d3:3f:e0:47:3b:41:ad:ec:66:a4:a7:20:42:b2:53:
e2:1b:4d:e6:e9:72:33:50:af:37:fc:ec:4e:c8:19:2e:5b:6c:
8f:df:0d:18:d0:e9:6d:ac:e6:95:3b:8d:b8:63:70:8b:a8:23:
42:d7:15:5d:d5:dd:83:75:e0:c7:e2:fe:2b:c0:94:41:10:60:
58:6f:cb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:04:36 2024 by rpki-client on console-ams.rpki-client.org