Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/1Mae8bV1k8uHnXHuo4PyAbtHJKg.roa
File: 1Mae8bV1k8uHnXHuo4PyAbtHJKg.roa (raw, json)
Hash identifier: 1p53T6UE89YoV4x9tRrkNc87EqbAN2eE1HAvjzcTzx0=
Subject key identifier: D4:C6:9E:F1:B5:75:93:CB:87:9D:71:EE:A3:83:F2:01:BB:47:24:A8
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01921D8772949C305EAFD1B7CA91D3CCE069
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/1Mae8bV1k8uHnXHuo4PyAbtHJKg.roa
Signing time: Mon 23 Sep 2024 06:17:48 +0000
ROA not before: Mon 23 Sep 2024 06:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9074
IP address blocks: 85.153.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:87:72:94:9c:30:5e:af:d1:b7:ca:91:d3:cc:e0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Sep 23 06:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4c69ef1b57593cb879d71eea383f201bb4724a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:b5:67:07:de:c2:ab:d6:f2:2a:6d:67:22:
a7:e9:4d:36:2e:08:1f:5a:dd:5a:02:b7:e2:c6:d3:
8e:3f:27:81:df:4b:62:20:97:32:cc:0c:7d:82:13:
b7:d0:f5:93:12:88:5f:1a:3e:2b:3e:7f:27:f8:cb:
80:10:28:72:7e:01:39:bf:7f:5d:28:58:3b:19:73:
a3:35:81:71:ff:bb:91:71:23:32:b3:4a:55:a6:39:
51:35:cb:de:d2:bb:b5:f6:b2:b6:8e:9a:68:4e:68:
1b:cf:ff:41:15:64:49:47:83:a8:0d:71:0d:cb:81:
93:e3:71:01:de:6b:3d:4d:cc:1f:43:08:e6:b8:c9:
47:f1:a7:88:3f:da:e0:60:64:0e:89:8e:d7:b6:c5:
ff:c7:8d:9b:1c:71:6b:8b:af:b0:5f:26:49:2b:43:
00:b6:fb:0f:9c:97:8a:05:9f:79:09:0f:fe:29:09:
2c:e5:64:d4:73:13:be:72:2c:11:2c:6e:4b:9e:bd:
6f:52:18:7d:50:61:f9:68:db:2b:d8:3b:27:e8:e7:
58:b0:6d:8c:26:58:5d:f7:e9:39:1a:44:93:3a:61:
6c:6b:c9:a0:99:69:3d:cf:24:72:f8:0a:22:de:46:
79:fe:54:aa:92:fe:d8:c8:ab:8f:74:c3:78:5c:ad:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C6:9E:F1:B5:75:93:CB:87:9D:71:EE:A3:83:F2:01:BB:47:24:A8
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/1Mae8bV1k8uHnXHuo4PyAbtHJKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.179.0/24
Signature Algorithm: sha256WithRSAEncryption
18:72:08:10:d8:9c:f1:6b:ad:dc:99:96:0f:97:22:1b:e3:3b:
3c:67:29:4c:b9:ff:c1:48:74:7b:ce:14:15:15:e9:fa:82:0f:
53:7c:e5:13:e8:7e:5e:6a:0b:8c:60:84:92:78:b6:a5:13:65:
37:00:bc:e8:6e:1f:7a:8a:2e:be:84:65:f5:cf:0c:14:df:c8:
16:82:16:2f:b4:48:63:18:0b:5b:62:58:9a:7f:2a:c6:29:2b:
ff:20:2b:96:b1:e7:62:12:9e:a0:16:76:de:69:fe:c2:ad:40:
55:e0:29:41:29:46:38:10:e5:2b:39:3a:b6:21:36:b2:59:ca:
e6:a2:e9:a0:84:b7:66:11:30:41:79:ce:d4:1c:40:fb:11:9e:
14:44:d5:92:49:33:37:0d:6c:91:9b:d8:59:c4:cf:82:e1:72:
54:c7:a6:fa:16:cc:b7:e5:63:f0:7e:84:57:b3:c8:08:57:38:
c7:27:73:0e:43:6e:9e:1a:2a:2f:e4:7a:6e:0b:58:99:63:c0:
91:a9:fc:dd:d9:ae:a9:c8:60:86:ef:a3:2a:6d:40:78:65:88:
da:04:ba:a3:7f:7a:c9:b3:91:d6:a6:46:08:4b:8b:3e:5b:e0:
2a:6a:88:db:25:91:0e:d7:62:89:f8:ba:49:61:74:fe:be:eb:
30:04:0f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:47:33 2024 by rpki-client on console-fra.rpki-client.org