Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/lT8YwlGj_0yRJ_BudrR6rnETYuI.roa
File: lT8YwlGj_0yRJ_BudrR6rnETYuI.roa (raw, json)
Hash identifier: NLZerRCDH/DheslJwSjeuKlfSyjydX7HjYTqYZ7bD28=
Subject key identifier: 95:3F:18:C2:51:A3:FF:4C:91:27:F0:6E:76:B4:7A:AE:71:13:62:E2
Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial: 0191E4E26A016F9158BBD83CEDFB3C04331C
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/lT8YwlGj_0yRJ_BudrR6rnETYuI.roa
Signing time: Thu 12 Sep 2024 06:18:48 +0000
ROA not before: Thu 12 Sep 2024 06:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214230
IP address blocks: 147.234.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:e2:6a:01:6f:91:58:bb:d8:3c:ed:fb:3c:04:33:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Validity
Not Before: Sep 12 06:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=953f18c251a3ff4c9127f06e76b47aae711362e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d9:fb:76:57:8b:2a:dd:85:74:87:aa:2f:7c:
8e:52:00:78:2c:02:cb:fd:f4:c8:44:b5:2c:f4:a0:
bd:3e:1d:0e:2c:6b:69:d9:1f:63:b9:86:df:96:36:
bb:1e:de:4a:cc:0e:07:1c:04:43:7b:39:7e:9e:5a:
10:7a:42:3e:a7:50:58:f7:16:c6:7b:bf:08:c5:42:
7f:13:a0:7a:87:25:58:ee:83:c5:cc:78:02:90:1e:
f9:d8:ab:18:35:dd:a9:45:cd:e4:36:8f:14:ed:3c:
15:26:3a:59:9c:91:95:0b:6f:34:6e:13:f8:f0:e9:
03:9e:85:8d:8b:82:30:10:52:9e:0c:a3:17:07:83:
25:26:85:09:93:14:9d:1d:63:06:4e:b4:e2:07:9d:
99:37:ea:2b:10:4d:f9:cd:22:4c:29:c5:7d:48:70:
8f:5f:11:a5:bb:fd:ee:aa:bf:f2:d6:cb:3f:1a:59:
30:86:ce:3f:34:ec:66:2b:68:d6:58:07:85:76:54:
08:24:0e:e2:74:59:15:9b:96:83:9a:3a:43:d6:f4:
7e:75:9e:9d:80:be:11:93:4d:4e:86:fe:a0:f2:fe:
cb:4f:a3:fc:db:47:6a:ae:2b:2e:98:80:61:67:93:
51:62:fa:d0:59:b2:a4:89:77:a7:28:5c:2a:6f:db:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3F:18:C2:51:A3:FF:4C:91:27:F0:6E:76:B4:7A:AE:71:13:62:E2
X509v3 Authority Key Identifier:
keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/lT8YwlGj_0yRJ_BudrR6rnETYuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a0:5d:12:7f:22:58:3d:e7:de:33:cd:29:cf:f6:f4:81:ca:
22:57:8e:ee:49:48:fb:e9:7d:b9:04:a6:61:86:3c:27:b1:6e:
5f:07:48:e8:f7:7b:4f:6d:2a:45:e2:b5:af:6e:90:5c:6d:30:
af:11:1e:99:73:74:73:b0:b0:84:db:6e:5e:ad:4c:ae:31:62:
5d:ab:f0:76:49:d5:8e:4c:bd:f4:b0:7e:11:c7:10:8d:cf:f8:
41:95:8d:25:4b:12:8d:dc:0d:16:6f:58:84:cb:0c:b4:87:ce:
d8:2e:b5:a1:5e:f0:41:9a:50:74:db:fd:52:7f:11:33:c2:16:
eb:8a:fd:4d:fb:6a:38:ed:68:59:de:1d:8e:01:59:40:79:9e:
1e:85:c8:a1:db:21:e8:05:ab:de:8b:4d:ff:40:2c:23:95:dc:
09:d8:b8:0b:c3:d8:c6:b9:b9:a9:d3:28:c5:79:cb:87:4e:b2:
9b:56:d5:6c:09:bd:fa:00:52:2e:40:ed:8c:e1:8a:27:75:02:
e2:fd:5e:93:9b:8c:ab:e6:e5:6b:d7:e1:66:aa:8f:2d:7c:4d:
8c:d8:dc:05:61:50:4e:f5:17:bb:97:54:a3:cc:d2:05:ae:7b:
da:9b:40:54:6c:cb:a3:5d:9c:61:99:36:84:d6:b1:02:2e:0a:
d7:9e:3f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:21 2024 by rpki-client on console-ams.rpki-client.org