Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/iDeqXRga2SrBBNfqrV7n3PJBJ70.roa
File: iDeqXRga2SrBBNfqrV7n3PJBJ70.roa (raw, json)
Hash identifier: qbCx0msNDFLD2GNcu/g1A55zu3MCb6yELGAzSPwOoy0=
Subject key identifier: 88:37:AA:5D:18:1A:D9:2A:C1:04:D7:EA:AD:5E:E7:DC:F2:41:27:BD
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 018CC2DB11C85B6A624A89A05005073281F4
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/iDeqXRga2SrBBNfqrV7n3PJBJ70.roa
Signing time: Mon 01 Jan 2024 02:29:45 +0000
ROA not before: Mon 01 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1267
IP address blocks: 194.20.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:11:c8:5b:6a:62:4a:89:a0:50:05:07:32:81:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 1 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8837aa5d181ad92ac104d7eaad5ee7dcf24127bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:1a:58:bb:d3:4e:f7:5c:71:26:74:67:95:
71:99:45:6b:29:40:94:75:77:4e:1d:7a:26:ca:49:
d2:6b:7c:20:5b:55:00:5e:a8:8f:35:15:75:49:c7:
9a:ee:e2:94:27:09:d5:6a:99:70:83:82:9d:0e:5e:
a4:c8:79:f8:7f:c5:99:3b:d9:b0:3d:a3:7f:63:e6:
76:15:bb:6b:29:3e:db:78:56:cb:2a:fb:a5:9a:da:
b4:bb:c3:a5:e5:e4:05:3c:24:10:3a:cc:70:56:ae:
ea:56:06:53:af:1a:c0:4e:ea:cf:a4:28:0d:a6:e7:
16:cf:7d:41:c2:db:c8:24:8b:46:d8:e8:f9:94:bd:
81:45:36:34:e3:b3:ac:1b:ef:61:85:c6:d5:43:58:
90:26:9c:cb:01:66:ed:48:94:95:4e:8f:74:0f:15:
df:95:34:4c:a3:71:4b:5d:7d:b5:3b:62:ae:67:fb:
a7:44:70:44:e0:38:c5:41:e3:d5:ef:43:f0:5d:77:
bf:70:06:dd:5b:af:f4:58:ec:43:99:42:dd:4c:1d:
85:7d:a1:55:f6:73:1a:df:79:a4:0f:3f:31:73:35:
8a:e9:9f:e0:30:b9:cd:3b:62:a1:e3:a1:48:ed:34:
4c:72:10:f4:8e:a5:c7:ca:3c:88:3f:83:c5:30:e0:
d6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:37:AA:5D:18:1A:D9:2A:C1:04:D7:EA:AD:5E:E7:DC:F2:41:27:BD
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/iDeqXRga2SrBBNfqrV7n3PJBJ70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.24.0/24
Signature Algorithm: sha256WithRSAEncryption
53:9a:9e:1d:db:95:61:4a:1e:7c:4f:ee:d7:32:a5:8d:a0:1c:
e0:b3:9c:f0:d9:48:58:2d:69:56:05:d3:b1:d0:a7:f1:20:b0:
0e:a7:09:f4:ce:48:3e:a0:54:62:8b:a3:b9:3b:d9:06:f2:b1:
23:06:31:00:95:b1:34:17:4d:a9:88:fa:dc:09:68:01:27:5f:
c8:d7:48:85:44:74:4a:36:7d:31:f0:aa:17:92:b0:2e:69:cc:
ea:78:88:0d:3e:91:77:7a:2f:e4:9e:9b:3f:a9:6a:53:61:4c:
75:6a:89:73:c1:e3:ec:d8:e1:7e:c0:6e:f0:fd:98:5d:cc:71:
2d:ef:07:2e:69:77:56:21:3d:65:39:8d:4e:a1:44:e1:67:a4:
99:d9:66:0f:f8:0b:b6:37:07:82:48:78:98:f1:0d:ea:a3:33:
c6:0e:d6:24:c8:f4:15:96:82:34:c8:a9:0f:f1:bb:81:76:be:
1a:f3:9c:33:68:e2:c8:6f:f4:7e:ce:71:5a:ae:54:06:ca:27:
8c:8e:64:7c:33:e8:2b:82:0a:eb:67:ff:8b:c5:4b:f1:03:7b:
30:53:3e:26:7c:f7:ae:0a:8a:aa:1b:d8:29:90:9b:f5:d9:d0:
75:58:1d:f3:cd:6f:9d:a8:d2:e7:80:ca:0e:11:77:a0:16:de:
43:34:fa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:07:28 2024 by rpki-client on console-ams.rpki-client.org