Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/9fLjEGJu2c6sVUZF41VVi0MT8E4.roa
File: 9fLjEGJu2c6sVUZF41VVi0MT8E4.roa (raw, json)
Hash identifier: MiObN0JtzVjT7gIKiBfx8KkQocDHB/dY7beMeoLygKA=
Subject key identifier: F5:F2:E3:10:62:6E:D9:CE:AC:55:46:45:E3:55:55:8B:43:13:F0:4E
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0192B39FA594C294F0C016C597532EEB146A
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/9fLjEGJu2c6sVUZF41VVi0MT8E4.roa
Signing time: Tue 22 Oct 2024 09:47:17 +0000
ROA not before: Tue 22 Oct 2024 09:47:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 145.61.196.0/24 maxlen: 24
145.61.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:9f:a5:94:c2:94:f0:c0:16:c5:97:53:2e:eb:14:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Oct 22 09:47:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5f2e310626ed9ceac554645e355558b4313f04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6e:d0:98:9e:0e:f7:73:56:d4:b0:de:73:ad:
c7:9b:41:3f:e2:63:5f:99:27:54:90:42:29:80:23:
46:18:ea:69:9b:b9:49:de:17:af:05:ef:e9:ee:bc:
23:56:97:ea:0b:35:e9:40:42:69:7a:c6:bb:f4:9d:
d1:b9:23:69:a8:0c:39:68:f1:60:ca:30:5b:7e:54:
ea:7e:c0:85:61:da:c1:57:f5:40:47:ed:1d:57:4f:
b9:0e:3c:76:64:28:49:41:07:c7:f6:14:6e:6b:c3:
87:c9:a7:da:01:75:bd:a1:f6:4e:2a:c5:15:1c:91:
52:4c:04:ba:97:d9:35:bd:3f:60:6c:26:73:12:16:
81:9e:66:c5:4c:a0:01:ef:db:a7:99:8d:42:24:74:
4c:09:dd:8f:d5:d9:91:66:86:67:4c:ce:87:46:04:
51:e9:c7:c8:88:4f:4f:0e:53:f9:4d:bf:67:31:c4:
ad:bd:c3:76:13:9b:57:fb:d2:84:9d:7a:37:cb:09:
56:82:af:f4:59:d1:04:8e:10:95:eb:b4:ca:f7:ee:
a3:50:02:9d:bc:0e:b4:00:8e:b8:bc:1b:76:8e:f8:
16:db:86:89:6d:a6:ab:99:8e:6d:81:af:db:c7:0f:
86:8f:cb:8a:51:7d:67:2e:6d:df:a2:e5:22:ae:be:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F2:E3:10:62:6E:D9:CE:AC:55:46:45:E3:55:55:8B:43:13:F0:4E
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/9fLjEGJu2c6sVUZF41VVi0MT8E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.61.196.0/24
145.61.200.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:f7:89:ad:77:52:05:9a:a7:24:41:37:3c:fb:d4:92:a6:aa:
59:46:06:d2:cb:81:9f:c4:69:f3:ac:91:5e:0a:c1:b3:43:85:
38:4e:27:25:78:b8:29:16:e1:74:b6:4b:54:ec:5e:16:66:ae:
b2:f5:a3:01:b3:d8:9b:c5:db:7d:93:e9:b6:1d:58:08:bf:e5:
bd:ad:ef:37:9b:95:5d:3f:bd:f5:59:2b:39:d6:03:f5:5c:9a:
ac:c3:d9:4e:48:d9:68:7d:5a:a3:f2:76:a5:f0:86:27:6b:fc:
96:20:54:ce:25:98:1b:48:55:09:e8:6c:7c:e7:86:df:ce:31:
7d:a5:01:3e:4a:ca:3e:65:6b:83:d8:5a:6c:39:30:43:8c:27:
d6:f0:a2:3b:f2:77:c6:01:0a:85:70:b9:87:dd:f2:62:4b:a6:
9f:5e:ed:06:1c:86:fe:68:5b:2f:4a:11:ec:bb:ff:85:38:c1:
31:fc:b6:bc:0c:91:28:d9:4a:a0:b5:ff:38:bf:57:3d:9f:22:
34:d3:78:d9:dd:3f:15:77:cb:b1:02:11:73:e4:72:bb:5a:c3:
f0:bd:6b:2a:7e:68:1d:99:1b:a0:7f:c6:7e:9a:ea:d9:6f:7a:
0c:e5:37:f0:9e:a3:52:ca:69:d7:c9:ef:64:d7:23:76:15:04:
4d:1c:e4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:22:58 2024 by rpki-client on console-ams.rpki-client.org