Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/26nOLxptatfHJ1EQf6621q0GyZA.roa
File: 26nOLxptatfHJ1EQf6621q0GyZA.roa (raw, json)
Hash identifier: 3+2QmyAxKOOvd6un7+INDqlTeLNfHlsojLryBypCT2U=
Subject key identifier: DB:A9:CE:2F:1A:6D:6A:D7:C7:27:51:10:7F:AE:B6:D6:AD:06:C9:90
Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Certificate serial: 018CC4244ABEB813442E93A597F56F35267B
Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/26nOLxptatfHJ1EQf6621q0GyZA.roa
Signing time: Mon 01 Jan 2024 08:29:21 +0000
ROA not before: Mon 01 Jan 2024 08:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210625
IP address blocks: 141.226.55.0/24 maxlen: 24
141.226.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 10:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4a:be:b8:13:44:2e:93:a5:97:f5:6f:35:26:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Validity
Not Before: Jan 1 08:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dba9ce2f1a6d6ad7c72751107faeb6d6ad06c990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:72:2f:8b:58:03:b6:80:85:1d:b8:c6:67:b2:
4e:19:5d:a6:2a:41:4a:b7:86:96:40:a9:8f:64:fd:
7c:c1:bd:50:39:ba:d1:9f:25:77:92:22:f2:79:7f:
97:4b:3d:ae:e6:89:0d:24:cc:48:f0:fb:4d:4d:e5:
2c:13:08:3f:28:e1:70:60:8c:93:77:37:9d:3b:f4:
02:a6:d4:6e:de:38:42:86:a4:3c:71:3a:97:6a:a7:
9d:1f:e7:83:b4:0c:98:83:1b:9d:9f:45:81:5e:df:
b7:e3:5d:3a:34:9c:51:07:dd:d5:dc:25:07:ab:43:
4c:65:74:de:60:2a:ed:de:17:62:30:76:ac:de:4c:
7f:db:fc:fb:a5:7e:5d:a4:4b:55:78:f7:77:f6:7b:
be:83:95:e9:75:ba:4c:47:b6:e8:68:6e:8b:10:8d:
01:36:c7:4a:d4:ab:ad:12:77:9c:56:f6:46:86:2e:
49:f7:8f:03:14:6b:4b:ad:86:2b:3e:ac:80:3c:66:
02:1e:25:8e:3d:37:4b:30:97:aa:da:21:40:1c:ee:
8b:bf:f5:16:72:db:ce:a9:95:84:bf:3f:fa:da:8e:
55:b0:1e:d8:06:95:03:07:92:50:8a:da:ae:ce:7c:
c2:0d:70:92:76:ec:d7:9a:4d:35:22:cb:2e:b5:3d:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A9:CE:2F:1A:6D:6A:D7:C7:27:51:10:7F:AE:B6:D6:AD:06:C9:90
X509v3 Authority Key Identifier:
keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/26nOLxptatfHJ1EQf6621q0GyZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.55.0/24
141.226.71.0/24
Signature Algorithm: sha256WithRSAEncryption
74:05:98:f7:f2:93:e5:75:ee:b6:07:f4:0d:29:3f:ce:18:30:
97:ce:3f:41:fd:e4:d9:90:97:f2:f4:a8:cb:9c:8a:33:e6:06:
90:92:09:8b:95:7e:81:48:0d:dd:1d:06:51:ab:ef:13:5f:7b:
85:ce:e5:ad:10:7e:f5:19:b9:e7:26:20:79:6e:52:1a:36:4b:
c8:8e:43:e2:5e:49:28:b5:fa:59:0f:a7:71:a9:0e:f7:a5:c0:
86:89:55:8d:bf:ad:68:59:fd:e7:26:84:a6:6e:4b:d0:13:80:
de:c9:1c:12:9c:51:34:eb:1b:36:e6:f8:ef:1d:a3:93:e9:7d:
d1:0a:1b:1c:fa:93:6b:58:69:75:33:01:16:63:ba:f6:26:12:
f6:cc:39:fe:32:1f:69:2d:d3:a7:15:ca:d9:c5:88:6d:95:eb:
a9:ff:d3:14:68:e4:9e:68:54:06:bb:3c:b5:f5:20:d1:65:eb:
ad:5a:03:0a:47:04:19:19:0a:5f:a2:50:20:66:f6:91:e9:e3:
11:29:5f:cd:be:24:1d:e0:c1:46:59:8a:5e:82:da:8e:64:0b:
ea:a7:04:0b:bc:cc:0e:cf:80:95:82:46:5a:84:86:91:82:25:
2b:75:1e:05:9c:2d:9f:bf:65:ec:40:be:6b:f4:17:23:15:c4:
a2:19:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:55:22 2024 by rpki-client on console-fra.rpki-client.org