Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/te7BzhGTUqhhlF11hh0YaBOprjI.roa
File: te7BzhGTUqhhlF11hh0YaBOprjI.roa (raw, json)
Hash identifier: KrC9vOv0ebHCdRYFm2BpYWUaECyofVf3/GwIteKCBuU=
Subject key identifier: B5:EE:C1:CE:11:93:52:A8:61:94:5D:75:86:1D:18:68:13:A9:AE:32
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 01928A4AD1679461BEF7C55FED99E0E8D4BA
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/te7BzhGTUqhhlF11hh0YaBOprjI.roa
Signing time: Mon 14 Oct 2024 09:10:11 +0000
ROA not before: Mon 14 Oct 2024 09:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 192.108.34.0/24 maxlen: 24
193.22.112.0/23 maxlen: 24
193.22.112.0/24 maxlen: 24
193.22.113.0/24 maxlen: 24
193.22.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:4a:d1:67:94:61:be:f7:c5:5f:ed:99:e0:e8:d4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: Oct 14 09:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5eec1ce119352a861945d75861d186813a9ae32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:8e:f3:60:13:e0:3d:fa:81:e1:07:4c:ac:
15:1a:5d:c8:fb:b3:db:4f:d0:b1:5a:d6:10:32:f3:
9d:9f:2e:93:e9:f0:57:da:2c:0d:bd:ad:55:40:a9:
5e:8b:ab:25:f9:2f:99:e9:41:9f:bc:8c:99:92:7b:
87:6f:86:17:3e:17:95:72:78:37:6d:4a:4b:ab:6e:
67:76:c0:68:ca:76:b0:12:b1:5f:78:b5:b3:11:0e:
f6:a2:27:1e:af:40:dd:1d:db:85:41:55:13:40:24:
f3:ed:8b:c4:e7:37:35:27:db:c3:fa:6e:df:c3:0f:
51:9a:72:6d:48:e8:89:9a:4a:79:c4:e9:4f:aa:b6:
58:65:19:69:ef:e7:69:ef:11:b2:11:4a:8b:b4:e2:
9c:c7:bb:3b:23:c6:da:66:6c:23:24:4c:1f:87:e3:
c7:f0:50:f8:ad:f4:a6:e1:a8:ef:db:69:46:07:06:
c8:44:ee:27:87:7f:24:6b:90:43:ec:9b:f4:99:d8:
c9:45:a5:19:74:64:bf:8e:f9:bf:b1:74:2e:da:8e:
18:dd:3e:79:10:62:29:d6:d4:f9:75:ae:19:7c:f5:
1e:c3:52:90:00:55:7b:0e:3e:6b:10:f0:44:4f:2f:
73:28:74:75:91:b6:b1:da:d8:b1:81:4e:38:d3:c9:
09:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EE:C1:CE:11:93:52:A8:61:94:5D:75:86:1D:18:68:13:A9:AE:32
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/te7BzhGTUqhhlF11hh0YaBOprjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.34.0/24
193.22.112.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:bd:26:e1:72:af:ed:fb:97:08:b2:8c:ae:e9:02:cc:4c:c6:
f5:cf:e8:9c:b5:ac:d1:b0:21:0a:0b:1e:ac:af:7b:fd:07:d2:
44:85:37:f3:c0:19:05:b5:ed:3d:38:87:99:d4:55:30:39:33:
a1:0e:bd:49:78:8b:21:08:13:b0:01:22:45:42:8b:0e:5c:9f:
f0:81:8a:b8:cd:07:fc:ba:78:be:80:00:1c:16:27:86:68:74:
75:2c:e4:58:ad:2f:a0:92:d3:d9:e0:68:02:22:04:19:63:ac:
8c:f8:bf:ea:3a:89:8a:e5:83:a5:23:ad:fc:0f:e0:45:92:3f:
90:df:70:ca:a7:02:8d:91:8b:38:10:6a:64:82:66:a0:f5:c1:
58:12:7a:ef:02:57:86:e0:bb:87:b2:74:b2:a1:ae:35:f4:57:
ba:c4:e8:74:14:8a:85:0c:02:bc:29:bb:21:75:74:ac:bc:9a:
8d:09:35:f6:91:b7:b8:3e:25:c5:99:9e:77:40:02:60:22:cc:
54:1a:64:1b:65:c8:1f:94:5f:0b:c7:76:f8:64:8a:e8:1f:2c:
86:7f:ce:c3:78:31:10:dc:62:bd:d5:67:72:6f:a0:2f:62:82:
60:ee:2e:e5:86:d1:c2:c6:39:df:61:ab:13:ed:b8:8f:f3:d4:
b8:1a:95:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:11:15 2024 by rpki-client on console-ams.rpki-client.org