Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/_D98h1wgMjj-ypcgJCE3VvooaL8.roa
File: _D98h1wgMjj-ypcgJCE3VvooaL8.roa (raw, json)
Hash identifier: MEqUVf/Wmb1SXKM5YTCwAJyXRxPz7vZK/OWPF9ZUpno=
Subject key identifier: FC:3F:7C:87:5C:20:32:38:FE:CA:97:20:24:21:37:56:FA:28:68:BF
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0191B28CE13F50CBD34D63110802AFB095BB
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/_D98h1wgMjj-ypcgJCE3VvooaL8.roa
Signing time: Mon 02 Sep 2024 11:44:22 +0000
ROA not before: Mon 02 Sep 2024 11:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41745
IP address blocks: 92.118.169.0/24 maxlen: 24
92.118.170.0/24 maxlen: 24
185.113.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:8c:e1:3f:50:cb:d3:4d:63:11:08:02:af:b0:95:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 2 11:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc3f7c875c203238feca972024213756fa2868bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:e4:bb:11:be:25:f0:13:ca:b5:37:f1:78:
fc:42:41:d9:dd:08:c9:34:9a:13:a5:f7:df:86:6b:
c2:92:31:88:16:82:f5:3e:d3:6a:61:3c:55:f4:09:
87:2c:97:a7:e4:4d:52:ea:d0:62:8e:10:c4:42:e1:
ff:93:17:03:2a:5d:a6:28:f0:b0:65:62:2a:0b:d2:
7f:0c:ba:4a:ee:a2:3e:f5:2f:49:9e:3e:0b:be:99:
e3:99:79:51:67:e6:48:e8:c5:76:bb:7e:b5:ca:20:
2b:e3:78:8e:a8:13:30:d5:da:09:b2:12:91:a6:56:
c9:d5:6f:f5:4a:63:2a:38:17:79:46:4c:2f:9e:c1:
d6:42:2e:f7:0d:59:db:05:8d:f2:67:94:6e:97:e9:
8f:43:b9:84:fb:37:f4:64:6d:54:cf:ec:15:7c:6b:
2b:ef:de:c8:50:12:dd:60:d3:c9:aa:3a:8e:fe:59:
1a:bf:a3:cf:99:0c:80:2f:37:c2:06:bb:c7:2a:1f:
8e:9a:5d:ed:a7:8d:8c:35:e1:c9:46:0f:cf:8b:ad:
29:03:b0:f6:c1:49:14:bd:70:75:4a:72:2d:1d:0e:
c0:c0:5a:74:a6:84:d1:21:8b:c9:ad:a8:9a:17:5e:
31:39:87:e7:47:eb:2f:8c:3b:34:bb:cb:e8:3a:2d:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3F:7C:87:5C:20:32:38:FE:CA:97:20:24:21:37:56:FA:28:68:BF
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/_D98h1wgMjj-ypcgJCE3VvooaL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.169.0-92.118.170.255
185.113.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:57:a2:f0:eb:1e:ff:63:02:2a:ef:68:39:18:60:41:d8:ac:
49:12:55:bf:36:13:da:53:f3:cd:44:93:2d:56:db:86:47:dd:
46:a8:69:83:e2:5a:ba:be:1a:ac:95:fe:56:b2:59:37:7e:87:
c8:af:d8:8e:b5:23:67:60:59:4e:a1:be:96:ab:10:6b:e1:ce:
ce:f2:04:17:f4:05:d8:e6:c4:a0:3f:e9:aa:2c:a5:c0:29:98:
18:0a:e9:52:6c:5f:3c:ca:11:f4:c1:d2:d1:4e:3f:e6:47:09:
1a:f5:a8:2a:64:d3:c7:89:ce:89:f3:b1:f4:97:91:36:fb:fb:
8f:09:ea:97:3d:bb:9c:d8:69:d6:2b:be:5e:a5:64:4b:5d:ce:
5e:cb:d3:46:7e:03:c4:17:63:33:a7:b7:bc:c9:15:c7:f3:98:
ef:f3:83:4e:5d:71:8b:f3:13:6d:a2:61:05:13:ae:07:1c:d4:
07:4e:85:9e:bb:bd:17:29:fc:79:cf:19:7c:e7:eb:1f:fa:70:
85:43:a0:77:b6:ca:db:90:ed:6b:40:51:b0:02:f3:d6:ce:af:
dd:74:77:a5:18:37:9e:5c:e9:09:83:8a:33:69:43:6a:28:9c:
23:35:b4:0c:bb:b2:11:bf:9b:99:27:0d:53:43:d1:c3:31:e8:
b3:68:b8:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:48:56 2024 by rpki-client on console-ams.rpki-client.org