Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/4A908xWR_Z6RyxdmQdWDbz9iozM.roa
File: 4A908xWR_Z6RyxdmQdWDbz9iozM.roa (raw, json)
Hash identifier: XEfhWdXsYlQisPo5kYXu9Ra0m8DijXSiKQYPTq4caOo=
Subject key identifier: E0:0F:74:F3:15:91:FD:9E:91:CB:17:66:41:D5:83:6F:3F:62:A3:33
Certificate issuer: /CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
Certificate serial: 018CC501001A502348D2BC8C65C149DAC115
Authority key identifier: 59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/4A908xWR_Z6RyxdmQdWDbz9iozM.roa
Signing time: Mon 01 Jan 2024 12:30:26 +0000
ROA not before: Mon 01 Jan 2024 12:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 129.247.0.0/16 maxlen: 16
192.108.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:00:1a:50:23:48:d2:bc:8c:65:c1:49:da:c1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
Validity
Not Before: Jan 1 12:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e00f74f31591fd9e91cb176641d5836f3f62a333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:12:82:7b:ec:76:07:bc:67:2a:d8:36:92:
b0:3f:a8:4c:71:53:d9:a0:b2:84:dd:4b:64:1e:01:
61:a6:98:33:48:a4:06:7e:51:b0:ba:a6:73:e5:fd:
74:a9:c4:9f:4d:a8:70:87:27:33:ab:fd:3d:3d:be:
a9:c4:5b:1f:87:ad:b0:08:5c:3e:6e:43:e5:6e:01:
47:e2:b1:16:f8:98:8b:2f:24:11:00:e9:4f:35:92:
a8:56:e1:87:03:3a:ef:2a:25:86:e2:eb:95:46:39:
ba:ae:27:35:46:db:9c:9d:4e:f5:41:84:ff:c8:78:
1b:b9:bf:bc:f5:46:08:c5:70:63:9e:1c:12:57:68:
d9:4f:2e:97:2e:a0:d0:94:28:48:8e:d2:f1:0c:3f:
65:cd:14:8d:3e:f2:8d:9e:2c:5b:6f:50:d2:05:0d:
93:4c:1b:c9:3b:4a:54:48:b1:c7:21:a2:4c:f1:16:
a8:de:0c:5a:6c:02:d6:52:fb:35:b2:85:7f:fd:b4:
da:16:69:6f:2f:4e:83:f8:71:a2:7c:17:6c:32:40:
c4:ed:b9:dc:6f:22:86:00:33:bd:fc:3c:d3:32:02:
ab:6c:1c:07:3c:98:f5:a3:fe:e3:71:cc:aa:48:4e:
c4:7f:04:e3:d3:e7:a1:d0:2b:2a:a5:25:19:02:dd:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0F:74:F3:15:91:FD:9E:91:CB:17:66:41:D5:83:6F:3F:62:A3:33
X509v3 Authority Key Identifier:
keyid:59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/4A908xWR_Z6RyxdmQdWDbz9iozM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.247.0.0/16
192.108.54.0/24
Signature Algorithm: sha256WithRSAEncryption
63:26:e0:c3:f7:88:40:a6:8c:f7:ad:79:d5:be:aa:f5:19:73:
75:bd:d0:5f:31:0b:25:28:62:95:5a:aa:ac:3b:5e:10:2c:36:
c8:70:49:66:91:99:f5:88:60:de:dd:19:06:81:fe:75:c0:9e:
96:9b:91:40:9b:b5:6c:36:e5:ab:cf:1f:ce:92:ab:e1:30:c5:
a1:87:0f:44:1a:70:d5:e0:d2:47:bd:cd:11:a0:0a:a0:88:05:
03:2d:66:a4:26:55:04:f1:df:7e:82:ed:ce:aa:0a:9f:87:c3:
62:86:49:b1:dd:ad:2a:04:f7:7d:88:ca:3b:01:f5:76:cc:20:
aa:1b:33:52:a8:c7:0a:46:0c:7f:a6:b4:70:44:96:fc:dd:78:
4c:72:5b:7c:56:47:f8:77:d6:1b:7c:c7:0a:47:3c:a7:f2:5b:
c9:29:89:bd:58:07:5a:63:a8:61:78:4a:3d:63:c4:71:64:9d:
bf:8c:82:98:ab:8f:9b:36:94:82:9d:75:7c:a6:8b:bb:f9:57:
96:9c:ce:45:c5:83:74:b4:4f:da:4f:bd:aa:48:a5:19:f4:f2:
38:77:71:7f:f8:89:48:d7:d4:31:a1:1a:1b:67:54:34:67:41:
59:41:e7:1b:d8:ee:40:0e:a2:92:e0:ab:0c:68:9d:ac:f5:d3:
61:a2:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:23 2024 by rpki-client on console-fra.rpki-client.org