Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/ccTt5UlwrWMKlF68W4QXARJV4As.roa
File: ccTt5UlwrWMKlF68W4QXARJV4As.roa (raw, json)
Hash identifier: 1ME7g2uKZES+cTSXtN2UVtdATEOfRUkH1QhzcEcZxms=
Subject key identifier: 71:C4:ED:E5:49:70:AD:63:0A:94:5E:BC:5B:84:17:01:12:55:E0:0B
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0192355AAFE36EDE034A51C690AD3BC2B806
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/ccTt5UlwrWMKlF68W4QXARJV4As.roa
Signing time: Fri 27 Sep 2024 21:19:48 +0000
ROA not before: Fri 27 Sep 2024 21:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47516
IP address blocks: 185.23.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:35:5a:af:e3:6e:de:03:4a:51:c6:90:ad:3b:c2:b8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Sep 27 21:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71c4ede54970ad630a945ebc5b8417011255e00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6d:cd:8e:00:fe:58:6b:81:e7:17:c3:39:27:
14:d2:6c:04:d8:9a:80:e4:33:d3:fe:3b:dc:a5:aa:
fd:ac:97:91:d8:b8:3d:6b:2d:ba:c3:96:0d:0f:06:
75:87:00:a2:7a:03:58:e6:f7:c2:c7:d3:a9:27:36:
68:ac:ae:00:4e:4d:d4:f0:f4:a6:d2:03:a7:47:32:
f3:86:89:bf:ca:6d:54:6d:87:07:fe:89:41:c8:aa:
5c:11:e6:53:ca:70:1b:07:de:ce:d6:b8:b3:79:49:
0c:78:3b:40:23:63:3c:b9:2d:84:33:ff:44:60:86:
18:db:45:51:00:f9:5f:3d:8e:45:dd:a5:76:2e:fb:
72:62:43:93:8f:e4:a7:60:74:ce:a9:bb:0a:08:73:
47:91:6e:d8:c4:73:a8:65:cd:84:8f:03:eb:4f:b5:
a4:81:c8:fc:07:ce:1a:45:5f:f2:c4:6f:05:75:72:
b2:f1:9c:6c:cb:32:fb:90:fb:e9:90:fa:95:ba:03:
02:eb:2a:a6:c1:ac:25:84:7b:c1:3f:06:cb:00:6d:
41:eb:11:15:24:ae:91:a4:ca:c4:cd:cd:c3:79:77:
5f:bd:5e:08:cb:1e:e6:8d:37:89:4e:d5:6e:28:91:
3e:5f:bc:fe:54:44:67:fc:28:e8:1e:b2:d6:78:4d:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C4:ED:E5:49:70:AD:63:0A:94:5E:BC:5B:84:17:01:12:55:E0:0B
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/ccTt5UlwrWMKlF68W4QXARJV4As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.239.0/24
Signature Algorithm: sha256WithRSAEncryption
86:03:5e:9b:50:60:df:0a:10:6e:64:d8:53:8a:b7:b9:e2:4e:
4e:f8:a6:8e:55:fb:44:cd:c6:9f:1c:1c:40:a7:52:1e:1a:f4:
1c:f7:9f:f0:fb:df:13:09:03:7a:6a:7a:20:d7:c9:6d:ee:e7:
0e:b0:cd:c8:a9:f0:b3:b2:c5:4b:08:cb:57:bc:8f:c2:28:a7:
dc:d7:6d:54:0d:f5:1e:7e:14:cb:e3:84:de:44:21:43:98:93:
b9:98:06:bc:c9:6d:59:dd:e2:02:b5:81:b0:6c:05:dc:cb:bb:
d6:2c:aa:6b:cf:a1:c2:71:fd:43:ea:56:7f:c0:e7:99:e3:80:
71:13:33:e4:6a:c7:d8:8f:7a:6c:0a:bb:ff:6d:a1:48:31:bd:
65:52:47:ad:c9:76:a8:1a:44:11:4b:4b:f1:d9:c2:79:44:95:
11:b9:42:d5:13:a5:e7:7c:52:97:fc:14:4c:58:78:39:2e:95:
a8:66:d2:e5:8b:22:81:db:26:62:9d:b5:06:25:84:d4:31:16:
49:36:32:81:fd:c6:1b:bc:98:35:5d:8c:55:d8:6c:81:b2:3c:
06:45:fd:e7:54:ce:b3:cc:59:1b:a8:e1:f8:0b:61:55:f5:a7:
0e:b8:c6:16:43:52:66:bc:c8:b9:ec:ab:05:72:a3:31:55:a8:
e1:81:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:12:31 2024 by rpki-client on console-fra.rpki-client.org