Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/bFdIsl89K5_EwPizVycrI8Jbhp0.roa
File: bFdIsl89K5_EwPizVycrI8Jbhp0.roa (raw, json)
Hash identifier: YK8jc6LVmFPJ2JDi+0ke3N94sZjH6YGRUJQgeFhvOGI=
Subject key identifier: 6C:57:48:B2:5F:3D:2B:9F:C4:C0:F8:B3:57:27:2B:23:C2:5B:86:9D
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 019289EF436FB2E0DD7BD510A3B9CE7587A6
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/bFdIsl89K5_EwPizVycrI8Jbhp0.roa
Signing time: Mon 14 Oct 2024 07:30:11 +0000
ROA not before: Mon 14 Oct 2024 07:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25773
IP address blocks: 141.226.100.0/24 maxlen: 24
141.226.110.0/24 maxlen: 24
141.226.252.0/22 maxlen: 24
176.100.161.0/24 maxlen: 24
185.139.240.0/22 maxlen: 24
2a07:1980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:ef:43:6f:b2:e0:dd:7b:d5:10:a3:b9:ce:75:87:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Oct 14 07:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c5748b25f3d2b9fc4c0f8b357272b23c25b869d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:57:11:29:af:3e:a2:b5:24:f3:71:3b:d6:
58:0a:96:22:a1:df:9a:f4:93:e9:e4:f3:48:f8:bb:
04:3b:1e:4a:00:8b:76:5d:7c:75:28:f3:35:6d:7c:
e6:c5:00:f3:e0:fb:15:1c:f7:c4:c8:bc:d8:5a:0f:
97:73:16:bc:f9:6b:36:a7:52:6d:e3:3c:5b:57:d3:
b7:3a:e6:2d:ca:38:58:71:79:47:81:09:fc:d0:10:
a0:93:b3:a3:0f:fd:16:3f:0c:5c:8f:44:2b:ba:cb:
a8:f4:4f:dd:48:7f:7b:38:de:7e:37:75:cb:b2:ab:
7b:15:92:b7:1a:c0:c0:94:d2:d0:10:16:37:10:df:
87:71:6a:13:ca:c5:2a:b9:a3:ec:b7:42:09:9f:85:
b5:58:b7:3e:9e:2d:3d:03:53:89:ee:28:cc:45:04:
2d:ca:4b:15:28:36:24:8c:48:3d:9f:77:37:46:9e:
ef:30:b8:c2:88:ca:1f:3c:6b:f7:e5:bb:1c:ce:5e:
4b:ed:a7:5d:dd:33:4a:da:59:9b:7a:ac:64:4f:c6:
f0:52:e9:20:3b:8a:92:af:e0:b8:7e:f6:77:e0:98:
19:e8:41:8d:a1:f3:e0:66:c8:df:1b:98:91:e0:3f:
c5:62:e6:fa:fd:ee:47:f0:14:76:51:d9:4d:4a:6c:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:57:48:B2:5F:3D:2B:9F:C4:C0:F8:B3:57:27:2B:23:C2:5B:86:9D
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/bFdIsl89K5_EwPizVycrI8Jbhp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.100.0/24
141.226.110.0/24
141.226.252.0/22
176.100.161.0/24
185.139.240.0/22
IPv6:
2a07:1980::/29
Signature Algorithm: sha256WithRSAEncryption
97:77:7c:89:c0:3a:6a:7f:63:1d:18:27:b3:25:e5:24:1b:33:
4c:81:7b:fd:a3:52:94:47:30:e1:a7:11:5d:ae:02:0c:57:59:
6d:5a:43:a8:69:3c:14:0e:94:a0:38:e3:db:8c:e8:fc:10:01:
77:6b:da:e9:32:f3:c3:ba:36:44:b3:f0:aa:ae:a0:aa:cc:0b:
d2:f0:a4:c6:18:73:5e:be:5d:9a:99:98:0f:85:84:d9:1c:98:
6f:95:9f:bf:5e:0b:06:f3:c7:11:93:e9:00:8c:bf:2e:8c:e7:
e9:2b:f0:6c:09:b8:ad:88:6d:85:b0:b0:78:e5:4a:0d:a8:18:
64:55:85:88:81:e5:a0:6c:c5:e4:c1:33:47:c1:89:e0:89:6e:
38:b3:16:e4:f6:c9:cb:e7:b8:2f:e5:79:26:a4:47:bd:a9:f2:
0e:1c:f6:87:be:15:06:1b:cf:83:d8:33:d3:8f:46:9e:4a:5e:
ff:20:5c:a3:51:7d:10:89:22:c8:59:d9:94:fb:19:c1:2f:d3:
7b:7b:58:f1:87:02:dd:78:9c:2a:34:cb:88:65:66:b1:0c:21:
07:91:c4:94:72:36:b8:ef:24:e4:85:ad:9b:5f:ee:77:fd:86:
c2:4e:98:ad:75:99:b3:48:21:0d:f2:be:b9:30:20:a3:4e:86:
15:6b:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:36:21 2024 by rpki-client on console-fra.rpki-client.org