Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7kn21aLnsXAUNW0uYFAGgZjoqEw.roa
File: 7kn21aLnsXAUNW0uYFAGgZjoqEw.roa (raw, json)
Hash identifier: V5WDtqCx+sWOX2GZ3ha3LTTbWEbUJlDeQ6w4pF7mxUQ=
Subject key identifier: EE:49:F6:D5:A2:E7:B1:70:14:35:6D:2E:60:50:06:81:98:E8:A8:4C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01916B1E24EDF03D0AA72C20A796012D0D2D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7kn21aLnsXAUNW0uYFAGgZjoqEw.roa
Signing time: Mon 19 Aug 2024 14:50:22 +0000
ROA not before: Mon 19 Aug 2024 14:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214478
IP address blocks: 109.176.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:1e:24:ed:f0:3d:0a:a7:2c:20:a7:96:01:2d:0d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 19 14:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee49f6d5a2e7b17014356d2e6050068198e8a84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:35:94:02:78:7c:28:96:8f:5a:92:e2:17:
b2:5c:ab:25:35:90:56:3e:ad:ce:d5:20:27:9e:f8:
f5:83:cf:f6:bf:c6:a4:55:d6:78:94:68:98:55:ce:
29:aa:ab:20:fc:2d:64:6a:d7:8c:3c:55:e3:b0:44:
7e:90:81:ba:df:07:f4:80:dc:30:23:86:52:5c:57:
51:d6:0f:b2:e2:e1:d3:68:b0:e7:bd:37:ac:40:ed:
1a:29:ab:2b:da:8d:cb:54:44:63:ae:68:57:24:b4:
4e:af:59:7b:97:e6:23:11:2c:aa:30:f6:44:29:12:
5c:d5:d4:e0:ec:3a:45:ba:b5:67:e5:da:10:e9:ea:
17:7a:e2:4e:dc:9b:64:f8:68:4a:6a:ff:4d:5e:e2:
b5:71:4d:1e:36:2a:a4:c5:7d:06:8c:c8:d7:52:82:
66:83:a4:4d:ba:17:7c:0e:68:f3:ec:79:47:04:5b:
58:5f:23:fc:f1:8a:86:d5:28:96:75:86:6a:eb:d7:
a6:2b:46:fb:f8:cb:d4:f8:17:f7:42:75:97:35:63:
a8:89:87:80:04:76:5b:5e:7b:7b:c0:d7:8f:62:cb:
d2:44:c0:f0:8b:7c:bf:22:95:f8:9c:7f:cc:ea:4c:
30:12:9b:f5:5b:84:f5:58:5a:46:10:b4:07:a2:84:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:49:F6:D5:A2:E7:B1:70:14:35:6D:2E:60:50:06:81:98:E8:A8:4C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7kn21aLnsXAUNW0uYFAGgZjoqEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.203.0/24
Signature Algorithm: sha256WithRSAEncryption
20:dc:78:37:28:52:b1:85:be:0e:ac:eb:f2:79:25:8a:02:31:
4b:82:10:cc:6f:a5:da:72:67:4a:de:a4:dd:d2:df:46:a1:fe:
21:ec:8d:84:a1:61:df:ad:08:a7:9b:a4:93:71:12:43:c3:99:
bb:c9:82:fc:38:06:52:d4:44:c9:7d:ce:5f:4c:2b:46:81:3e:
59:41:1f:9f:ab:cc:f4:f4:4d:24:9b:91:21:e9:ff:2a:cf:16:
51:d4:86:00:04:d8:5a:f1:05:70:96:6b:3f:3c:f2:5b:8d:d8:
8b:d5:39:c2:b2:22:0e:ff:e3:aa:1a:f5:1c:71:82:40:63:4c:
8f:16:70:d1:bf:a4:9f:64:53:7f:70:8a:b3:f4:10:c4:51:03:
21:e0:1d:20:35:85:07:a9:d7:6b:ae:3e:3c:5d:07:40:f4:0f:
cc:9a:4b:cd:17:99:cc:bb:d4:52:49:3f:7c:50:e2:57:45:96:
98:6b:ed:ee:63:29:89:76:ae:0a:16:ce:0b:d4:d4:77:4a:13:
3a:a0:7e:96:dc:0d:b3:e1:76:84:28:fc:95:3e:22:4f:1a:72:
bc:2b:df:8b:8b:87:5a:0c:dd:75:c0:f7:3f:5c:90:f7:06:05:
bb:ce:40:c1:a1:79:09:ef:b7:17:b9:07:d7:c7:a3:f4:51:29:
54:77:6f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:32 2024 by rpki-client on console-fra.rpki-client.org