Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Idf8YZFLjV2gkpKuajUmOR2S648.roa
File: Idf8YZFLjV2gkpKuajUmOR2S648.roa (raw, json)
Hash identifier: itZ4SuwUCbK/j9YE27N7enX1v7JfLnQ5hsKuwRUh9Vk=
Subject key identifier: 21:D7:FC:61:91:4B:8D:5D:A0:92:92:AE:6A:35:26:39:1D:92:EB:8F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F0AD3E9A2B2DDF7A5EC63BBDFB3C8F611
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Idf8YZFLjV2gkpKuajUmOR2S648.roa
Signing time: Tue 23 Apr 2024 12:00:10 +0000
ROA not before: Tue 23 Apr 2024 12:00:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216183
IP address blocks: 109.176.245.0/24 maxlen: 24
213.218.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:d3:e9:a2:b2:dd:f7:a5:ec:63:bb:df:b3:c8:f6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 23 12:00:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21d7fc61914b8d5da09292ae6a3526391d92eb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:1f:5a:6e:d4:de:8e:7e:6d:a8:89:a6:24:
53:70:11:a7:e2:fb:62:c1:be:cc:d8:80:b6:9d:b9:
3b:36:9c:2e:91:7c:1f:5b:1c:07:03:30:b4:23:49:
1f:40:65:ca:af:fe:2b:0b:94:d0:c5:3f:ea:e0:a6:
31:57:d4:e5:61:3e:3d:ce:66:be:42:64:6a:25:d4:
9c:e8:c5:6b:1a:58:fe:39:46:53:86:59:b2:fd:59:
76:b0:99:24:87:ef:f1:33:7c:66:13:7e:e6:7c:4f:
5d:c9:e2:f3:38:b9:a3:7b:cf:d1:30:5b:9b:39:b0:
c4:ce:b2:81:b7:4b:a3:34:92:de:70:5a:58:a8:ba:
f3:d6:61:25:d5:9c:50:d8:5c:86:3a:de:24:26:64:
eb:77:57:01:31:f6:26:98:da:cc:38:14:ff:dd:cb:
b3:df:87:d6:24:61:b4:d7:2e:ce:e1:08:dd:b8:bc:
68:a9:d8:8e:94:83:79:85:c5:a3:78:7c:3a:a8:51:
f0:9d:4e:a4:2e:21:3f:bd:ee:2a:55:95:55:9a:a3:
08:f4:fd:60:ba:63:63:a3:fe:dc:78:df:74:94:19:
41:f0:a6:aa:62:96:91:cc:95:c2:21:b7:f9:6e:9c:
a0:5d:a3:65:23:f5:b7:eb:ff:e6:7e:03:c9:11:78:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D7:FC:61:91:4B:8D:5D:A0:92:92:AE:6A:35:26:39:1D:92:EB:8F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Idf8YZFLjV2gkpKuajUmOR2S648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.245.0/24
213.218.250.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e6:b6:2f:4f:df:27:39:60:15:32:02:ae:c3:f0:bc:53:dc:
6d:52:7c:52:fa:b4:99:f8:75:82:e4:3a:bc:a9:07:17:33:63:
6c:ed:6c:b4:5d:08:b9:00:87:cb:20:8d:d4:ca:bf:19:fc:0d:
34:76:d3:04:4c:89:ae:f5:83:36:f2:cf:bf:99:22:05:c9:11:
5c:7d:b8:61:28:05:ac:e3:bc:f5:b4:7b:25:fd:cd:3f:91:4a:
fa:df:b7:d3:01:ed:29:83:a9:d4:46:f0:1e:37:25:c3:04:22:
a7:05:ca:36:ce:33:46:b0:b2:42:5b:fa:a0:17:fe:44:a6:a7:
98:82:b6:bb:a7:36:7f:41:a7:30:bb:b6:25:82:3b:76:52:27:
3a:ab:77:4a:2e:6f:ba:eb:6d:4a:9f:59:7f:cd:62:97:0e:16:
c7:1c:45:95:54:ce:d0:a5:70:ac:0c:76:dd:a3:93:ad:62:90:
5c:43:c5:e5:9b:d2:e1:db:4c:21:31:34:b1:0f:86:13:dd:50:
dc:5e:66:19:ec:31:0f:fa:8a:8b:ee:4d:56:60:4c:6c:bc:19:
5b:29:0b:2d:5d:43:4f:35:0e:30:c5:d7:7c:49:b3:f7:c2:33:
6f:a9:06:5c:f0:a2:04:3b:b2:93:4f:fa:0f:ce:46:c2:b2:6d:
a2:33:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:00 2024 by rpki-client on console-fra.rpki-client.org