Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/U8IeqmilQ5XQn1e1FNhWmFaTXj4.roa
File: U8IeqmilQ5XQn1e1FNhWmFaTXj4.roa (raw, json)
Hash identifier: j8NzL6t4L3k7wJp/RlAYjI7U0755ZYn8sM7owiEZc3Q=
Subject key identifier: 53:C2:1E:AA:68:A5:43:95:D0:9F:57:B5:14:D8:56:98:56:93:5E:3E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192777866F9A2E688B3F23BF55F34367DBD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/U8IeqmilQ5XQn1e1FNhWmFaTXj4.roa
Signing time: Thu 10 Oct 2024 17:27:12 +0000
ROA not before: Thu 10 Oct 2024 17:27:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56594
IP address blocks: 217.145.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:77:78:66:f9:a2:e6:88:b3:f2:3b:f5:5f:34:36:7d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 10 17:27:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53c21eaa68a54395d09f57b514d8569856935e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:02:1b:76:8e:15:71:33:c7:71:3a:ed:6d:
16:d3:57:0e:9f:a5:b3:02:cf:27:89:0a:29:04:49:
af:0c:52:70:e8:49:dc:1a:85:be:75:04:83:1b:57:
f1:a4:c8:60:aa:54:52:13:32:f8:ad:46:62:f7:34:
60:30:4a:78:16:b1:24:ac:ca:76:24:be:73:5e:5a:
6e:a2:fa:78:20:c7:1d:af:d1:a7:f6:ce:2e:fe:bb:
23:f3:27:2b:ca:1b:b8:cf:9b:86:7c:44:1d:9f:d3:
3b:68:87:d4:a1:8e:f7:ec:b1:fc:29:75:5b:2f:53:
18:a5:38:82:00:52:0e:b7:58:a8:bb:53:74:4c:2c:
f2:6a:da:33:5a:e9:3b:00:c5:0d:e9:1f:5a:38:63:
92:e4:e0:93:35:d0:45:7a:39:f9:3b:a4:25:ce:ea:
bb:58:d2:90:07:7e:f5:7d:8d:f8:5b:98:5f:db:92:
28:3a:0f:6a:da:a0:b7:96:87:c3:35:fe:22:33:31:
2d:8f:76:42:ad:41:f0:8b:66:c4:79:fa:1e:9b:6f:
15:e6:87:97:29:41:4f:b4:6a:5e:ad:ec:5e:9d:4c:
07:99:8c:91:00:f8:c8:1c:58:67:3d:9b:e0:07:14:
31:3f:61:cd:7b:a9:7f:39:45:ba:cd:9b:b9:0a:b3:
d3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:1E:AA:68:A5:43:95:D0:9F:57:B5:14:D8:56:98:56:93:5E:3E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/U8IeqmilQ5XQn1e1FNhWmFaTXj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.79.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b2:f8:11:9b:84:83:94:c2:84:5d:77:aa:f8:ba:9e:c1:fe:
da:c7:c0:40:2d:8e:81:aa:74:fc:de:f3:e8:39:78:7c:76:51:
99:44:c7:d1:11:03:1d:5a:d4:fc:24:73:01:ae:1c:65:b3:44:
0c:95:20:98:6b:2f:98:fe:e5:10:06:3b:ce:85:df:f9:58:18:
e6:b5:f2:84:29:82:1f:71:ef:a3:9d:1d:b2:a1:72:80:5e:fd:
3d:5c:da:9e:8a:c3:3e:1d:56:06:a5:a5:3a:d8:5e:67:24:c5:
a5:c3:43:16:45:bc:0e:f4:a0:dd:6b:ff:05:ee:de:bb:03:ff:
7b:05:d5:f8:50:54:7b:23:a2:39:c2:4a:8b:55:ee:28:a7:8d:
4e:30:52:f4:7f:d4:dc:d2:ca:da:6e:67:ca:65:80:1f:ff:2d:
70:54:11:89:b3:3b:0c:90:01:4e:df:78:ac:da:c2:a8:c1:60:
41:be:23:1f:4d:8c:43:d6:30:9b:e4:87:59:c1:24:89:54:45:
d6:ac:91:06:2e:5d:fc:c4:a9:ce:e7:50:77:d8:e1:7e:9f:44:
ff:d2:7e:29:0f:b2:12:26:48:2c:30:69:be:24:b7:64:8b:3d:
5d:62:21:65:ce:65:6b:45:26:c8:1e:d0:55:69:f6:dc:e9:16:
7f:1a:ce:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:15 2024 by rpki-client on console-fra.rpki-client.org