Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/D40rIM7CohQMaabqoN1xaEHEgNY.roa
File: D40rIM7CohQMaabqoN1xaEHEgNY.roa (raw, json)
Hash identifier: q/0aD3RZW8fXw750VM03B40QzJUi6Y60nVZHmVE70BM=
Subject key identifier: 0F:8D:2B:20:CE:C2:A2:14:0C:69:A6:EA:A0:DD:71:68:41:C4:80:D6
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 01925764ADC9BAC537655DDB0B7A6DB45079
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/D40rIM7CohQMaabqoN1xaEHEgNY.roa
Signing time: Fri 04 Oct 2024 11:57:48 +0000
ROA not before: Fri 04 Oct 2024 11:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 91.204.78.0/24 maxlen: 24
195.34.94.0/24 maxlen: 24
195.34.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:64:ad:c9:ba:c5:37:65:5d:db:0b:7a:6d:b4:50:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Oct 4 11:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f8d2b20cec2a2140c69a6eaa0dd716841c480d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:e8:8c:7a:4f:e5:74:ec:b0:fc:45:4f:dd:
38:99:68:a4:64:2d:99:19:c4:bc:87:f6:77:56:d3:
33:d2:b9:2f:e8:9f:7e:25:da:84:2f:ca:67:62:e1:
61:44:30:72:50:13:b7:62:6b:f7:4f:27:60:9c:0b:
42:4e:f7:6b:90:d6:6f:4a:0d:d3:4d:27:7d:f4:5e:
67:34:6f:de:bd:50:77:08:52:a1:76:53:47:9b:0e:
ce:6a:fd:13:13:2b:65:40:80:7a:d1:f9:f2:c5:61:
18:9a:33:3e:56:dc:da:da:42:64:5d:ca:12:93:bf:
41:6a:75:a8:ff:ed:57:19:91:9c:0e:e3:7f:2e:fc:
97:0e:a9:77:ae:ad:90:82:98:ce:4b:c1:43:75:9a:
46:78:f6:5c:75:84:cc:2c:a1:6b:e9:83:a5:08:83:
60:c0:a2:a0:74:d2:c4:29:c7:ad:be:7e:61:d4:0c:
20:58:00:9e:30:8f:95:49:3d:b6:88:37:cb:26:c6:
42:63:62:0f:51:41:1b:45:7f:06:3a:33:65:99:28:
fd:fb:6e:72:70:59:9e:dd:d3:24:26:ae:ae:57:21:
40:d8:2d:09:a9:f2:2d:a1:15:c6:0f:d4:09:5b:95:
af:2e:3c:45:04:19:72:30:58:7f:83:6f:70:ec:75:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8D:2B:20:CE:C2:A2:14:0C:69:A6:EA:A0:DD:71:68:41:C4:80:D6
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/D40rIM7CohQMaabqoN1xaEHEgNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.78.0/24
195.34.94.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:2d:b7:bd:ed:67:f0:1d:46:e3:c3:dc:7e:da:5a:cf:db:6f:
b3:9c:e2:1e:b0:20:91:31:e9:cc:72:d5:9f:45:e9:84:9f:d2:
30:ef:7a:ec:69:eb:e1:58:87:c8:27:7b:0d:38:c8:bc:ff:48:
04:fd:fd:7a:4b:16:e4:b9:2a:28:38:c2:31:84:2f:d1:2b:c5:
88:aa:bf:c7:9d:ac:60:79:8e:36:69:09:ea:88:ef:58:a2:eb:
ef:3d:b9:d1:fe:22:18:d2:93:09:16:2b:04:74:7b:88:ea:1e:
b8:90:1f:e1:bd:a2:18:65:e7:fc:64:e5:81:7f:f0:e8:57:eb:
4f:1a:87:6c:7f:e9:0a:38:86:70:e9:0d:ad:a9:d2:b5:ad:70:
b6:c2:58:a6:77:f8:df:c7:69:cb:aa:0e:8f:00:96:03:d9:78:
40:4d:ff:1d:cf:d5:19:99:e1:6b:d8:12:bb:6e:91:33:d9:20:
cf:18:72:c1:1e:e3:d0:df:84:40:20:49:56:1e:26:a8:ef:bf:
65:22:cb:01:e7:04:ba:30:a8:df:9b:90:14:85:25:4e:4d:d6:
81:5e:e6:dc:ee:f9:6c:a9:7f:6b:e5:81:18:b7:f4:58:ac:cd:
6d:54:86:e0:85:7c:d5:b1:20:a8:d8:b7:e2:44:99:89:74:cb:
40:75:a2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:37:37 2024 by rpki-client on console-fra.rpki-client.org