Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/rqDe8mUlEUyBTaDJVaoI9r7XLEc.roa
File: rqDe8mUlEUyBTaDJVaoI9r7XLEc.roa (raw, json)
Hash identifier: vMuQuGEU2gAYtu9UfoXDRwcKC4HVnsyQuKOjVD+fibY=
Subject key identifier: AE:A0:DE:F2:65:25:11:4C:81:4D:A0:C9:55:AA:08:F6:BE:D7:2C:47
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 018CC26D0DE5DF32CF31766D950A14BE7598
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/rqDe8mUlEUyBTaDJVaoI9r7XLEc.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 92.118.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0d:e5:df:32:cf:31:76:6d:95:0a:14:be:75:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aea0def26525114c814da0c955aa08f6bed72c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ed:47:f1:e7:ce:4b:c5:06:0e:5a:78:8d:9c:
5a:72:db:ef:08:53:6d:21:1b:44:d3:d8:bd:9e:20:
f6:0c:a2:9d:57:67:af:76:68:84:79:1a:a0:9a:c0:
05:37:b3:19:aa:70:ce:01:7b:b2:0a:4a:56:37:c7:
1b:a4:6f:cb:0c:d4:95:9f:7c:83:bf:1e:34:4c:e7:
29:57:71:63:57:4f:fc:38:e3:f8:c9:2c:f9:41:7f:
dd:17:94:76:66:33:2f:e5:35:22:e7:f2:8b:9d:ca:
eb:cb:3b:9a:f0:51:91:48:b1:15:83:0b:df:dd:d4:
54:66:d3:cd:e2:9a:6d:e8:74:83:ba:f5:1c:63:29:
13:8a:fa:f8:a6:bc:e6:d7:3d:16:ea:ae:29:5e:d3:
e1:e1:ba:a7:ac:6d:6a:74:c5:a3:7d:d2:a4:6d:28:
de:f7:64:62:35:25:f7:92:62:1a:1c:9a:fc:07:c3:
19:9f:ea:e3:04:65:18:9f:d3:d0:b4:c5:4c:b3:62:
07:15:30:cc:05:0f:94:0e:b9:8f:99:35:1d:b9:5b:
97:4a:2c:a2:27:2c:cf:bb:7e:69:57:1d:28:c9:ab:
17:e1:ab:84:ac:0f:0d:03:7a:4b:85:40:24:d8:08:
ad:b7:26:35:f9:1e:3b:8d:69:a6:46:47:d7:44:69:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A0:DE:F2:65:25:11:4C:81:4D:A0:C9:55:AA:08:F6:BE:D7:2C:47
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/rqDe8mUlEUyBTaDJVaoI9r7XLEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5a:97:17:ca:17:d7:66:d2:19:7c:5e:bc:b0:db:1f:97:3d:
8a:a0:e0:39:e9:73:48:8d:f2:49:17:49:7c:cd:a8:e6:3b:f9:
c6:92:f2:fc:9b:bf:3e:34:ea:b1:7e:85:f9:ce:3a:cf:b6:31:
14:17:60:e5:97:9e:f9:cc:12:e0:30:9e:9e:41:89:21:e7:f0:
fe:2e:84:91:7f:51:1d:06:8b:be:30:50:a4:52:39:23:43:02:
f7:8f:b0:75:6f:1f:39:15:d3:51:01:84:7d:8c:72:b1:73:a0:
de:9e:66:96:4b:30:3d:b5:1e:22:14:6a:43:7c:2e:50:cf:aa:
c0:57:6b:83:b1:28:a6:cb:83:38:71:74:48:f8:34:20:00:86:
de:9a:49:53:9a:66:d5:cc:bd:78:41:3f:5c:cc:c4:98:9b:66:
a2:0b:d8:52:5a:e5:2e:b8:c3:59:7a:75:79:d2:31:44:cc:99:
c3:fc:ae:eb:96:a8:69:51:54:93:e7:68:5a:c0:a7:3a:0a:d6:
8e:ef:ca:30:8d:27:ad:c7:ff:36:11:f2:25:81:0b:3f:13:6a:
9e:03:09:4e:0c:c9:c8:3d:7c:d6:f5:7b:26:06:1a:f5:1d:8f:
90:b1:38:ff:5a:31:b2:ab:97:d0:ce:4b:dc:dd:04:1c:5d:55:
91:bc:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:56:34 2024 by rpki-client on console-ams.rpki-client.org