Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/pxCSK2sl_3RNhgcDV0ZM-cFtYN4.roa
File: pxCSK2sl_3RNhgcDV0ZM-cFtYN4.roa (raw, json)
Hash identifier: Ce769dsa8yq/HK/S7SF+LbK/5swGJsPkQ3hbCJmgmuU=
Subject key identifier: A7:10:92:2B:6B:25:FF:74:4D:86:07:03:57:46:4C:F9:C1:6D:60:DE
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0192A9C388F89155A1474309FFBF827CBDFA
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/pxCSK2sl_3RNhgcDV0ZM-cFtYN4.roa
Signing time: Sun 20 Oct 2024 11:50:17 +0000
ROA not before: Sun 20 Oct 2024 11:50:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214526
IP address blocks: 178.239.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a9:c3:88:f8:91:55:a1:47:43:09:ff:bf:82:7c:bd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Oct 20 11:50:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a710922b6b25ff744d86070357464cf9c16d60de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:c8:55:8d:7a:b9:2c:c0:64:26:87:b9:d7:
9f:26:33:1e:f1:ee:62:92:dd:d1:87:09:88:53:fb:
f9:c5:fc:c2:f4:46:c2:62:aa:61:7e:1a:4e:d5:81:
62:8f:6f:b8:74:eb:12:6a:9b:39:61:3f:6d:81:0d:
70:fd:02:13:1c:63:6d:5a:8a:68:52:75:2c:0e:11:
ed:ee:77:85:1b:50:bc:4c:ad:25:dd:6a:d1:9d:f8:
8f:f1:16:d1:fa:ab:4e:45:95:66:bc:1b:00:30:5d:
b4:90:e3:88:f6:1e:65:7b:26:3f:3b:25:ff:b4:f1:
35:78:64:89:0a:1f:b3:6b:92:a4:36:a1:41:6b:f3:
97:a9:e3:b5:57:89:63:87:ad:29:19:5a:14:6e:50:
28:ce:5a:8f:23:14:6e:58:b1:48:07:93:a8:45:81:
19:2b:20:46:58:3b:48:6d:30:3a:e6:56:b6:8d:86:
ab:50:31:58:0e:79:ae:d0:65:b9:b7:89:74:6c:88:
61:1d:f9:9c:ff:9f:1e:ed:0b:8e:be:c7:6e:2c:e3:
78:ed:8e:46:6f:86:ea:e5:3a:ee:ca:67:7e:38:48:
92:57:e0:a4:4e:25:31:ca:7e:54:7e:4d:0f:f5:0e:
a7:37:25:dd:08:a6:cb:2a:c6:06:91:4d:3f:69:a8:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:10:92:2B:6B:25:FF:74:4D:86:07:03:57:46:4C:F9:C1:6D:60:DE
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/pxCSK2sl_3RNhgcDV0ZM-cFtYN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:a4:1b:01:9f:5f:ea:bf:db:c2:df:d8:c2:ef:4a:03:69:dd:
d2:fb:96:9a:33:8a:9a:34:b1:e0:27:0f:ce:af:4c:93:67:5b:
16:f5:98:10:7c:17:bc:3a:25:e8:a8:88:a9:89:ff:2e:96:44:
b1:3c:23:c1:e2:64:e7:f8:a3:8c:37:ae:c1:e2:f6:20:05:3c:
fb:a6:c7:94:92:92:07:2d:2f:79:06:8a:5c:e2:df:ba:b2:f6:
68:30:ee:bc:29:f0:bd:05:28:a6:5d:87:48:81:95:c7:4b:23:
b4:c2:32:c6:bd:04:de:0f:e4:45:f3:86:53:17:d2:f9:42:88:
b5:9d:1d:7d:21:b7:2d:3c:66:43:63:c2:81:b3:df:f5:a6:57:
90:5b:31:dc:32:a4:a1:c9:3d:f6:47:34:38:6c:45:9b:31:0a:
b0:7e:6e:4f:ae:2b:ed:12:67:a7:62:d6:be:bc:d6:4f:a0:ac:
6c:5d:fb:9d:42:74:f5:5a:1c:bd:f0:c3:4a:bf:12:f9:6e:80:
be:06:e5:29:4c:a5:e0:84:7f:cf:5f:12:2d:e9:e3:53:c0:cc:
26:90:04:6e:4d:3a:ce:30:d6:75:58:40:92:78:70:4b:9a:5e:
48:a0:06:01:6c:6e:31:67:49:d7:6c:40:13:74:d3:d3:8a:dd:
1b:dd:09:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:59 2024 by rpki-client on console-ams.rpki-client.org