Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/x8ul3ML5g8mpdVyBWw-Hrh3s4Rk.roa
File: x8ul3ML5g8mpdVyBWw-Hrh3s4Rk.roa (raw, json)
Hash identifier: n9SXyyI7N+MgIcejCH/491zOJn+M4zDhLo1x/DFpMUk=
Subject key identifier: C7:CB:A5:DC:C2:F9:83:C9:A9:75:5C:81:5B:0F:87:AE:1D:EC:E1:19
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019259455527DE4CE454B89FE0D98DFE6423
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/x8ul3ML5g8mpdVyBWw-Hrh3s4Rk.roa
Signing time: Fri 04 Oct 2024 20:42:48 +0000
ROA not before: Fri 04 Oct 2024 20:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214857
IP address blocks: 178.239.154.0/24 maxlen: 24
185.215.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:59:45:55:27:de:4c:e4:54:b8:9f:e0:d9:8d:fe:64:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Oct 4 20:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7cba5dcc2f983c9a9755c815b0f87ae1dece119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:63:24:2b:ee:d1:e1:81:67:be:73:7d:97:
7e:2d:15:ca:33:8a:02:c4:c6:cd:28:7f:60:dd:8b:
d2:1a:1e:87:45:ba:72:19:3d:ec:04:6e:1d:6f:2f:
e7:09:86:d9:42:0d:02:f6:bd:5e:9d:1e:83:3c:87:
79:20:7b:c5:6b:b5:c8:85:56:f8:27:41:82:cf:14:
64:72:fb:c8:52:af:25:15:83:b7:c3:08:85:94:22:
b0:a2:d3:43:61:61:92:93:12:de:41:2f:28:1e:d0:
bb:81:b0:3c:d0:37:af:48:c6:26:ac:5e:a2:46:23:
fe:c3:29:c8:f4:df:d3:1a:67:3c:49:67:10:4a:1b:
74:8b:c5:0e:b9:79:a2:c0:84:43:0c:b6:36:c0:c3:
df:17:7b:c0:96:20:92:66:f8:66:31:d5:15:72:f1:
5d:8b:41:dc:e6:c3:d2:d7:51:78:a9:41:44:7b:1e:
38:7c:64:82:33:08:0b:b0:e0:52:b5:65:21:73:72:
53:0a:58:a1:5b:4d:bd:05:a0:af:4a:b0:40:4e:2a:
d2:00:77:be:1f:9d:25:bf:7d:ee:86:06:1a:e4:02:
ed:c1:b1:b8:03:30:05:3a:c3:c2:97:33:94:ae:07:
79:e0:8e:e3:48:10:4b:77:1c:b2:d3:be:b8:a5:33:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CB:A5:DC:C2:F9:83:C9:A9:75:5C:81:5B:0F:87:AE:1D:EC:E1:19
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/x8ul3ML5g8mpdVyBWw-Hrh3s4Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.154.0/24
185.215.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5e:e0:ee:01:d9:8c:b0:40:0c:dd:89:57:dc:ff:38:48:40:
83:84:17:95:95:2c:36:b5:41:2a:d4:44:b9:37:d5:bb:3d:fc:
44:d5:66:42:92:10:5a:01:50:4d:03:b6:a3:24:24:d1:68:2a:
ff:db:fb:a7:ed:69:b7:cf:76:58:be:1f:26:c3:6e:84:ad:02:
81:7b:ef:3d:58:fc:c6:97:db:ca:1c:8e:68:eb:54:ce:37:16:
f0:30:1e:a2:62:d6:f7:ba:41:22:74:da:84:e1:d5:0d:52:9e:
13:2a:bc:33:92:17:00:2a:19:f5:7a:0a:c5:f3:27:95:7f:bb:
f8:d5:cd:db:4c:d4:d0:1c:ff:7d:31:80:bd:22:bf:08:ee:fc:
a1:0f:05:db:41:93:1d:cd:81:9a:15:60:36:18:55:28:3a:59:
ad:6f:49:1d:38:0a:0a:43:bc:4d:b0:b0:9c:64:b7:80:66:91:
9e:61:db:8c:1c:05:a3:d2:03:ce:94:a1:11:db:6c:1d:c3:6f:
06:c9:83:43:79:07:45:ae:9e:af:f4:45:6c:cb:11:16:f2:91:
45:c8:77:f9:70:92:25:1d:76:0e:28:52:c1:c3:5a:08:53:41:
10:f7:63:00:c0:ef:44:b3:00:ad:07:f5:d9:b7:07:e2:d0:23:
1a:79:3d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:49 2024 by rpki-client on console-fra.rpki-client.org