Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/P98rIcyyKiStl2M8O3Gsre7fd6c.roa
File: P98rIcyyKiStl2M8O3Gsre7fd6c.roa (raw, json)
Hash identifier: sBDPxtvFQorfqUxVJwvSmyGZwPH13Qtcsyd16z6qvXU=
Subject key identifier: 3F:DF:2B:21:CC:B2:2A:24:AD:97:63:3C:3B:71:AC:AD:EE:DF:77:A7
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 0191A35AD07AF24D798D7287014114DF6F74
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/P98rIcyyKiStl2M8O3Gsre7fd6c.roa
Signing time: Fri 30 Aug 2024 12:55:22 +0000
ROA not before: Fri 30 Aug 2024 12:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207429
IP address blocks: 80.253.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a3:5a:d0:7a:f2:4d:79:8d:72:87:01:41:14:df:6f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Aug 30 12:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fdf2b21ccb22a24ad97633c3b71acadeedf77a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:a4:84:fd:b5:fe:64:e7:82:3a:b6:d3:1d:
a0:0e:bf:12:99:25:d6:b8:b2:21:b4:b8:07:bf:3a:
24:7c:59:b7:a1:55:88:81:2d:5a:14:c5:64:0f:d3:
54:5e:da:cf:f3:61:34:ce:21:8f:fd:82:92:1f:ff:
97:4f:4a:e8:17:61:c0:04:e3:56:18:a7:a6:c1:31:
28:2d:c2:27:a8:12:05:f1:f8:04:1a:49:b9:70:68:
9d:58:2c:ab:05:d0:0a:e1:86:db:24:7f:39:91:a6:
14:25:0b:cc:1b:99:88:de:a3:0e:fc:66:63:18:0c:
fc:cc:7e:26:3e:64:b8:88:5e:36:48:1a:dd:7c:b7:
2b:4c:df:66:03:99:1b:d5:65:fe:de:c2:d7:8f:68:
98:0e:c6:4e:ee:26:aa:f9:16:bf:8a:7a:2c:49:6e:
5d:47:6c:d7:8f:2a:0f:74:78:69:8d:b8:fa:c0:f6:
90:47:6b:32:6f:8f:9f:05:e3:dd:69:e7:70:3b:17:
ea:7e:b0:54:f8:77:9c:df:9d:02:e9:4a:44:d8:50:
ab:70:28:08:1f:d6:1c:41:b3:bb:84:ff:75:56:e5:
89:44:8a:78:90:63:d2:01:fc:e8:2e:ca:53:ea:20:
c2:4c:57:bc:37:35:50:16:9d:51:87:2b:86:89:f6:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:2B:21:CC:B2:2A:24:AD:97:63:3C:3B:71:AC:AD:EE:DF:77:A7
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/P98rIcyyKiStl2M8O3Gsre7fd6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0f:0b:30:8d:1a:bf:47:5b:65:08:6b:d4:72:e4:9e:79:20:
d3:a6:f9:17:24:21:97:28:13:b6:3c:0d:11:ff:91:a6:82:78:
8a:02:9c:23:4d:90:cc:2d:93:40:10:f5:10:d6:5d:49:3f:19:
e6:1f:55:4a:f6:f0:81:ae:6a:49:f6:74:eb:df:bf:e1:ba:24:
8f:88:89:bd:d7:41:82:68:39:18:d7:50:48:59:09:dc:c1:d8:
b8:d9:dd:21:16:aa:0f:1c:51:79:1a:a2:5e:86:98:26:85:9c:
3f:ca:0b:a4:fb:92:d0:cc:6d:c3:63:f5:b6:dd:49:8d:50:a3:
0c:dd:1c:bf:bb:43:ac:e0:4d:dc:b2:9f:81:6a:1e:a1:a5:83:
b2:b3:0a:72:e7:39:a4:18:0a:6c:2b:3e:6e:d8:61:76:1c:07:
4d:7e:3b:49:63:96:05:68:0e:ce:7d:93:dd:75:d0:5d:26:3e:
7a:97:c3:33:41:00:51:b8:e1:05:fd:4d:f9:c1:fe:6e:cd:a9:
a8:70:5d:0e:16:e0:30:64:7c:a7:39:a8:b4:06:79:27:23:87:
3b:ad:00:58:b5:8a:80:5f:c7:70:b7:3e:af:38:b7:5e:12:81:
ca:b2:ab:14:ac:4e:7a:76:9b:2f:07:b6:52:08:da:3b:c5:94:
d0:84:d5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:57:05 2024 by rpki-client on console-fra.rpki-client.org