Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/pHd19mkV_kZ5Gzaig-3EP9MYDw4.roa
File: pHd19mkV_kZ5Gzaig-3EP9MYDw4.roa (raw, json)
Hash identifier: CuG+nEy8Dwl4b2TK6S80z3/Kdv2Ru+6Wf5LgLQmFba0=
Subject key identifier: A4:77:75:F6:69:15:FE:46:79:1B:36:A2:83:ED:C4:3F:D3:18:0F:0E
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 01930DFC094B889FC9EB45F32B88429BBF98
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/pHd19mkV_kZ5Gzaig-3EP9MYDw4.roa
Signing time: Fri 08 Nov 2024 22:54:01 +0000
ROA not before: Fri 08 Nov 2024 22:54:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215826
IP address blocks: 94.141.122.0/23 maxlen: 24
94.141.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0d:fc:09:4b:88:9f:c9:eb:45:f3:2b:88:42:9b:bf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Nov 8 22:54:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a47775f66915fe46791b36a283edc43fd3180f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:45:29:f7:2a:f3:07:b5:9b:75:08:03:a2:
b6:f4:4d:73:dd:a1:e8:38:6a:37:ba:f9:9b:65:87:
12:67:f1:d7:d8:bd:3c:04:38:89:69:18:11:29:29:
ce:c3:70:5f:b4:1b:87:6b:20:d0:75:30:e4:03:fb:
0a:4d:8a:15:1f:71:58:f7:cb:6b:26:5f:00:b8:55:
3d:7d:01:37:2f:01:75:37:2e:b2:c3:a9:38:a0:a8:
02:5f:d4:bd:a5:0c:1a:a5:3d:e1:2c:e2:ed:b3:c0:
18:85:81:80:dc:e7:be:e8:4a:2b:ca:66:cc:5c:15:
c9:f3:58:db:f2:55:5c:33:60:70:9b:4b:78:09:b1:
5e:85:76:36:b6:97:d5:3d:c9:12:a4:80:07:2c:60:
8e:bf:35:6b:29:70:1f:55:f5:fb:55:4e:56:4f:fc:
00:98:0d:e7:ab:e2:7d:13:d0:13:52:d4:74:a2:19:
96:bc:81:24:71:49:5d:89:7a:14:d0:47:c1:4b:f1:
62:25:ec:59:52:c3:a6:74:c8:c0:c1:cd:7d:ae:73:
ba:48:49:45:d3:46:b9:a7:1e:ca:c0:02:6d:c7:31:
0c:4d:b4:64:44:e4:ee:a5:a0:1b:8f:2e:d4:97:29:
eb:6a:d2:54:ab:06:d8:87:84:c7:77:cf:c0:ec:69:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:77:75:F6:69:15:FE:46:79:1B:36:A2:83:ED:C4:3F:D3:18:0F:0E
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/pHd19mkV_kZ5Gzaig-3EP9MYDw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.122.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:11:42:10:6a:7e:71:7c:62:b4:93:d6:55:44:a2:a2:28:c5:
50:cc:4c:6e:07:24:a7:fa:d8:b3:76:83:4e:51:8b:73:f2:e7:
29:12:95:b4:7f:88:b5:a4:84:75:18:8e:28:60:bc:39:70:f9:
38:27:53:cf:7f:8e:8e:1f:9d:23:0e:e3:f9:3e:57:8b:46:c7:
ae:7e:b6:07:40:9f:a4:a8:97:a2:37:12:8c:c4:32:1a:2d:e8:
5a:c4:b8:1d:ae:da:39:88:87:50:29:19:a1:aa:9b:f4:ef:bf:
c4:07:78:f3:56:25:d1:b9:b9:b6:9b:04:76:17:2a:4b:02:86:
88:96:9b:5c:d7:f3:8c:0b:b4:76:91:8c:54:e7:12:94:cd:ea:
4e:a0:e4:63:1d:58:c9:3e:63:72:b2:83:1b:97:fd:53:00:27:
f5:52:d1:9d:40:bd:b2:54:97:85:75:0d:43:1c:3d:78:2a:98:
3f:35:bd:67:10:59:04:49:45:e7:ba:5d:e2:b6:ae:bb:6d:5d:
0c:5c:41:9d:8d:57:bb:78:d3:ff:11:7b:c4:f5:9c:67:40:e4:
44:06:53:6f:a6:24:9e:b9:86:7c:9c:df:ef:db:cb:4e:1d:33:
00:25:56:27:d2:09:de:cb:d4:62:65:b0:ab:37:14:27:1f:2d:
bb:ef:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:03:35 2024 by rpki-client on console-ams.rpki-client.org