Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/p61gOpdT49JaUya9l_NDnlD1pHI.roa
File: p61gOpdT49JaUya9l_NDnlD1pHI.roa (raw, json)
Hash identifier: J5XWKx9JMUyQzj6B4OfcBMJHwIKSNIycRVgIgjPrlo8=
Subject key identifier: A7:AD:60:3A:97:53:E3:D2:5A:53:26:BD:97:F3:43:9E:50:F5:A4:72
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019265B84872980E3487D7F1DF89EC9ECC87
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/p61gOpdT49JaUya9l_NDnlD1pHI.roa
Signing time: Mon 07 Oct 2024 06:43:48 +0000
ROA not before: Mon 07 Oct 2024 06:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 93.114.74.0/24 maxlen: 24
93.114.75.0/24 maxlen: 24
93.114.76.0/24 maxlen: 24
93.114.77.0/24 maxlen: 24
93.114.78.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:65:b8:48:72:98:0e:34:87:d7:f1:df:89:ec:9e:cc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 7 06:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7ad603a9753e3d25a5326bd97f3439e50f5a472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:dc:95:1f:b2:f4:57:fa:56:bf:71:96:3c:
b6:4a:78:6c:ee:0b:aa:34:d5:2a:4c:4c:1d:c3:1a:
47:d4:70:3d:ce:cb:1c:a4:88:ec:3b:2d:a1:0b:35:
44:84:54:14:8a:32:8a:3d:e4:3a:78:17:9f:19:64:
d6:2b:d0:85:56:74:e7:8f:c7:87:77:12:b6:34:b1:
0f:ae:fd:62:56:7b:f2:4f:39:11:9c:c2:7f:ab:2b:
39:d9:e7:62:6e:cf:46:b7:9b:00:12:1e:d0:84:88:
82:a0:7d:6a:d1:b0:3a:8b:f3:af:62:75:39:eb:37:
af:5d:41:cf:ff:6e:15:98:6e:55:95:59:96:5a:9c:
63:5e:d6:c7:79:ce:f2:23:3f:46:f1:cd:c8:ba:6b:
cc:83:78:d1:0b:25:57:ea:75:84:55:7f:2b:86:bf:
6f:78:d3:b8:e6:c7:dc:97:70:f8:c6:79:9b:f1:d9:
6d:4d:1b:20:d7:fb:dd:ca:a8:5e:d7:ae:16:4e:77:
51:33:f1:54:91:ae:34:cf:7d:b2:99:51:a6:77:5c:
fd:54:53:1a:63:6c:2a:d7:4a:e7:a5:c3:60:4f:8c:
99:f4:ff:4a:d1:cf:eb:9b:72:96:5e:c4:d3:04:6b:
76:a0:39:68:5f:cc:db:2d:f8:b1:52:d7:79:3e:e9:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AD:60:3A:97:53:E3:D2:5A:53:26:BD:97:F3:43:9E:50:F5:A4:72
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/p61gOpdT49JaUya9l_NDnlD1pHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.74.0-93.114.79.255
Signature Algorithm: sha256WithRSAEncryption
23:9f:d2:96:7d:2d:cd:81:c5:a9:92:75:ae:ed:ff:af:cb:2b:
2a:f9:31:c8:02:88:40:b8:5e:03:c3:ee:d6:6e:aa:3b:83:82:
d7:66:a1:61:fc:6e:44:a8:a0:72:3a:e8:f8:43:bd:f4:7a:9d:
0d:a1:25:f9:34:70:0f:0b:cc:91:8a:dc:12:72:e8:51:50:0c:
f3:2d:8e:39:e0:1b:e3:e8:03:a6:d7:96:38:73:9c:8d:ee:63:
e8:c2:e0:2a:aa:1d:15:ad:37:75:09:d4:76:48:f1:e2:ef:4f:
b4:7a:48:29:2a:85:34:6d:77:d5:03:64:a7:db:5a:c9:c4:f9:
9f:99:2a:df:04:09:28:3f:a8:f1:8d:7c:b6:bd:22:b5:dd:2e:
c5:df:37:a5:12:87:75:e4:18:6d:60:72:83:79:99:e4:30:34:
cf:22:72:78:0b:6b:c8:63:9c:24:d5:13:fd:6b:0f:9a:eb:f9:
c1:a6:b2:bd:d7:7f:d7:6f:f8:8c:e4:b1:b3:f0:9a:e8:b8:a0:
39:4f:f5:dd:3d:50:49:ba:9c:f5:d4:b4:f7:f9:9a:6f:22:71:
49:87:35:95:58:75:c9:50:64:0c:67:77:56:c2:74:db:56:df:
44:01:b9:d2:17:7e:bd:d1:c5:59:42:48:9e:74:b1:d1:41:05:
e4:58:b2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:43:54 2024 by rpki-client on console-fra.rpki-client.org