Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/afQaoNpZN2ulbrguAzu11Mfk8SU.roa
File: afQaoNpZN2ulbrguAzu11Mfk8SU.roa (raw, json)
Hash identifier: /4XuirX0SE5qSpiYlxEDqGm1W9hXAMnFYi65TxqH65A=
Subject key identifier: 69:F4:1A:A0:DA:59:37:6B:A5:6E:B8:2E:03:3B:B5:D4:C7:E4:F1:25
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 019065A7DF19BDE77B58184A5BA5C752C0DD
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/afQaoNpZN2ulbrguAzu11Mfk8SU.roa
Signing time: Sat 29 Jun 2024 20:20:18 +0000
ROA not before: Sat 29 Jun 2024 20:20:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 92.53.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:65:a7:df:19:bd:e7:7b:58:18:4a:5b:a5:c7:52:c0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jun 29 20:20:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69f41aa0da59376ba56eb82e033bb5d4c7e4f125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:59:b9:d8:81:9f:4e:2c:7e:b8:b5:5c:e5:44:
00:57:1d:1f:6e:59:e4:03:c9:ca:5f:17:14:d1:60:
7b:75:1a:e6:42:f2:61:9f:7d:fd:dd:78:25:88:c9:
4e:17:d6:02:b6:e3:c4:a8:94:d3:28:40:5d:42:e5:
8d:9e:ef:5d:c8:a9:2b:56:71:e3:e4:05:15:5e:9e:
02:57:fa:c1:6b:55:b9:20:04:0f:7e:18:d2:98:41:
c5:06:04:8f:d1:83:d8:92:d0:64:b6:03:3c:19:6b:
83:dc:11:d2:dc:d0:8f:cf:d1:da:89:fb:9c:fc:cc:
c4:29:5f:34:8e:f6:cc:a0:a8:9f:00:5e:76:57:54:
62:7a:61:7a:7e:be:ed:b7:7a:31:9c:33:2f:33:ef:
3b:3d:37:12:7d:8f:67:09:b7:92:b2:fe:5b:37:d2:
62:36:82:0c:ae:30:eb:b3:63:30:b8:12:6d:40:82:
70:30:01:27:c1:72:d5:c2:b5:76:b8:d6:32:f3:5c:
cc:9a:88:2c:08:ba:f3:55:84:9f:50:0c:ec:e8:a0:
56:96:dd:d0:86:32:bb:cb:d9:9f:8d:76:cb:57:b9:
6a:9d:3f:de:9f:a1:fd:b4:bc:c5:77:82:67:b9:7c:
9b:6f:a4:85:61:28:8c:d3:44:36:f4:8c:82:dd:c3:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F4:1A:A0:DA:59:37:6B:A5:6E:B8:2E:03:3B:B5:D4:C7:E4:F1:25
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/afQaoNpZN2ulbrguAzu11Mfk8SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:5b:ca:28:07:aa:b2:c0:77:e9:19:92:ac:22:9a:61:94:27:
28:99:1a:49:53:75:37:71:b0:d6:aa:d9:db:e0:d9:ad:a5:c4:
ba:dc:ec:ba:86:30:81:fd:b0:c4:fd:48:05:f0:d5:39:33:ba:
8c:68:0a:31:35:00:15:96:03:f9:84:1b:eb:5f:bd:5b:9c:fe:
16:7f:d5:15:3b:6a:be:23:51:ad:27:48:4b:73:59:de:50:e8:
25:8b:30:19:22:4e:6c:6c:94:bf:ff:53:fd:ba:aa:71:89:e0:
cc:e0:54:5f:6f:9a:75:5c:41:4f:26:fa:0e:9d:d0:84:c6:d7:
22:e5:61:9c:ca:87:bb:34:64:f0:0f:20:73:5c:f6:f0:86:09:
17:63:f3:4c:6f:5d:14:5f:a1:5f:cb:d7:8f:0c:95:7b:48:19:
eb:df:14:84:18:6a:57:89:45:5e:fb:24:a1:46:8a:f8:47:35:
1f:b5:b9:78:c7:6e:ff:47:c3:d1:ad:a2:35:f5:f2:01:7b:3b:
10:77:26:21:3b:05:be:fa:ec:23:07:af:6d:df:1b:bb:e1:87:
98:77:d7:4b:01:70:be:55:9c:91:86:88:df:53:6e:f4:ea:2c:
96:dd:ae:3d:7e:f0:d1:95:b4:58:ee:23:75:8d:6f:ec:2b:b8:
74:a5:d2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:47:32 2024 by rpki-client on console-fra.rpki-client.org