Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/669_mPqQq0veYXVKhP6mbjLqsTU.roa
File: 669_mPqQq0veYXVKhP6mbjLqsTU.roa (raw, json)
Hash identifier: /W6utbOr8b1pnMb8yiA9NBBEG4S9IW4vRlSCRFzFMsw=
Subject key identifier: EB:AF:7F:98:FA:90:AB:4B:DE:61:75:4A:84:FE:A6:6E:32:EA:B1:35
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 018CCA2B5B7CC45E829C651C747F06001435
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/669_mPqQq0veYXVKhP6mbjLqsTU.roa
Signing time: Tue 02 Jan 2024 12:34:48 +0000
ROA not before: Tue 02 Jan 2024 12:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17941
IP address blocks: 176.121.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:5b:7c:c4:5e:82:9c:65:1c:74:7f:06:00:14:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 2 12:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebaf7f98fa90ab4bde61754a84fea66e32eab135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:ef:9b:5c:0f:58:ca:f4:cd:49:7c:cc:91:
c9:b7:54:8a:a6:36:3e:6b:69:75:78:f8:3f:b6:9d:
26:5f:a8:b1:7c:88:54:1c:bf:16:e9:6b:1c:75:b5:
b7:b4:39:e5:5b:53:90:7f:1b:15:bc:ec:f7:9d:27:
ab:14:8a:12:9a:f7:c8:5b:d5:94:69:40:3a:65:65:
32:a5:e6:73:f2:62:53:b4:78:12:0d:e9:ef:6a:17:
16:95:68:36:70:37:7e:d7:fa:b0:d1:86:00:e2:fa:
8b:2b:e3:05:f4:26:23:d7:73:ef:24:7b:03:6e:00:
ba:2b:d6:fb:cb:67:65:12:d1:1d:63:f4:a6:2b:b5:
16:d4:97:8e:41:b6:be:cb:20:61:24:60:0a:37:dd:
04:d0:dd:36:69:d1:25:e6:01:a5:51:cc:02:8c:0a:
be:c2:17:58:a6:9f:1d:12:f8:db:29:6d:66:00:0e:
63:cc:13:1e:7f:ce:3f:6a:02:7e:ad:8e:7c:b8:c8:
52:16:9a:e0:a6:d6:8f:4f:4d:e1:f3:e3:9c:b9:f5:
2e:97:ca:60:b1:8a:87:f6:40:04:91:5e:5a:d7:5b:
1f:8a:04:e7:7a:98:00:b9:81:70:b1:8b:3b:8f:3c:
eb:64:8e:8a:3c:30:cd:03:e7:0d:72:7b:bc:cb:98:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AF:7F:98:FA:90:AB:4B:DE:61:75:4A:84:FE:A6:6E:32:EA:B1:35
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/669_mPqQq0veYXVKhP6mbjLqsTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:71:50:a1:c0:de:9e:00:84:0b:0b:3f:78:fd:e3:5f:ce:55:
fd:eb:6c:9b:b2:4e:f0:0c:ea:49:3b:18:58:92:85:11:f2:47:
e8:ef:7a:7f:c1:7a:66:15:2a:54:23:08:be:fd:26:b2:90:d7:
2a:3a:9a:33:4f:e0:ba:db:72:d6:f1:92:1f:30:59:ba:1b:c8:
be:f0:e4:6f:5b:cc:e6:df:49:84:b6:df:5c:d2:9d:c8:1e:fa:
0c:ec:46:07:d6:a6:20:a6:e3:dc:2c:89:f4:af:90:85:63:66:
8f:12:6d:bf:d7:e9:96:31:8e:40:b8:33:81:32:e8:9f:65:89:
3e:72:e6:52:fa:28:1f:85:5d:08:ae:82:cd:2d:e2:49:23:39:
cb:28:e4:51:48:8b:70:e2:4f:30:62:3f:20:3c:07:d6:fd:0c:
17:ea:34:d7:08:44:50:a4:cb:fb:cd:dc:2e:d2:38:9d:1d:4e:
cb:2d:ff:f7:6a:b0:6e:2d:a0:03:f4:13:06:be:0d:6a:87:e6:
1e:00:2e:24:ae:82:e9:7c:0b:3b:19:24:91:51:ee:6d:2e:a7:
4c:e7:19:50:11:0e:c5:3d:98:5c:54:85:40:64:41:9c:e2:23:
ce:14:1a:c8:86:51:69:da:cb:b4:68:48:3c:dd:75:e9:57:59:
74:84:0a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:36:48 2024 by rpki-client on console-fra.rpki-client.org