Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/oPI5bHvKKwhPQ2qOeYWFY0NsLZU.roa
File: oPI5bHvKKwhPQ2qOeYWFY0NsLZU.roa (raw, json)
Hash identifier: 4NPKEVMyiMYnpWakeMvTvtiLMzA4Z3mDCU+mCiEVMT4=
Subject key identifier: A0:F2:39:6C:7B:CA:2B:08:4F:43:6A:8E:79:85:85:63:43:6C:2D:95
Certificate issuer: /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial: 01927B308B86BBE4C5A8353925835D34F3B8
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/oPI5bHvKKwhPQ2qOeYWFY0NsLZU.roa
Signing time: Fri 11 Oct 2024 10:47:11 +0000
ROA not before: Fri 11 Oct 2024 10:47:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 81.26.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:30:8b:86:bb:e4:c5:a8:35:39:25:83:5d:34:f3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Validity
Not Before: Oct 11 10:47:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0f2396c7bca2b084f436a8e79858563436c2d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:da:38:ca:c3:c5:73:3e:0f:b4:c8:09:f5:
6f:9e:4d:64:75:14:5f:33:4f:d8:35:f3:02:1e:2b:
47:8b:11:37:1e:b3:72:d2:fe:54:80:0e:9d:4e:a6:
58:3c:57:96:dc:65:71:38:f2:14:21:73:c5:f9:73:
98:fe:0f:ed:1b:e8:5f:8b:0a:59:13:42:11:32:67:
4c:c4:7d:c5:85:95:95:1b:00:e2:26:1c:de:4d:2f:
8d:3c:a1:d2:5f:d5:36:c3:f9:2d:22:45:e0:bb:7d:
29:3f:49:f9:0b:c8:06:24:ff:1a:6e:d5:55:4d:bc:
f6:ba:a0:72:aa:5a:31:9f:ce:a0:f4:b3:e3:25:b5:
39:ae:91:c3:69:26:18:77:2a:13:76:e9:34:d5:17:
85:ae:25:9b:3a:2d:4b:8a:65:8e:f6:73:17:b7:4a:
66:d4:4f:ed:5b:31:f5:32:23:29:ea:14:18:0b:44:
bf:5b:42:5e:3d:c1:8e:9e:7a:1e:06:5c:09:58:6c:
cb:c7:66:e9:14:c8:99:cf:4f:b9:b8:a1:a8:61:dd:
f5:b5:de:2a:0e:52:e9:0a:5e:2c:36:d1:e9:c6:2d:
56:9a:8a:16:fb:33:b1:17:52:94:59:f3:71:50:9c:
6a:70:8a:aa:af:ce:0f:7c:6c:cd:59:72:65:00:04:
19:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:39:6C:7B:CA:2B:08:4F:43:6A:8E:79:85:85:63:43:6C:2D:95
X509v3 Authority Key Identifier:
keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/oPI5bHvKKwhPQ2qOeYWFY0NsLZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.26.174.0/24
Signature Algorithm: sha256WithRSAEncryption
08:65:02:b1:40:be:1a:94:42:dc:93:c3:90:e6:3a:96:ad:33:
5d:c3:9a:29:c3:20:b7:76:c6:a4:35:31:c8:28:1b:bf:cd:26:
2f:66:7e:dd:42:47:05:fe:0d:31:59:34:f2:89:e0:88:0d:c3:
c2:84:83:dd:bf:69:49:f3:97:5f:cc:5e:e8:c1:53:b7:c6:5a:
43:eb:c6:e2:6a:27:ad:ae:d7:4e:e2:e4:20:46:a5:88:db:17:
64:72:76:a4:a9:f1:bb:22:2a:f8:0f:0e:5f:12:23:20:3e:bb:
4d:65:7c:aa:fb:4d:00:da:1f:38:ef:44:80:70:87:bf:27:e2:
e0:4b:d6:8e:16:04:17:db:fa:70:cf:06:95:2d:46:cf:f0:03:
d0:34:9d:ba:d2:bb:8f:ef:92:5f:73:bc:f6:90:0c:77:d0:b4:
46:a7:86:65:73:dc:46:66:52:5b:6d:02:ff:37:29:98:bc:23:
a4:69:8a:ed:dd:ef:c1:98:96:8d:cf:f1:27:27:21:c4:c2:f4:
30:bc:f6:fe:21:af:ca:a5:35:ea:30:19:77:9b:d3:35:58:a8:
62:c6:22:b3:7e:6d:ee:2c:5b:d5:b0:b2:30:23:ec:bb:b0:4e:
46:d5:b3:fe:77:51:50:0d:2b:fb:15:8f:45:01:fe:fd:c8:d6:
99:fd:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:29:54 2024 by rpki-client on console-ams.rpki-client.org