Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pSq_Nf15cLag2Z06xYN8CfDfEUk.roa
File: pSq_Nf15cLag2Z06xYN8CfDfEUk.roa (raw, json)
Hash identifier: 39NFI+vsnqYqPq1unMd65Nl5o3RHhyPs1Qpf5ZWwSLA=
Subject key identifier: A5:2A:BF:35:FD:79:70:B6:A0:D9:9D:3A:C5:83:7C:09:F0:DF:11:49
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0192F8390CE258B68CE973FAF9BF58198A49
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pSq_Nf15cLag2Z06xYN8CfDfEUk.roa
Signing time: Mon 04 Nov 2024 17:29:01 +0000
ROA not before: Mon 04 Nov 2024 17:29:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15440
IP address blocks: 150.241.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:39:0c:e2:58:b6:8c:e9:73:fa:f9:bf:58:19:8a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 4 17:29:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a52abf35fd7970b6a0d99d3ac5837c09f0df1149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:a9:42:f9:e2:f4:7d:eb:6f:27:3c:1d:6d:
2f:39:df:97:f4:d1:ae:e0:a7:2a:08:1c:17:4e:52:
a1:a8:09:2f:5f:cc:cf:e9:4a:62:7b:85:e4:ec:e4:
e9:c5:04:2d:ce:ea:c6:7a:74:68:dd:15:90:4f:66:
73:df:5c:13:3d:f6:78:83:59:f3:88:a4:7e:e0:a1:
9b:4c:45:c1:95:6e:d0:37:d5:51:31:fb:25:44:f4:
19:7c:ef:e5:75:9c:41:c8:ed:d6:06:b7:e5:c0:50:
18:db:44:2e:3b:1a:31:09:51:d8:30:85:95:3f:0b:
c8:58:e6:18:95:e1:cc:2d:e3:43:8e:9b:1d:7f:8e:
cb:d9:b2:3c:71:e5:a1:e5:e5:10:d7:5e:1c:4e:69:
0b:b3:21:e4:04:8c:27:b7:82:a1:74:f8:b1:72:3f:
2f:f7:cc:e0:6a:ab:68:c0:7d:75:bf:78:9f:8a:41:
66:dc:b5:1f:9f:d2:53:f4:d4:95:ed:eb:92:44:62:
5a:94:10:97:5f:21:99:c0:6f:df:90:b8:02:9c:29:
80:b9:de:48:7e:f2:bb:ab:11:4a:04:bc:45:54:08:
b3:d1:da:fa:80:74:13:15:5a:c5:20:0f:14:13:3e:
e5:d4:1e:c7:26:09:20:d7:00:5a:fc:18:d8:2d:67:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2A:BF:35:FD:79:70:B6:A0:D9:9D:3A:C5:83:7C:09:F0:DF:11:49
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pSq_Nf15cLag2Z06xYN8CfDfEUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.124.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f2:c2:67:6a:a4:e6:97:8b:0b:cc:c1:80:3d:ca:68:00:ea:
c7:33:01:93:16:00:34:ff:54:0f:da:ec:64:a6:e0:7c:27:e6:
c9:01:b4:96:52:16:b0:74:c3:64:b2:73:64:76:90:c0:10:b9:
97:2f:26:04:cd:f8:f3:77:81:41:83:ce:72:87:ac:94:d8:98:
42:70:20:f6:78:08:91:b3:ed:78:bb:85:b0:e2:91:65:81:e4:
13:1d:06:b1:2b:f7:40:3c:1f:e5:c5:40:5c:79:78:8e:14:db:
2c:80:f7:7c:f3:1b:82:92:0f:97:b0:e8:80:0b:41:c5:94:8f:
8c:64:f7:48:dc:ae:05:62:bf:b2:e7:d7:0c:01:5e:73:6b:8b:
bc:16:9d:92:c7:07:ad:d2:f0:33:6c:55:a9:39:d9:6e:b4:12:
b3:61:13:27:71:51:bb:37:b3:bb:d6:6f:c9:5a:c0:4f:3f:4e:
e0:e9:98:90:69:cf:ed:9c:9b:74:4f:d9:4c:dd:18:d5:12:e3:
98:4b:e7:28:83:62:ff:16:1d:f0:6f:e4:97:43:ef:b2:9f:af:
8f:b6:11:dd:22:ac:cf:4a:b6:b0:e3:e8:d4:93:75:f6:e8:6a:
19:88:74:49:50:a0:b6:3e:c9:e5:cf:f2:10:92:bc:f3:2e:36:
73:24:be:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:58 2024 by rpki-client on console-fra.rpki-client.org