Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/7cmDyWgIlKSV7V5-oiOYw0dTwe8.roa
File: 7cmDyWgIlKSV7V5-oiOYw0dTwe8.roa (raw, json)
Hash identifier: NB7hmBAJPj/4aypTQffdc74GoMH9u3ypVEl9wXTTxFE=
Subject key identifier: ED:C9:83:C9:68:08:94:A4:95:ED:5E:7E:A2:23:98:C3:47:53:C1:EF
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 01922DEFE25EF5EE7B482CEE0384610914C9
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/7cmDyWgIlKSV7V5-oiOYw0dTwe8.roa
Signing time: Thu 26 Sep 2024 10:45:48 +0000
ROA not before: Thu 26 Sep 2024 10:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199698
IP address blocks: 82.199.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2d:ef:e2:5e:f5:ee:7b:48:2c:ee:03:84:61:09:14:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Sep 26 10:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edc983c9680894a495ed5e7ea22398c34753c1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:87:35:86:b6:f5:30:a7:f0:1d:58:c8:33:0b:
86:91:5f:58:f6:e0:ce:c8:b7:43:2f:d7:4e:52:bf:
88:f5:f2:34:73:00:fc:82:1f:cc:16:c2:6f:5b:e2:
41:43:32:ef:e6:f4:2d:10:dd:4a:fb:d1:3f:26:73:
e8:ce:a3:ae:2d:7e:1c:f2:a2:64:cc:81:66:2c:35:
89:26:52:fa:e2:af:c2:0c:df:8c:13:57:7a:4e:9b:
46:5c:62:1b:af:be:56:fe:44:e8:37:54:6d:cb:1d:
fc:a7:ed:50:3e:4d:5a:06:88:8a:3a:1e:bc:1d:3f:
ae:f8:64:df:a2:68:d4:71:01:22:99:19:b8:a1:91:
ae:ea:cf:9c:c7:e7:70:35:8e:53:f8:63:a7:75:b0:
76:3c:31:93:e2:c5:58:0b:b9:d9:28:d6:d8:ed:da:
df:1d:dc:14:64:99:7a:88:af:e9:6e:1d:56:85:19:
73:a2:8b:a8:a4:0e:53:40:18:6e:2a:ca:6f:bc:2e:
40:ca:3e:d1:69:ef:89:7e:42:a2:96:b5:59:71:69:
73:c2:ba:28:c0:32:a4:54:b4:92:71:17:82:3f:47:
80:9c:ec:c6:e9:89:b5:3d:d4:f9:49:66:c8:63:80:
9b:38:f0:ee:7c:0a:c8:5b:1c:df:73:c0:63:da:2b:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C9:83:C9:68:08:94:A4:95:ED:5E:7E:A2:23:98:C3:47:53:C1:EF
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/7cmDyWgIlKSV7V5-oiOYw0dTwe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.199.202.0/24
Signature Algorithm: sha256WithRSAEncryption
60:75:1d:93:f6:48:4b:df:50:35:cd:a9:20:f4:b0:b2:f7:b3:
57:ad:38:47:e0:30:34:94:d0:6c:fd:d4:14:e9:60:36:7b:f1:
b0:8c:f5:59:13:df:5c:69:f7:f7:0c:49:ca:0f:af:3a:87:44:
89:df:a1:5c:1a:4e:d9:fc:34:9b:4c:1c:e1:28:3d:89:f5:af:
10:fd:7e:83:94:9a:83:64:d0:4b:83:90:03:33:fe:5c:7b:bd:
f8:f9:47:57:4f:63:3b:e0:5e:35:4b:be:43:df:2a:fc:9a:29:
bc:dd:72:9e:9f:80:ed:9e:ec:53:50:e6:d0:9e:93:89:57:22:
34:9b:ff:bb:4b:65:11:ed:e4:ed:44:51:9b:f4:a8:33:f5:c5:
c6:45:6d:bc:ed:04:02:fe:e3:da:cc:94:d4:cf:1a:74:66:4e:
35:20:9b:d0:a2:75:e4:65:c5:72:fb:6e:09:20:c1:d0:43:2a:
cb:e0:d6:a0:b1:46:b0:37:23:0d:f5:c1:70:45:67:1e:e8:ae:
67:22:1c:eb:c4:67:c2:5e:e3:70:08:66:24:2e:b7:9c:b5:fa:
00:8b:b3:6c:ed:f6:52:d0:d0:3d:b9:75:9f:22:8e:e8:2a:ea:
2b:8c:3b:b8:b2:9b:6c:0f:f3:62:2e:5c:cb:9c:1b:f7:f0:1d:
f7:34:df:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:34 2024 by rpki-client on console-ams.rpki-client.org