Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/PH5GBu0P7ypFt6ymSQOT-mOoPBM.roa
File: PH5GBu0P7ypFt6ymSQOT-mOoPBM.roa (raw, json)
Hash identifier: tb6xyr57OOJElftP/sZXhO+I5iGLIx6IliwwL93DaRc=
Subject key identifier: 3C:7E:46:06:ED:0F:EF:2A:45:B7:AC:A6:49:03:93:FA:63:A8:3C:13
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 0192A5DCB1C53CE5FAF2B8F1DED6822B0021
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/PH5GBu0P7ypFt6ymSQOT-mOoPBM.roa
Signing time: Sat 19 Oct 2024 17:39:16 +0000
ROA not before: Sat 19 Oct 2024 17:39:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207489
IP address blocks: 194.76.145.0/24 maxlen: 24
194.76.149.0/24 maxlen: 24
194.76.150.0/24 maxlen: 24
2a0f:ae40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a5:dc:b1:c5:3c:e5:fa:f2:b8:f1:de:d6:82:2b:00:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Oct 19 17:39:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c7e4606ed0fef2a45b7aca6490393fa63a83c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:9c:3c:e0:a7:61:72:09:9a:57:0c:66:ae:
06:33:92:37:02:a1:5e:f3:2f:04:dd:64:1d:a1:ee:
7c:17:fc:ee:7a:53:f3:b5:77:78:ee:e8:b0:88:25:
b6:a4:81:2f:44:a6:f8:38:44:3b:ea:17:a2:f0:df:
c4:47:c0:14:e4:b9:24:68:3a:89:e5:b8:21:10:ff:
c8:71:f7:a9:14:a9:14:88:84:5e:87:9f:78:36:d3:
6f:63:08:8e:71:07:4b:4d:e6:f9:da:46:e5:1a:01:
fb:b9:cb:fa:55:7b:dd:f1:1f:15:f4:c9:07:b1:58:
3b:b3:40:9d:0b:bf:6b:0c:78:98:3c:26:0f:ee:03:
1b:20:80:b1:ce:a9:67:6d:7f:57:d4:8e:a3:d2:3e:
57:d4:e3:c2:83:b9:c7:bf:8d:c4:c8:d4:ab:b8:5e:
88:47:f6:a1:54:6e:b0:55:57:9f:83:b6:8c:90:8d:
1d:a8:10:e8:b0:f1:64:b8:95:5d:50:72:5b:93:1a:
d0:33:7d:dd:24:b3:5d:b7:f0:37:1e:3b:ab:6d:24:
d6:81:5b:4d:8c:6e:3f:e6:dc:d1:29:1a:39:6c:f8:
e2:5e:91:8c:26:78:2c:e0:8f:12:e3:a9:f0:03:82:
35:d2:5b:6d:f4:10:0c:3a:1d:2b:01:c2:11:ca:2c:
d7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7E:46:06:ED:0F:EF:2A:45:B7:AC:A6:49:03:93:FA:63:A8:3C:13
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/PH5GBu0P7ypFt6ymSQOT-mOoPBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.145.0/24
194.76.149.0-194.76.150.255
IPv6:
2a0f:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
73:6d:82:34:0c:cf:88:c9:9d:4b:fc:c7:8f:95:b7:e6:1b:b4:
97:d9:39:d4:14:a1:00:dc:3f:57:00:e7:03:db:cb:1c:26:4b:
54:b9:aa:6b:2f:fd:68:83:5a:59:52:da:c4:99:23:ec:31:e9:
9c:d0:e0:ba:a8:41:f1:84:8a:bf:df:49:ce:07:3e:91:2d:f7:
9e:c6:60:59:36:f6:7f:dc:b9:33:e1:be:f7:2e:e3:5d:05:f2:
d6:37:3f:1e:cf:7b:d1:c3:46:51:52:63:4a:b8:3f:74:db:4d:
58:94:a5:63:2a:8b:24:fc:a7:da:72:06:b1:c8:d8:80:d0:ac:
9a:e2:ab:56:67:9e:fb:32:5a:36:cf:29:24:1f:c2:bd:81:ed:
42:72:de:f8:99:cc:88:f1:c1:f6:61:9f:3a:9e:10:16:90:d7:
5a:7a:3c:84:26:eb:4c:6b:c0:0a:c9:32:0b:92:60:c1:45:4a:
85:86:c5:7c:85:b7:c2:7b:5a:dd:dc:8e:e2:c8:d6:20:cc:d5:
8a:1f:c1:ba:d5:ca:46:89:ec:97:9b:49:98:51:d9:c2:b7:5e:
ae:59:ce:45:2c:40:2b:cb:de:68:a0:d1:73:b8:30:af:14:4c:
74:f9:7d:3c:4b:76:41:67:50:82:76:fa:cc:4a:e2:af:7a:d9:
0b:b9:28:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:29:57 2024 by rpki-client on console-fra.rpki-client.org