Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/sFHh2Dll6KVCk0DaDMJpBcdAZj4.roa
File: sFHh2Dll6KVCk0DaDMJpBcdAZj4.roa (raw, json)
Hash identifier: kmtQEfHolRUpUiNiYSUGpNicWpudkLkSJbrZYLebBHg=
Subject key identifier: B0:51:E1:D8:39:65:E8:A5:42:93:40:DA:0C:C2:69:05:C7:40:66:3E
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC4938A071E8CC5B2910F241698123A07
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/sFHh2Dll6KVCk0DaDMJpBcdAZj4.roa
Signing time: Mon 01 Jan 2024 10:30:52 +0000
ROA not before: Mon 01 Jan 2024 10:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209181
IP address blocks: 92.249.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8a:07:1e:8c:c5:b2:91:0f:24:16:98:12:3a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b051e1d83965e8a5429340da0cc26905c740663e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:48:14:ca:f5:cd:30:a0:61:b5:40:12:1a:
70:4f:44:65:fa:d3:3e:1f:3a:e9:07:33:a6:48:2b:
8d:90:6e:3e:00:55:bd:08:19:af:ef:ba:05:91:16:
8e:12:82:93:00:fd:35:95:e3:b0:23:a0:f2:a3:19:
15:41:88:fa:4f:02:28:d3:4c:43:c0:77:54:c8:f4:
a9:71:ec:d2:fd:7d:f6:13:f7:43:ea:65:d5:70:88:
c1:94:9e:b7:1a:96:7a:28:c2:6c:7a:6e:34:11:2b:
dd:aa:77:f3:8d:74:0c:bc:61:90:2c:d2:36:e2:ec:
34:b2:82:94:8c:d9:d8:bc:c0:4b:87:5d:91:af:db:
f6:f1:6c:21:59:71:a5:09:b6:ae:e8:9b:81:22:00:
3c:5d:fe:7b:58:79:cc:ec:54:3f:32:3c:50:56:49:
40:fd:d9:68:4a:f0:c6:33:ab:06:66:1e:69:c7:aa:
9f:5d:5a:f4:03:05:45:c1:6d:8b:84:79:7a:42:10:
21:e0:60:69:72:97:e1:31:42:16:b4:ba:7f:16:f9:
70:ab:41:8b:54:1f:11:dc:e9:a3:3f:50:74:0a:ba:
27:7a:14:c2:3d:94:c9:02:73:46:a3:ce:29:53:41:
2f:55:05:a5:b3:7b:9a:a2:fc:01:53:f0:bb:42:bb:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:51:E1:D8:39:65:E8:A5:42:93:40:DA:0C:C2:69:05:C7:40:66:3E
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/sFHh2Dll6KVCk0DaDMJpBcdAZj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ef:da:ff:ad:da:0a:52:87:b0:4f:e2:b9:04:22:0d:97:92:
86:73:e1:f5:29:4c:2a:4e:49:1d:27:84:98:04:0e:c9:1c:b7:
0e:1f:35:60:40:2c:f7:33:3e:ec:62:a6:19:d5:01:95:1e:49:
f4:81:bd:af:14:ce:12:6e:1e:fc:63:47:cd:74:28:a7:40:c4:
45:58:db:1b:b4:f1:a4:b3:a2:37:4d:86:5c:68:48:a6:e0:6d:
93:51:93:a1:e4:5f:d4:77:71:37:34:83:22:47:3f:a7:f1:86:
36:0b:b6:63:5c:08:29:db:c4:a3:75:46:3d:7d:2f:54:aa:53:
a8:ce:04:cc:d5:bb:b1:0d:1f:65:ce:03:1d:65:31:d2:5d:71:
28:e0:66:57:03:5a:76:59:25:f8:44:da:70:c0:e4:a3:b4:e5:
94:d6:65:22:26:32:4c:79:9a:b0:77:b7:79:a4:02:d9:e9:a9:
02:76:3d:2d:63:dc:f3:39:3e:ff:dd:22:1e:c4:18:2d:41:c0:
a2:32:b8:7e:d0:b2:b5:1f:fa:45:71:68:4d:86:f6:e2:ff:52:
72:5e:f5:da:18:89:0f:9b:21:5e:2b:c9:64:5d:07:2d:ef:39:
ee:76:81:bb:5a:98:09:ab:84:16:34:c7:38:9c:c2:d8:b1:25:
16:c7:46:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:51:05 2024 by rpki-client on console-fra.rpki-client.org