Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/01K5jqJ4MtIfqIwf3hdvbNUO_Xc.roa
File: 01K5jqJ4MtIfqIwf3hdvbNUO_Xc.roa (raw, json)
Hash identifier: X20Am2bvpeh+7MK9AiPAS9dlrf4TC0rYXDxu7WKOXQ0=
Subject key identifier: D3:52:B9:8E:A2:78:32:D2:1F:A8:8C:1F:DE:17:6F:6C:D5:0E:FD:77
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 0190342CDFAE7CE2D4878D3EE748097B550D
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/01K5jqJ4MtIfqIwf3hdvbNUO_Xc.roa
Signing time: Thu 20 Jun 2024 05:44:34 +0000
ROA not before: Thu 20 Jun 2024 05:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48362
IP address blocks: 92.249.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:2c:df:ae:7c:e2:d4:87:8d:3e:e7:48:09:7b:55:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Jun 20 05:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d352b98ea27832d21fa88c1fde176f6cd50efd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:0d:55:d9:51:36:25:0d:4c:83:1e:26:b3:
1d:34:d4:cc:72:70:52:1c:1e:39:56:8b:4a:c7:ae:
86:23:2f:44:9b:5e:b8:26:4c:eb:01:df:40:3b:d1:
3f:5f:b9:28:c4:69:2d:5e:03:3d:f1:c7:3a:9f:55:
79:b1:3f:ff:90:ad:f5:d8:c9:bc:8e:10:74:52:b0:
fe:98:b4:f9:1c:5e:78:68:b7:ef:c4:65:4d:07:b4:
4e:ac:f4:f1:93:56:c6:c3:af:3e:98:f0:59:ea:b9:
a1:66:42:8b:ca:72:90:7d:b0:07:27:4c:9c:65:85:
2b:c7:c1:25:0d:70:86:73:12:44:74:25:8d:8a:70:
9f:5d:c4:7d:d2:8e:68:21:db:dc:98:b4:2d:79:f8:
0f:01:5a:a7:0b:2a:e6:e9:f1:f8:79:75:03:ed:7d:
3d:86:2e:2d:89:0f:bc:85:3b:e3:88:90:02:ee:0c:
63:ab:5b:eb:81:4d:28:00:e6:1f:0c:7e:b6:f5:c5:
a5:fa:63:ce:cd:80:16:a8:21:85:52:81:48:5f:90:
8c:bc:37:0a:5b:68:c3:84:2a:34:8b:4c:cf:91:d0:
84:c0:2b:53:da:3e:41:f8:cf:7a:7d:9b:3b:b5:a5:
c5:60:54:0b:8b:17:07:d2:c0:45:f0:68:a4:b8:db:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:52:B9:8E:A2:78:32:D2:1F:A8:8C:1F:DE:17:6F:6C:D5:0E:FD:77
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/01K5jqJ4MtIfqIwf3hdvbNUO_Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:a2:e0:49:57:83:bf:7b:4b:66:7b:cf:95:61:42:4f:37:39:
bc:d5:43:a5:6d:ab:f6:df:86:3c:5f:e7:70:e6:25:70:9c:ba:
bc:7d:1d:2e:5b:05:88:ce:ff:21:3e:2b:51:84:00:ca:00:d7:
0e:48:74:25:98:b1:0f:ac:6d:40:06:01:d6:cd:0f:b6:70:2d:
23:a8:5d:3d:40:49:af:d4:89:cf:93:ae:70:8c:04:92:a0:00:
29:51:ac:b7:39:92:ca:48:c6:55:ef:58:f4:d6:25:3a:05:99:
98:95:a2:3a:67:22:f2:0a:97:05:56:1b:b0:39:d7:29:a7:08:
c8:ba:04:da:40:b2:be:dd:b5:27:84:33:a4:f7:26:70:79:ec:
5b:0f:45:ac:65:56:32:6f:6b:d7:cb:eb:43:26:f7:b5:ba:8c:
ee:34:ff:0c:9d:a5:63:c2:4f:80:92:38:11:45:e8:ab:10:1f:
9d:ac:e7:04:cf:db:e4:6c:af:4c:9d:e1:99:31:68:6f:6c:af:
b6:1d:6f:26:67:f3:28:61:d9:dd:e0:9e:a2:1d:74:e1:7e:65:
3d:ed:db:07:33:4f:1d:6e:eb:72:b2:68:b9:db:7e:6c:65:9c:
05:89:8e:bd:9c:7e:ac:09:9a:09:ef:68:00:bd:2b:69:53:ec:
ab:f5:f6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:19:05 2024 by rpki-client on console-fra.rpki-client.org