Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/rpBDSWmqdKh7ijDKQREgZdgk0Tc.roa
File: rpBDSWmqdKh7ijDKQREgZdgk0Tc.roa (raw, json)
Hash identifier: RjTMFAgEuA89wxFVtr8FCzg6hKsF3ahtnFmKQ3XnY+U=
Subject key identifier: AE:90:43:49:69:AA:74:A8:7B:8A:30:CA:41:11:20:65:D8:24:D1:37
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 0190845C9601E13C2987AF67D346DAB21D49
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/rpBDSWmqdKh7ijDKQREgZdgk0Tc.roa
Signing time: Fri 05 Jul 2024 19:26:18 +0000
ROA not before: Fri 05 Jul 2024 19:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 194.39.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:84:5c:96:01:e1:3c:29:87:af:67:d3:46:da:b2:1d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Jul 5 19:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae90434969aa74a87b8a30ca41112065d824d137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:e8:0e:02:38:e5:19:c1:24:e3:b8:f3:a8:
e7:10:1e:d3:92:71:61:5b:b8:ac:6c:79:a0:40:0e:
f6:7c:1e:7e:7c:e1:2b:1b:f0:3c:c1:72:32:6e:c6:
a4:f7:ec:02:82:95:25:97:3a:78:34:62:6b:6d:eb:
e9:ea:3a:d7:a9:7d:5c:8d:d2:80:30:7f:12:2c:d9:
b0:6d:61:e1:d1:c1:66:93:b8:ad:99:10:39:44:38:
65:08:74:34:f6:5a:56:fb:52:d4:20:cc:8e:26:fd:
10:23:8a:94:9e:f7:fe:f0:f6:5d:a8:27:00:1d:5d:
b3:88:16:03:98:ba:6d:17:b3:56:ac:1b:72:11:3b:
8b:d6:f4:e6:6c:06:2b:91:c1:65:c6:21:0e:3b:89:
f6:4a:3a:b0:5d:59:d1:db:8a:ea:04:61:bb:08:d7:
31:79:d2:76:d7:6f:0e:0a:d2:f9:7f:ef:62:db:c0:
32:19:c8:51:0d:72:36:67:23:74:d5:59:d1:f7:06:
79:8c:c7:27:53:e8:bc:1c:53:43:66:79:f5:39:a0:
a8:d2:5f:f8:85:c7:5d:f7:24:fc:70:1e:b1:96:1b:
fc:77:6c:12:4f:75:94:ae:fc:5c:df:d7:52:b1:d1:
74:a6:eb:c7:25:b7:2b:3e:e3:b2:e1:f2:68:b6:d8:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:90:43:49:69:AA:74:A8:7B:8A:30:CA:41:11:20:65:D8:24:D1:37
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/rpBDSWmqdKh7ijDKQREgZdgk0Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.242.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f5:77:74:07:b6:c5:b7:14:7f:17:30:80:ad:2a:07:7f:b1:
5b:07:9d:c2:a6:91:af:ad:dd:03:4f:c2:a5:77:3d:df:1d:fd:
9a:f1:18:26:98:c0:06:a4:c1:a2:b8:69:51:75:19:ec:8a:a0:
c2:46:2e:62:08:5b:6e:d4:cb:1b:f4:a9:24:8b:0c:23:ff:fc:
2b:f0:d6:5e:fc:05:c6:25:07:9b:10:0f:a1:83:ab:87:b6:e5:
95:46:5f:1d:62:eb:43:d4:44:2b:bb:78:4a:a3:09:e0:96:b0:
47:cf:51:5d:17:c4:b4:29:f8:fe:07:2c:72:19:38:e0:35:73:
5c:c9:97:19:61:d2:1c:2c:e8:05:6d:a2:58:78:fc:f7:b5:3f:
33:57:59:e4:86:d8:b1:1d:9f:7f:9b:92:bb:1a:dd:63:c1:05:
3f:af:15:80:c0:1d:a4:e9:b9:d2:b6:d2:1e:30:62:7f:3a:5a:
a0:8c:75:45:f5:d0:35:d3:4e:e7:9f:10:16:ba:4c:af:7d:42:
c2:45:c4:a9:b2:90:fb:a4:7d:a0:a5:af:40:cc:60:57:d1:61:
c4:13:66:6a:7b:1b:52:90:25:a2:af:68:24:16:89:bf:26:87:
b8:71:3a:bf:1c:67:2a:76:23:c9:ab:d3:b2:88:06:bb:a3:ad:
26:f2:28:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:23:39 2024 by rpki-client on console-fra.rpki-client.org