Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RIrAAhPUq-OLK15ElTEutzJfEKY.roa
File: RIrAAhPUq-OLK15ElTEutzJfEKY.roa (raw, json)
Hash identifier: UwGrj2gp5m/senSP2CR49VD3LMJSDbVmYvKiK1ueBXE=
Subject key identifier: 44:8A:C0:02:13:D4:AB:E3:8B:2B:5E:44:95:31:2E:B7:32:5F:10:A6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0190C0269E2225CAE14780F5975E437C0706
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RIrAAhPUq-OLK15ElTEutzJfEKY.roa
Signing time: Wed 17 Jul 2024 10:04:34 +0000
ROA not before: Wed 17 Jul 2024 10:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:26:9e:22:25:ca:e1:47:80:f5:97:5e:43:7c:07:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 17 10:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=448ac00213d4abe38b2b5e4495312eb7325f10a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:7b:73:63:69:12:0a:ac:3b:7b:66:27:d4:
aa:11:e4:35:e9:e3:ae:04:4c:d7:72:23:f3:56:54:
84:a1:5f:d2:d3:cc:a5:cd:ff:87:79:ca:19:e7:44:
9e:68:0a:a4:ca:97:b0:69:39:52:a6:28:6a:a8:df:
87:ad:e9:a4:b3:8d:bc:0a:9c:f8:ba:1c:0d:b5:a0:
2c:5d:8d:c8:da:07:07:f4:6d:f2:27:30:24:fb:92:
05:66:56:88:66:6c:ba:2f:3a:98:55:e0:c1:f6:e9:
2c:4e:4d:32:e0:ef:39:ce:09:d7:cb:80:d9:4e:6e:
f2:d0:12:b7:90:56:71:57:78:d4:bb:da:3d:29:4d:
b0:10:1c:7c:9c:53:f0:a4:c8:73:a7:2c:44:6a:07:
16:1c:a2:23:97:10:5b:72:c8:d5:90:03:d0:83:cd:
40:c5:d9:55:2e:55:bf:ee:a0:e3:8e:02:9e:81:d5:
3d:1f:42:bd:05:6d:9d:dd:26:b8:dc:14:f6:3e:44:
37:fd:76:e9:a6:12:ce:21:2a:3a:a8:7c:f6:01:be:
fd:42:cb:97:5d:3a:f5:fe:0c:3d:86:c8:d1:5a:a6:
28:fb:e8:7d:83:fe:05:c5:68:bb:13:82:95:87:14:
bb:86:de:52:e8:a2:08:92:8d:41:e3:e4:6c:4f:5c:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8A:C0:02:13:D4:AB:E3:8B:2B:5E:44:95:31:2E:B7:32:5F:10:A6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RIrAAhPUq-OLK15ElTEutzJfEKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c2:60:f9:1d:28:4f:a3:0f:c8:e8:16:61:3f:1e:98:e8:98:
ec:b4:c1:8e:16:60:f8:30:6e:1e:3d:fe:b4:93:85:96:8b:15:
1f:f2:6b:41:a5:31:57:95:6b:d2:f7:ae:57:7c:d7:56:00:40:
9f:f0:b4:a3:99:fd:7c:be:33:26:c7:4b:49:2b:ea:64:28:3d:
6e:38:55:4d:1e:33:6e:1b:c0:2d:ee:0c:b4:aa:72:5a:25:ee:
0c:24:a3:70:61:36:eb:40:3e:91:3e:5e:74:9d:fd:09:81:45:
32:88:8e:d6:97:3d:19:e8:ca:3f:c4:b3:0d:06:47:71:c6:2e:
41:d2:a0:29:94:f3:16:32:3a:5f:86:08:e6:93:11:89:81:2c:
bb:36:b5:83:61:6b:dc:9d:57:63:4c:aa:09:85:88:c4:ae:3f:
bc:a0:19:28:f8:73:d5:38:cf:5e:7c:4a:58:cd:49:01:8a:10:
b4:1d:94:29:3d:b6:b7:3c:46:44:2f:1a:a7:f8:97:f9:82:9d:
ad:1e:b7:a4:54:63:1a:16:54:26:3b:eb:cf:4c:2f:cf:64:80:
54:4c:44:b6:f5:07:de:8d:03:6e:ca:21:70:e6:00:c3:7a:c9:
78:cf:6b:0b:3f:07:57:33:02:18:0f:cc:6c:d4:8c:70:a9:98:
69:fa:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:05:35 2024 by rpki-client on console-fra.rpki-client.org