Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EOn2SapLD2sTqygNnP2IFwSV7oc.roa
File: EOn2SapLD2sTqygNnP2IFwSV7oc.roa (raw, json)
Hash identifier: d9fWnfkJC32qPCe8x1ngYt69UMtNDcqq+myFcb3xTrU=
Subject key identifier: 10:E9:F6:49:AA:4B:0F:6B:13:AB:28:0D:9C:FD:88:17:04:95:EE:87
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018CC56EE80A57AAEAE2DD3AC82013BE3BFA
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EOn2SapLD2sTqygNnP2IFwSV7oc.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20911
IP address blocks: 79.124.9.0/24 maxlen: 24
80.72.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e8:0a:57:aa:ea:e2:dd:3a:c8:20:13:be:3b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10e9f649aa4b0f6b13ab280d9cfd88170495ee87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:9d:f5:07:ba:bd:2e:76:55:cd:12:cf:23:
8f:91:d0:bc:a2:aa:3d:c3:36:e0:cd:91:0e:28:ea:
a7:00:f6:7a:cc:13:65:ad:eb:83:37:02:82:90:d8:
3f:30:9d:01:7f:15:2d:0a:a8:33:1b:af:21:a1:7e:
5c:b9:e7:c8:a0:5e:fc:d4:fa:d8:1e:41:4c:c1:ab:
a1:69:41:fd:4c:69:99:96:d2:02:6e:d2:d9:f7:57:
3c:73:d9:e8:b2:ef:4e:97:61:53:44:92:d6:8d:96:
85:1d:3b:30:b7:63:f1:16:4c:01:ba:4e:3b:96:1f:
19:78:6a:51:39:00:58:af:a7:d7:c6:63:95:b8:52:
9d:5d:8f:74:c8:0e:41:5d:6c:0f:93:d6:1e:db:1c:
e8:1c:0a:80:20:05:80:98:3c:98:3d:54:e5:40:38:
df:35:41:b8:f9:e8:ff:6c:c9:54:cc:e0:c8:8e:d3:
7d:ef:fa:fe:d3:e1:ac:3c:f4:76:ea:d2:7e:f5:f6:
53:20:fd:51:61:5c:f6:11:14:1c:a7:d6:9c:ad:19:
a3:22:58:37:7a:ed:b6:39:f7:ea:da:71:e6:78:e7:
a5:0b:f7:a0:c2:dc:1e:38:65:10:67:2c:e9:28:f5:
96:17:9e:4a:52:8d:c5:90:ee:66:99:ae:2b:df:ea:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E9:F6:49:AA:4B:0F:6B:13:AB:28:0D:9C:FD:88:17:04:95:EE:87
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EOn2SapLD2sTqygNnP2IFwSV7oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.9.0/24
80.72.88.0/22
Signature Algorithm: sha256WithRSAEncryption
31:78:34:50:47:f5:2b:7e:df:d6:d8:98:67:d3:96:df:4d:eb:
dc:85:ae:e4:5a:c7:bf:4c:bc:c4:c1:a3:82:d1:6d:43:e4:9f:
c9:5d:e6:95:f8:6d:fe:bb:ba:8c:46:56:f3:b7:c4:70:86:0b:
e5:d8:4c:fe:c9:9c:50:9a:69:a0:38:f3:74:4d:22:b5:87:d0:
48:59:53:ae:51:87:c6:3b:dc:af:b5:d2:12:a2:91:28:5a:a3:
d2:d7:1f:5c:f6:6b:a8:42:5d:81:42:43:a5:47:e0:73:24:56:
6d:03:e1:d6:a5:fe:8b:5e:c1:62:4d:c6:c6:56:6d:e5:bd:53:
e8:3c:eb:f8:2c:49:ae:ae:7a:31:0b:c7:b9:60:d0:01:aa:f1:
8a:bf:83:36:fc:77:31:f3:d6:00:4b:7f:ec:3f:77:d4:10:61:
66:77:ec:cc:51:b4:73:21:86:b5:22:8b:0c:02:76:21:00:ac:
8e:fa:fa:da:a6:7e:74:49:73:ec:58:a5:07:14:71:73:72:2b:
2f:24:89:71:c6:82:1c:28:f6:ff:9a:a7:c3:7a:4f:7c:54:2e:
75:f3:0d:71:c3:93:5e:e6:71:6a:49:4a:40:88:da:1d:40:e7:
e6:81:03:61:1b:18:ae:cf:b3:64:da:4a:0b:a9:ce:90:41:1a:
e6:50:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:03:51 2024 by rpki-client on console-fra.rpki-client.org