Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/F_z9Ny9xRZM31RWQJ_pWbopacTo.roa
File: F_z9Ny9xRZM31RWQJ_pWbopacTo.roa (raw, json)
Hash identifier: 3LS/y5ll1vmmXYG+6AqDCaK+5mkrgpr91jyU0/8F5g0=
Subject key identifier: 17:FC:FD:37:2F:71:45:93:37:D5:15:90:27:FA:56:6E:8A:5A:71:3A
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01923CBFFFA7E03DF6873B86C77BB3719593
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/F_z9Ny9xRZM31RWQJ_pWbopacTo.roa
Signing time: Sun 29 Sep 2024 07:47:48 +0000
ROA not before: Sun 29 Sep 2024 07:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214170
IP address blocks: 79.124.29.0/24 maxlen: 24
2a01:8740:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3c:bf:ff:a7:e0:3d:f6:87:3b:86:c7:7b:b3:71:95:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Sep 29 07:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17fcfd372f71459337d5159027fa566e8a5a713a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:d2:ab:b9:5a:9c:6e:b7:d5:f1:69:e3:b8:
35:e8:94:84:6f:24:1c:a5:41:6a:d5:dc:b2:ef:0e:
b8:4b:b7:1d:1c:c3:f3:e7:c2:5e:7b:80:f7:45:31:
81:60:fa:77:a9:b2:dc:58:08:d6:89:6b:de:30:4b:
c3:4c:cb:31:e9:06:ea:22:82:9d:5f:fa:45:1a:57:
1c:7e:ff:61:4d:af:17:cb:20:67:ad:aa:de:f7:e7:
ba:6e:12:56:05:d5:8b:20:53:8a:d0:57:77:b2:17:
74:b7:3b:c8:58:32:40:e0:04:b2:31:8c:ab:bc:6f:
11:b4:81:fb:2c:51:93:7b:f9:97:bb:b9:a5:c9:1b:
d0:66:d2:e5:c0:e4:35:1c:6f:68:3d:6a:c6:b7:71:
cd:d4:c2:03:70:5b:72:81:18:78:3a:bb:04:52:e4:
ba:b7:d0:a7:ff:f0:39:ec:e6:ac:e3:0d:96:3d:d6:
f4:9e:49:39:ed:a3:3f:98:85:58:83:6c:dc:74:df:
aa:3a:58:f4:18:35:d3:92:9a:e3:a5:ed:0f:58:04:
29:b9:36:bb:74:83:0b:10:39:86:1c:77:34:a7:56:
6b:5d:83:ac:06:fc:96:99:0e:bb:da:b4:cd:52:f6:
70:9f:51:c9:6d:c7:ff:de:ab:1b:18:62:b0:6d:97:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FC:FD:37:2F:71:45:93:37:D5:15:90:27:FA:56:6E:8A:5A:71:3A
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/F_z9Ny9xRZM31RWQJ_pWbopacTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.29.0/24
IPv6:
2a01:8740:18::/48
Signature Algorithm: sha256WithRSAEncryption
af:18:15:68:6f:fb:15:41:41:1c:0a:4f:5b:dc:12:4e:30:70:
a6:85:39:f7:2f:87:8a:a4:be:17:17:b5:17:84:1b:1c:95:3b:
fa:c1:b1:9e:02:76:eb:4e:67:03:39:88:d7:a1:5f:7c:76:c6:
75:2c:7b:b2:cb:4a:87:ef:1a:f1:a1:cc:7e:66:8a:c0:d2:b4:
68:3f:c5:20:78:b0:ca:0d:c8:61:db:e0:48:42:fc:ed:73:6e:
47:2e:4f:8a:4d:29:25:3b:68:41:99:32:5c:a8:aa:2b:02:dc:
64:7c:26:b6:75:d9:fe:ad:8c:05:b4:d1:0a:62:ad:90:05:7c:
e9:27:68:33:b5:0e:d7:f9:d7:e7:86:f6:ca:45:fc:4c:e2:ac:
28:9b:a0:c6:93:18:f9:04:de:14:bd:ca:41:f2:c2:6a:fd:ff:
82:c6:01:b1:58:54:c3:28:19:e6:04:64:a0:d6:5c:81:ab:00:
44:21:3a:6b:1b:dd:2a:d4:e1:9a:48:53:de:05:93:a3:58:18:
04:ba:47:6f:22:93:09:c6:03:0d:dd:38:99:81:24:e9:90:b7:
39:77:21:01:32:f2:da:e8:a7:e4:25:23:c2:1f:b6:87:1c:2b:
28:f5:63:9d:35:a8:ad:56:80:2a:e5:f7:16:9c:46:da:83:d2:
0a:87:76:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:03:51 2024 by rpki-client on console-fra.rpki-client.org