Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/YQTXLjAxi1omvsDmsvcV2Cegte8.roa
File: YQTXLjAxi1omvsDmsvcV2Cegte8.roa (raw, json)
Hash identifier: iLUfvS4cWpoWzelSmQxBA7lhnX90K7kancrALh2kPUQ=
Subject key identifier: 61:04:D7:2E:30:31:8B:5A:26:BE:C0:E6:B2:F7:15:D8:27:A0:B5:EF
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0192B82D3BA24FC5C8F56C9D3E8B15DF154F
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/YQTXLjAxi1omvsDmsvcV2Cegte8.roa
Signing time: Wed 23 Oct 2024 07:00:25 +0000
ROA not before: Wed 23 Oct 2024 07:00:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7922
IP address blocks: 45.147.159.0/24 maxlen: 24
77.111.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:2d:3b:a2:4f:c5:c8:f5:6c:9d:3e:8b:15:df:15:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Oct 23 07:00:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6104d72e30318b5a26bec0e6b2f715d827a0b5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b3:f3:ce:47:62:9b:83:1e:0f:91:35:60:bf:
c5:f4:1c:e3:6f:cd:b9:6b:62:ed:1f:f9:5b:53:25:
19:63:73:12:8a:ec:5e:3b:55:7c:b0:ef:f5:b4:79:
69:f3:ad:17:9a:e3:6b:94:f5:37:20:a7:ca:94:94:
e5:bf:3d:cb:16:83:81:ed:f7:da:56:cf:7b:6e:44:
f6:b8:bd:05:24:95:c6:ea:56:7d:d2:f2:f6:ab:cc:
93:b9:b4:c0:60:da:f5:ee:2f:f8:5c:c4:f5:16:53:
45:70:39:48:82:c0:04:0d:0c:11:0d:de:91:e9:dc:
65:f2:69:e4:fd:82:1e:49:37:f7:97:9f:14:3e:cf:
d2:d2:cb:3e:21:ca:55:27:6c:f6:a1:31:3f:a1:c9:
ff:31:e7:d9:78:eb:59:ba:b6:80:f9:2b:76:6a:a3:
7c:d1:e6:0a:9a:f4:b2:3a:bf:dc:11:6e:8d:66:f2:
fa:7e:6f:81:ae:4f:68:02:2a:40:68:68:fd:73:a6:
b2:ac:33:38:c9:2e:7c:bd:06:ce:ee:1e:92:29:08:
cd:43:81:3f:0b:61:16:86:3e:ff:12:5d:41:b8:a3:
46:82:be:7f:d6:ab:a2:84:31:c1:e2:84:66:f2:42:
12:21:b8:d9:60:b9:cc:e2:4a:b8:f9:64:f0:85:23:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:04:D7:2E:30:31:8B:5A:26:BE:C0:E6:B2:F7:15:D8:27:A0:B5:EF
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/YQTXLjAxi1omvsDmsvcV2Cegte8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.159.0/24
77.111.118.0/24
Signature Algorithm: sha256WithRSAEncryption
44:cb:3a:c0:08:05:1a:b1:3e:d8:1d:55:49:3f:99:66:53:4e:
00:33:55:6a:15:1a:da:c2:55:22:d9:ac:06:39:59:e0:4c:a1:
36:4a:af:f1:57:a4:64:71:3f:9a:e0:73:72:44:9a:ff:cf:e3:
ed:62:87:3f:14:db:73:87:42:0a:41:36:a2:da:12:e6:19:65:
58:5d:f3:16:1a:0e:68:aa:d3:0f:bc:7b:7a:12:4a:d7:f9:dd:
d2:55:3c:44:79:9b:ff:33:a9:98:13:92:0e:ca:ca:e9:71:9f:
4b:18:b4:56:a7:15:22:7c:4b:56:35:ec:34:62:c2:37:0c:d6:
d1:b4:0f:53:60:78:30:8f:93:5b:5b:fc:4e:49:11:68:5f:82:
0f:b7:6c:33:04:08:aa:d5:25:61:bc:6a:1b:58:83:e8:10:da:
84:ce:14:ef:9c:00:81:f7:d9:58:5a:eb:d1:20:30:98:2d:97:
ea:5b:fb:19:f2:0c:37:23:5c:ee:3c:6f:cd:8a:c0:5d:c3:13:
b1:39:54:0f:6f:e0:77:65:1e:1b:bd:ea:bc:b8:15:13:e0:de:
73:5b:69:d9:cc:0f:7d:96:75:36:42:85:de:ff:74:58:de:4f:
92:03:ec:24:66:30:28:88:e8:d5:a9:49:8a:ea:3d:e5:1c:0a:
0f:88:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:36 2024 by rpki-client on console-ams.rpki-client.org