Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/aOq2wfkT9lrq9a1dJkDaHaK0cxQ.roa
File: aOq2wfkT9lrq9a1dJkDaHaK0cxQ.roa (raw, json)
Hash identifier: jmUwZWG8BTnxxcKMtlycoRTUsrbHKGCX6/JFiaVT/q4=
Subject key identifier: 68:EA:B6:C1:F9:13:F6:5A:EA:F5:AD:5D:26:40:DA:1D:A2:B4:73:14
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018CC500B137FCD164842FB57E4F7B9D62C9
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/aOq2wfkT9lrq9a1dJkDaHaK0cxQ.roa
Signing time: Mon 01 Jan 2024 12:30:06 +0000
ROA not before: Mon 01 Jan 2024 12:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24768
IP address blocks: 92.61.97.0/24 maxlen: 24
92.61.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b1:37:fc:d1:64:84:2f:b5:7e:4f:7b:9d:62:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 1 12:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68eab6c1f913f65aeaf5ad5d2640da1da2b47314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:a9:b9:38:d7:1d:4a:4e:80:47:f1:37:bc:
5e:6a:38:f2:2c:e0:5c:a4:af:84:b0:67:d3:bf:e7:
8b:c6:9a:75:ff:42:15:9c:16:62:f7:d5:a6:6d:e4:
9e:70:95:83:bc:52:3f:23:29:3e:d5:da:a1:36:75:
0c:c8:7c:50:89:f4:e5:ae:22:f6:6d:c2:ae:fc:3e:
32:4e:e7:bc:b7:cc:25:83:8c:8a:22:49:b7:b5:bc:
3d:ff:6c:e4:37:5e:d8:54:7a:4f:dd:cb:ba:9e:f6:
45:53:95:5d:28:ee:5b:0d:cf:f1:63:76:aa:62:4f:
66:6c:5e:26:3a:64:83:ed:6f:84:a3:ab:02:c8:57:
13:c7:d0:74:a2:a1:bd:ee:cf:fe:dc:c7:18:86:dd:
e1:0c:13:04:9e:6a:97:c5:dd:36:15:9a:43:a6:00:
f9:04:c5:d3:aa:bb:97:94:33:f9:1f:71:4a:30:b8:
cc:c6:b4:b1:5f:c4:19:3e:a2:13:80:6b:30:25:cd:
3e:8f:6f:82:29:18:88:49:0c:78:4b:f2:1f:6a:63:
d4:69:17:fb:61:40:3a:ca:e9:98:68:f9:d2:83:aa:
35:ca:1c:7f:a8:ba:2a:40:56:7c:81:58:42:82:3c:
9b:f3:b7:35:83:b9:81:ec:16:b4:c9:14:29:86:1c:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EA:B6:C1:F9:13:F6:5A:EA:F5:AD:5D:26:40:DA:1D:A2:B4:73:14
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/aOq2wfkT9lrq9a1dJkDaHaK0cxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.97.0/24
92.61.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d4:37:e8:e3:93:98:d8:77:a3:a4:c4:b6:44:41:78:34:6a:
4e:f3:47:1e:a0:f5:3a:51:a1:9f:44:a7:bc:90:aa:0b:ca:d5:
f8:ee:6d:91:24:80:0d:18:23:12:e1:09:f9:82:d1:f1:6f:0b:
49:56:0e:24:8a:17:51:b8:5e:d5:ed:ed:fd:c5:8e:7b:63:42:
13:db:0a:69:b0:8b:52:a3:f1:2b:c2:39:d8:1e:bc:34:68:72:
8a:13:7c:ac:e8:58:74:b0:e3:c0:75:bd:02:e3:9a:99:f8:dd:
39:ab:12:11:3a:ad:52:c8:cf:01:02:f9:01:b1:0a:3a:17:ea:
4d:28:33:f1:8f:4a:7d:c4:06:cf:71:e2:eb:ee:26:fb:26:a7:
77:31:13:38:a9:d4:0c:e7:06:97:27:63:45:f1:f2:06:36:1b:
96:21:fe:22:4b:78:28:96:15:9f:38:aa:5d:84:ac:df:d8:a3:
fc:75:29:6d:ea:52:3d:0c:43:89:93:5c:03:f8:b4:13:f3:6f:
f6:98:bc:98:06:69:f0:0a:79:44:e6:b8:f5:d4:00:44:a1:29:
6c:b4:d5:6b:a9:db:b2:13:e9:f8:c7:b0:0c:05:fa:ac:6c:0c:
8c:f7:90:eb:b8:b4:4c:9f:e3:4e:5b:21:ac:84:47:3c:10:d5:
13:7d:d0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:22:09 2024 by rpki-client on console-fra.rpki-client.org