Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/fXqj2mVIaJutVzFgezBU8rma6bo.roa
File: fXqj2mVIaJutVzFgezBU8rma6bo.roa (raw, json)
Hash identifier: QhhRKyHBNk5QGQzQkforQkVa1BbsooAyMv7AYL+XZdA=
Subject key identifier: 7D:7A:A3:DA:65:48:68:9B:AD:57:31:60:7B:30:54:F2:B9:9A:E9:BA
Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial: 019271529ACEF7D81871C1F69A5977BC63AF
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/fXqj2mVIaJutVzFgezBU8rma6bo.roa
Signing time: Wed 09 Oct 2024 12:48:11 +0000
ROA not before: Wed 09 Oct 2024 12:48:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 213.109.150.0/24 maxlen: 24
2001:3bc0:b1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:52:9a:ce:f7:d8:18:71:c1:f6:9a:59:77:bc:63:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Validity
Not Before: Oct 9 12:48:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d7aa3da6548689bad5731607b3054f2b99ae9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:bb:80:58:38:27:d0:c8:bc:94:3e:a7:d9:
d9:f1:0c:92:fd:42:df:b2:d0:dd:ef:2b:14:a9:9a:
6b:33:b7:cf:1e:ec:b5:28:7a:6d:82:78:80:c0:4e:
6a:04:9f:4c:60:74:a1:1e:7f:f9:35:10:a4:81:f0:
42:4e:2c:fd:3f:54:e0:37:58:10:44:cb:2d:7f:87:
ed:19:7f:a6:07:23:39:45:3c:bd:82:34:1d:12:74:
31:72:01:11:03:6a:81:eb:b8:d4:bd:e5:ba:1e:69:
84:44:a1:e8:d7:8c:c3:90:c1:9c:08:a1:e6:97:0a:
03:3d:87:16:21:00:f4:f6:20:03:12:79:08:43:68:
20:b4:77:95:9a:36:87:59:8f:82:87:61:92:c3:e9:
fb:f9:49:2b:15:59:6e:f0:b3:ed:e0:ec:39:be:e0:
d8:17:ff:5a:7b:49:db:5d:b6:bd:a1:86:ee:d2:a8:
92:c4:99:37:72:86:52:83:b4:92:8a:6f:91:a7:2c:
ac:3e:67:45:26:31:b3:fe:a3:bf:4f:e9:9e:21:77:
33:54:9a:7c:ca:31:47:78:74:30:17:2e:cf:66:64:
3f:62:f2:ef:de:c1:22:8c:a0:77:39:b0:7e:30:ae:
84:f6:df:de:aa:48:3a:ce:10:5c:3e:d1:45:e0:d7:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:A3:DA:65:48:68:9B:AD:57:31:60:7B:30:54:F2:B9:9A:E9:BA
X509v3 Authority Key Identifier:
keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/fXqj2mVIaJutVzFgezBU8rma6bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.150.0/24
IPv6:
2001:3bc0:b1d::/48
Signature Algorithm: sha256WithRSAEncryption
87:5d:12:76:ad:d4:49:d2:31:b3:5c:e6:18:ec:ec:08:23:42:
58:ca:57:bc:fb:07:63:50:78:57:b3:14:0a:3c:7d:e8:77:df:
fb:44:a8:5d:56:d7:37:8a:c7:2a:71:a5:b1:d6:cb:72:50:56:
42:e3:56:a9:a8:69:84:64:61:5d:6e:73:5e:9d:ac:ff:ba:9e:
68:72:cd:f0:9d:7b:19:62:a1:51:30:95:fb:c3:8a:9a:c6:40:
04:4d:3f:2b:39:f9:bc:ba:d3:2a:65:a0:fb:5b:10:a0:2c:1a:
22:f8:87:ca:8f:b7:19:34:df:66:29:52:ed:87:ff:5b:cd:5e:
51:de:6b:a1:b8:ae:cf:e1:7a:f9:57:34:49:d8:f3:bb:f5:49:
0a:b1:ab:38:8f:04:36:4a:bd:97:c0:89:ff:ff:7e:f5:75:7e:
f9:6d:27:c1:2f:5f:cf:96:bc:76:ae:b3:fd:ce:f1:1c:07:99:
1c:79:fe:53:8b:d9:02:6e:38:e3:40:10:d1:e5:a1:97:04:78:
3b:08:04:d9:b3:f8:b8:a1:50:7e:96:31:f8:ed:6b:d7:68:25:
0c:5a:ae:79:4b:34:fc:83:1c:6d:90:8c:c1:60:8b:5c:77:b5:
50:31:06:a4:6f:69:f3:81:d9:1d:e3:9d:a9:45:35:f0:e9:46:
da:f8:71:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:46 2024 by rpki-client on console-fra.rpki-client.org