Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sFhqCoYoPNgv5uwRPxqrG7gvtUQ.roa
File: sFhqCoYoPNgv5uwRPxqrG7gvtUQ.roa (raw, json)
Hash identifier: 7s5x/Kawj/qkl/4v8NkHbi5HAJ8dEBS+J1tBdlMwF8Q=
Subject key identifier: B0:58:6A:0A:86:28:3C:D8:2F:E6:EC:11:3F:1A:AB:1B:B8:2F:B5:44
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0192324BEA08D8452BE205581A48584448A7
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sFhqCoYoPNgv5uwRPxqrG7gvtUQ.roa
Signing time: Fri 27 Sep 2024 07:04:48 +0000
ROA not before: Fri 27 Sep 2024 07:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214251
IP address blocks: 194.14.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:4b:ea:08:d8:45:2b:e2:05:58:1a:48:58:44:48:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 27 07:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0586a0a86283cd82fe6ec113f1aab1bb82fb544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:bb:1c:66:1c:44:d9:69:bd:ee:6a:94:99:
22:4d:e1:be:82:e7:71:cc:37:6a:2b:96:b0:27:d3:
16:1a:32:9f:a0:8e:71:ed:b6:0f:a0:63:73:01:72:
f8:ab:7d:18:0e:71:c0:a5:42:a1:c5:3d:8d:f7:e4:
30:0a:6d:a5:7e:f2:ca:05:54:49:9a:10:be:00:7b:
b1:c3:5b:fa:96:09:bc:af:ec:c2:a7:81:b3:80:d1:
c7:7a:bd:a6:7f:36:df:a4:16:9f:1d:f8:94:cb:31:
37:c7:8a:10:3e:ca:41:58:0d:f6:4b:eb:f8:3e:9f:
19:a1:18:b4:f6:50:a7:62:13:bf:66:e2:ad:c3:21:
40:9f:82:3f:48:29:06:be:3d:07:1f:a2:69:d6:8e:
14:f8:78:6d:bc:28:5d:61:51:67:bf:a7:63:3e:eb:
b6:d0:09:0c:8d:59:e4:ea:76:90:47:87:9a:c0:ce:
70:46:55:c2:35:01:74:78:e5:33:80:a7:86:8d:5a:
7d:27:48:cd:b1:19:80:dc:32:21:fb:81:de:65:ee:
29:ac:63:8d:47:69:f4:97:fe:d2:89:3b:92:7d:2a:
ba:eb:ab:8d:5d:56:c0:1f:04:bd:2c:78:41:da:da:
9e:56:b4:82:ec:16:b5:24:b0:49:82:46:6e:04:fa:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:58:6A:0A:86:28:3C:D8:2F:E6:EC:11:3F:1A:AB:1B:B8:2F:B5:44
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sFhqCoYoPNgv5uwRPxqrG7gvtUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.133.0/24
Signature Algorithm: sha256WithRSAEncryption
10:da:03:b3:53:30:66:99:09:d0:a6:6e:72:87:c0:43:0a:5d:
8b:6e:27:51:fa:f4:31:10:06:d3:29:a0:b0:1a:4e:a3:f6:81:
d5:79:56:b1:56:73:6e:51:02:03:d9:f8:c5:dd:8d:17:c4:88:
c5:47:d1:03:ea:b3:8c:19:cc:cd:0f:92:f3:aa:1c:15:70:76:
38:41:cf:54:d6:ce:ec:ef:cf:63:6a:1e:37:d5:47:91:c2:a8:
67:3f:91:f9:fa:8e:7b:58:14:45:1f:7f:cb:45:31:ef:71:61:
51:2a:e7:db:a3:28:6a:f5:e2:bc:b4:de:90:3b:61:ff:09:b1:
6d:34:73:7c:20:d1:51:2e:a7:51:1d:ce:ea:e2:85:80:e3:7f:
d5:37:4a:46:0e:c8:af:b6:73:48:f0:f9:c7:1d:20:4d:cc:29:
b1:ec:37:7d:34:7c:60:94:bc:c1:1d:75:6d:b3:cf:da:08:ab:
0b:69:cb:25:12:f7:67:fe:f8:f4:98:bc:94:8e:b0:55:62:7e:
8e:91:ed:9c:4a:94:5c:b3:86:5c:5d:ec:f7:17:b2:aa:c9:14:
d0:73:32:0c:21:86:3b:1f:b9:ad:b1:2f:57:16:c4:64:13:58:
8b:fa:46:a3:15:5a:7c:eb:5b:96:2f:1d:52:02:71:07:c9:b7:
99:0a:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:31:19 2024 by rpki-client on console-fra.rpki-client.org