Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/DaztHRUMHEpBUKJyFClGzQ4TYIY.roa
File: DaztHRUMHEpBUKJyFClGzQ4TYIY.roa (raw, json)
Hash identifier: l/Glu+l2IR89qB7j84ehzgubFXbfSFXqQ0rYhs+0Shk=
Subject key identifier: 0D:AC:ED:1D:15:0C:1C:4A:41:50:A2:72:14:29:46:CD:0E:13:60:86
Certificate issuer: /CN=a6762182184488e7f787122a7180997ce8e90d4c
Certificate serial: 01934413852A8B954CC3871707541AFAF840
Authority key identifier: A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/DaztHRUMHEpBUKJyFClGzQ4TYIY.roa
Signing time: Tue 19 Nov 2024 10:59:10 +0000
ROA not before: Tue 19 Nov 2024 10:59:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213932
IP address blocks: 96.9.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:13:85:2a:8b:95:4c:c3:87:17:07:54:1a:fa:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6762182184488e7f787122a7180997ce8e90d4c
Validity
Not Before: Nov 19 10:59:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0daced1d150c1c4a4150a272142946cd0e136086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:49:3b:9e:75:fb:82:8b:51:54:17:e1:8e:
e9:91:63:09:a2:a3:ca:12:46:50:4e:30:88:07:92:
27:da:c9:b3:20:94:cd:50:d1:86:f6:d9:8b:cb:6d:
46:06:1d:f7:0d:df:8c:c2:95:14:8e:7d:94:c1:9d:
6f:82:fe:ec:ad:5c:0a:b3:2c:9d:8e:a0:d8:35:ae:
6c:af:45:c6:33:cb:30:05:e8:e2:b8:48:50:c1:5d:
fe:8e:bb:73:8a:cc:59:4c:ab:cc:1a:aa:87:c1:99:
95:ab:47:bd:f0:b8:0e:d9:05:33:29:bc:85:42:76:
08:51:c7:53:5c:2d:f5:92:36:d1:a6:00:4d:97:ae:
58:6c:2e:93:a2:f6:85:8b:03:fc:9f:54:2e:3b:f2:
e8:c5:6d:06:b1:c0:a3:e7:74:6e:5c:bb:ad:e5:6c:
b1:2b:86:29:13:ea:c0:3c:c4:65:71:d8:b3:9b:38:
99:a3:5b:cc:19:2b:29:d8:52:dd:a3:8e:9b:90:a2:
9b:7f:a0:39:3d:14:34:72:f3:e7:98:0f:c9:2a:4e:
a5:d6:24:f0:52:d6:76:aa:3e:b3:78:b7:af:c6:6f:
bc:e4:fd:54:ae:d4:4c:12:c2:00:97:9c:ba:5c:58:
63:d1:fb:64:06:a1:9e:fe:c1:ce:aa:18:67:d4:5c:
71:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:ED:1D:15:0C:1C:4A:41:50:A2:72:14:29:46:CD:0E:13:60:86
X509v3 Authority Key Identifier:
keyid:A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/DaztHRUMHEpBUKJyFClGzQ4TYIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.9.127.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c5:5f:bf:a7:5d:1f:23:23:cf:8a:79:20:af:f9:fc:7e:91:
52:ea:bd:9f:eb:13:96:9b:aa:f1:79:b1:bd:d4:5a:8f:bc:0c:
dc:82:9c:1f:e7:c5:a4:42:f8:b8:87:a6:43:b6:a8:da:56:bc:
39:dd:09:9b:08:0a:e0:a8:53:26:d2:17:30:7c:28:d7:c7:75:
7e:e0:6f:32:44:c5:42:ed:0a:87:01:e2:dc:0f:d6:28:09:c1:
d1:04:20:61:97:2a:ab:cb:72:b6:31:f7:3c:76:7f:df:d6:d5:
1e:f3:49:a4:13:77:ee:8b:8d:fe:14:fc:1f:91:7e:36:dc:69:
8e:8d:27:93:93:72:be:ff:80:49:8f:91:31:17:51:95:61:20:
26:09:ca:2c:f6:e0:f6:03:f8:48:d3:71:a8:ce:93:34:57:0e:
11:a5:04:07:51:6e:06:4a:51:7f:3e:70:83:ec:c4:06:4e:8a:
74:d8:77:26:4c:76:e6:98:54:f0:79:00:60:7b:d2:58:c4:b1:
02:fe:67:38:f3:ff:e5:9d:7f:0b:82:ea:d7:23:5e:2c:87:61:
d9:1c:a3:3c:d4:6a:5c:41:a6:56:b6:10:44:17:14:8e:40:bd:
fa:5d:f1:f8:0f:c0:2e:2e:71:a0:02:27:e3:f6:25:75:85:a7:
e5:11:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:23 2024 by rpki-client on console-fra.rpki-client.org