Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/Ok8QXuT4GbsZtQg-BImFDn-MYWI.roa
File: Ok8QXuT4GbsZtQg-BImFDn-MYWI.roa (raw, json)
Hash identifier: G+1udVu+DB+HaYIKS+57cvwtvV0JmfZBmquRH6SxGxA=
Subject key identifier: 3A:4F:10:5E:E4:F8:19:BB:19:B5:08:3E:04:89:85:0E:7F:8C:61:62
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 01927A95D2425A283AB6C2177E2813C48716
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/Ok8QXuT4GbsZtQg-BImFDn-MYWI.roa
Signing time: Fri 11 Oct 2024 07:58:11 +0000
ROA not before: Fri 11 Oct 2024 07:58:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 84.239.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:95:d2:42:5a:28:3a:b6:c2:17:7e:28:13:c4:87:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Oct 11 07:58:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a4f105ee4f819bb19b5083e0489850e7f8c6162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:79:97:b6:d6:34:2d:80:0c:71:b2:6f:d1:
00:84:bb:25:9b:1d:24:93:75:48:52:94:01:2f:a3:
60:21:b3:c2:cb:bd:01:65:cd:ee:19:d8:0f:af:02:
34:22:5d:50:40:f5:5b:88:b5:06:e2:d3:7b:a3:bb:
7e:67:b1:20:31:5f:cb:47:2f:d4:c6:14:10:b1:78:
52:5e:fe:a1:d0:23:e8:ea:a0:a3:52:9f:73:b2:66:
2c:98:81:2c:26:3a:33:5f:9a:57:dc:c4:cb:06:26:
fc:7a:22:e9:41:c3:2f:13:af:a2:26:67:03:49:5b:
c6:a2:f6:4e:2a:3e:8e:fd:f9:9a:4e:49:e8:1d:87:
67:a4:3f:56:11:db:a3:97:dc:f0:0e:45:82:11:ed:
5b:4a:66:ce:2e:bf:3d:f7:7a:e4:57:98:c6:e9:5d:
32:6d:1e:e8:7d:99:52:c6:61:59:60:c7:c1:e9:72:
27:2e:10:ae:9d:e0:14:63:cf:99:80:0f:9d:b1:52:
b9:f0:6a:8c:85:21:67:ef:87:72:5e:54:bd:0c:82:
95:ca:64:02:36:1a:d6:54:1b:9f:d7:93:71:25:b6:
eb:3d:fd:ef:14:86:d3:e7:cd:98:7b:12:13:a4:5d:
ae:ff:be:b6:34:32:d7:22:40:e9:ae:71:02:97:c7:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4F:10:5E:E4:F8:19:BB:19:B5:08:3E:04:89:85:0E:7F:8C:61:62
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/Ok8QXuT4GbsZtQg-BImFDn-MYWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.62.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8d:a8:a3:8b:5f:e1:76:cf:79:a3:ac:75:e2:e5:0d:09:00:
4e:b5:21:57:e9:04:6e:1e:68:75:bf:64:25:ba:6c:30:07:f7:
f6:91:bb:a1:4a:e3:25:63:5b:d4:65:99:1c:d7:a4:7a:fe:65:
8e:7d:8d:21:8a:76:d5:e5:31:3e:3c:98:17:e0:29:2a:bf:3d:
26:f3:61:fa:a5:cc:05:5d:1a:c0:ec:7d:dc:bb:3a:c5:c5:39:
4d:04:1a:81:ce:52:2b:32:dd:ba:09:c1:3e:78:a7:b3:83:86:
78:8e:a6:61:93:90:ec:d3:e1:4e:87:f8:b3:cb:79:d0:69:20:
ce:43:b1:e0:a3:90:f8:a8:93:99:0d:09:4e:81:45:fb:87:85:
c9:55:45:92:81:76:a3:de:ed:cf:13:c1:37:ae:1c:77:91:35:
97:a0:b1:72:ff:14:51:49:f4:dc:01:0b:1a:9d:92:f6:79:51:
40:58:12:aa:ec:4a:2a:00:78:84:fd:20:41:7c:6f:86:d4:3e:
ab:3a:07:36:c5:ec:4f:f5:3a:ae:25:80:3d:85:12:07:45:13:
ac:5d:02:b8:58:b5:14:19:f3:05:9b:59:2d:0b:8d:80:d9:94:
2a:50:62:a0:be:e2:10:38:15:62:04:8d:56:ce:29:3b:9f:b0:
d1:6f:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:36:24 2024 by rpki-client on console-fra.rpki-client.org