Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/3KEgLm7LvrLnJQAF23LQXVQb4Ko.roa
File: 3KEgLm7LvrLnJQAF23LQXVQb4Ko.roa (raw, json)
Hash identifier: U+pNQIXR/T2NEec0nsN51jslGNWivjlFE6bIq650k88=
Subject key identifier: DC:A1:20:2E:6E:CB:BE:B2:E7:25:00:05:DB:72:D0:5D:54:1B:E0:AA
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 0190B6758879E0CEF8F9CFB82E1EEEF8046B
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/3KEgLm7LvrLnJQAF23LQXVQb4Ko.roa
Signing time: Mon 15 Jul 2024 12:54:34 +0000
ROA not before: Mon 15 Jul 2024 12:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214557
IP address blocks: 92.60.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b6:75:88:79:e0:ce:f8:f9:cf:b8:2e:1e:ee:f8:04:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jul 15 12:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dca1202e6ecbbeb2e7250005db72d05d541be0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:f7:67:f5:a4:e0:44:60:37:05:bd:42:d4:
a3:e5:f4:c3:97:96:5c:da:9a:41:45:48:8f:22:67:
bb:76:2a:01:cf:84:08:10:a5:03:1c:21:b2:2f:81:
a1:11:d3:5b:88:f3:60:55:d0:27:45:a8:1f:e0:ad:
60:06:63:80:df:17:9e:a2:4c:2c:db:8e:17:47:e9:
b0:c1:bf:39:19:97:ee:0d:41:2b:fd:df:58:8e:6a:
f2:43:9e:0f:2a:61:0f:2d:8f:fb:7f:37:46:d3:c9:
4b:a6:f7:a7:2b:b9:88:b4:1e:c7:e0:23:f1:eb:38:
53:16:46:b5:22:b6:45:84:ec:fa:72:b8:70:6d:e1:
fa:2d:e5:fa:b1:bf:34:4c:75:4e:ec:83:9d:fc:44:
1e:86:b9:fb:c7:5f:d7:f1:72:54:63:ca:35:3c:d1:
2a:5b:57:02:cb:f2:cd:c8:2c:43:fe:87:08:1d:87:
1c:6d:24:d9:56:22:25:a8:8e:55:3f:31:b5:21:43:
b5:2d:81:7e:49:de:c8:0a:36:e6:ad:c7:e6:dd:55:
c4:a0:d3:4b:ba:07:a7:ff:c7:ac:33:16:df:3f:a5:
6b:c6:83:cf:29:f4:4c:8b:91:04:2f:70:64:65:16:
af:dd:29:90:3b:5d:37:aa:40:1d:8c:78:b4:aa:6a:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A1:20:2E:6E:CB:BE:B2:E7:25:00:05:DB:72:D0:5D:54:1B:E0:AA
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/3KEgLm7LvrLnJQAF23LQXVQb4Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:55:81:04:f6:54:03:cb:f9:3d:75:27:ca:e2:ca:d4:b3:38:
34:51:fa:bf:a3:9d:cb:22:ad:02:5d:08:2c:9b:f9:59:ea:37:
4e:ec:e4:58:86:c7:f2:10:54:a7:9a:d4:da:04:57:68:b3:93:
f5:20:f6:7d:e0:59:e9:17:c8:12:e1:b3:47:07:13:ce:2e:cd:
aa:89:ac:c5:df:bf:5f:85:ea:bf:99:7c:ca:e7:98:8e:23:f7:
1c:e3:51:c7:38:3c:ff:b6:22:89:d0:f3:e9:9f:1f:f4:45:a2:
8d:d2:33:99:29:58:9c:01:5e:cf:bb:6b:53:a7:78:38:29:f5:
c7:0d:1d:1f:03:13:bd:0e:9f:cf:6a:af:90:4e:a1:a7:ee:e8:
fd:02:24:2e:9d:e6:61:cc:55:3a:95:76:7b:bc:98:58:af:60:
46:bd:5e:21:92:6c:d8:93:3b:89:a6:af:30:27:6d:2f:54:a5:
69:61:61:73:bc:9f:33:f2:da:ad:c2:06:f2:20:81:c9:64:09:
e4:54:e7:81:f4:9d:b0:a4:d2:29:df:7d:34:7b:08:70:b9:72:
51:77:29:44:bf:2d:7c:71:84:4b:55:6b:77:f5:04:17:ea:d0:
02:ec:7b:0a:fb:c7:16:de:a5:4d:64:e2:16:7e:7d:e1:eb:f8:
71:55:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:05:13 2024 by rpki-client on console-fra.rpki-client.org