Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/rPdl23nlzw0VcSGJm8hV1-I1Xac.roa
File: rPdl23nlzw0VcSGJm8hV1-I1Xac.roa (raw, json)
Hash identifier: IFSIwniRGXl8RiEIYwBqh0/RDoSbscZKfNMzyBmsoRs=
Subject key identifier: AC:F7:65:DB:79:E5:CF:0D:15:71:21:89:9B:C8:55:D7:E2:35:5D:A7
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 01934E152B0D674D15B1A85C9EE05140721D
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/rPdl23nlzw0VcSGJm8hV1-I1Xac.roa
Signing time: Thu 21 Nov 2024 09:37:10 +0000
ROA not before: Thu 21 Nov 2024 09:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 92.60.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:15:2b:0d:67:4d:15:b1:a8:5c:9e:e0:51:40:72:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Nov 21 09:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acf765db79e5cf0d157121899bc855d7e2355da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e8:0d:fe:44:8e:29:2b:ec:50:82:86:c6:ac:
ed:dd:ec:f7:8c:f3:59:78:99:a1:fd:4a:e0:66:1e:
f9:f5:d9:df:e3:00:a0:79:e6:52:22:6a:60:f8:5d:
04:76:46:65:6f:24:c1:d0:26:65:11:8e:fc:56:44:
39:33:ae:19:e3:52:15:ba:37:c7:35:8a:61:1c:72:
de:41:22:c6:c6:14:93:05:01:fa:e9:e7:a1:b8:c5:
49:7b:2b:60:57:d3:f1:58:07:0e:ca:5b:50:f7:b2:
d5:24:4e:ee:70:f9:46:89:bb:4e:5b:e4:f1:0f:74:
ef:1f:41:7d:4b:6c:bf:8e:07:c5:cd:35:c1:44:24:
f9:e3:74:ac:aa:1c:1f:fd:3a:41:a6:fb:ec:3d:bf:
af:ec:8e:f3:a4:99:53:3a:87:fa:02:2c:d3:3a:7d:
1e:3a:5f:ab:25:15:9e:01:9a:f2:6f:0c:12:c4:9f:
ae:d7:13:8c:50:4f:1d:5d:f5:aa:9b:47:b8:49:bd:
75:0e:d3:fb:2a:51:55:6f:3b:7b:d6:45:28:b6:40:
55:11:0e:e6:72:22:92:9d:93:18:5a:3b:90:50:fc:
f4:54:62:ff:79:35:4c:63:fc:88:19:15:a2:8b:1a:
21:de:17:03:ac:fa:7d:2f:c2:43:90:a1:c9:a9:49:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F7:65:DB:79:E5:CF:0D:15:71:21:89:9B:C8:55:D7:E2:35:5D:A7
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/rPdl23nlzw0VcSGJm8hV1-I1Xac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.74.0/24
Signature Algorithm: sha256WithRSAEncryption
16:72:42:ea:49:d2:2b:fc:79:63:d2:9d:2e:a7:61:8f:0b:ce:
77:d7:af:f8:44:cb:3d:53:c8:c3:ce:36:50:90:29:58:32:f8:
15:c7:5c:e5:af:52:12:b3:78:d5:28:ad:d8:b1:96:fb:51:16:
8f:fb:64:8f:51:37:38:e3:ed:5c:ba:1c:d7:b9:c2:fc:87:44:
33:b4:a4:22:16:46:14:d6:25:cb:cc:9d:d8:72:cc:95:77:9e:
15:7b:94:50:0f:e1:86:c4:25:f6:d5:5b:15:83:4c:83:eb:c6:
50:bd:e9:a3:15:96:fe:e6:85:5d:e6:c5:9b:83:1a:91:95:1f:
4f:64:2b:4b:fe:b7:ea:d7:81:a3:6d:48:ec:cd:a5:1d:28:6c:
59:94:d9:f1:ba:3d:f2:b6:51:79:89:65:5f:42:0d:11:55:0f:
b2:13:c1:75:a8:6a:79:4f:3c:98:ee:d3:2f:b0:9f:4b:99:4f:
1e:b3:37:9f:b5:dc:c1:73:0a:32:ee:ea:a7:43:31:e9:fd:4d:
4e:cf:a5:e2:d4:02:6c:a4:52:3f:bc:ad:c1:20:e9:ba:59:a2:
04:0f:46:50:10:10:11:b8:7e:1c:ce:14:1c:49:b0:af:dd:0a:
e4:fe:56:7f:a0:78:d5:44:1d:8c:7b:92:60:d1:fc:05:39:56:
09:d2:a5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:51:50 2024 by rpki-client on console-fra.rpki-client.org