Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/40NuI6QYlSS3W3jyJLQL1DRnk2M.roa
File: 40NuI6QYlSS3W3jyJLQL1DRnk2M.roa (raw, json)
Hash identifier: mebfsv/pv0D0uJxN4JocPFrANv18WL42RPEwBgLgA5U=
Subject key identifier: E3:43:6E:23:A4:18:95:24:B7:5B:78:F2:24:B4:0B:D4:34:67:93:63
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0190A26483C1B8D221B94678340DD56D4CB9
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/40NuI6QYlSS3W3jyJLQL1DRnk2M.roa
Signing time: Thu 11 Jul 2024 15:23:34 +0000
ROA not before: Thu 11 Jul 2024 15:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 217.25.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a2:64:83:c1:b8:d2:21:b9:46:78:34:0d:d5:6d:4c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jul 11 15:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3436e23a4189524b75b78f224b40bd434679363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:04:7d:68:46:32:bc:ce:7a:eb:d3:b8:b2:
a6:ac:4f:51:22:3a:33:67:b2:df:1e:85:7f:04:02:
1c:44:c1:4e:4a:e2:a3:80:52:7d:cb:79:2f:3a:37:
53:72:06:5b:e2:07:36:de:3d:28:fc:93:5b:57:37:
d7:51:2d:21:e3:2f:d4:93:cb:9a:bd:34:5a:dc:e4:
4d:f3:85:eb:7e:d2:42:dc:5e:32:fa:67:53:19:ad:
91:ca:0a:42:43:6b:6c:da:8e:c9:cd:5e:74:dd:b0:
d5:93:3e:32:fa:dc:58:e0:61:1b:79:d9:48:28:37:
04:02:40:1f:03:ac:7f:8e:35:ea:8c:26:af:ef:5d:
20:9b:bb:5a:ba:31:cf:ff:93:05:f5:11:29:94:4c:
2b:21:4f:d2:eb:27:74:ad:56:5b:a1:87:11:2a:b0:
7e:54:1c:9e:0a:00:7a:45:16:ed:b9:56:a1:b5:68:
9f:a2:25:7c:30:89:b9:9b:3a:1e:75:ed:d7:ad:0a:
97:79:18:98:85:71:a2:82:9c:ce:57:32:4b:31:7a:
65:7f:a3:ed:f0:27:69:c5:02:05:e2:75:8c:69:ac:
ce:52:57:c9:56:b8:5f:51:c2:ba:5e:83:f2:1e:18:
f8:6a:1a:8b:af:31:a8:11:76:76:23:af:8e:82:01:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:43:6E:23:A4:18:95:24:B7:5B:78:F2:24:B4:0B:D4:34:67:93:63
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/40NuI6QYlSS3W3jyJLQL1DRnk2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:da:93:8b:98:d8:c4:34:df:a8:f0:14:73:f8:b7:81:2c:25:
2a:e8:47:1d:31:92:bd:bb:2a:64:a3:18:c8:f4:3a:54:d2:41:
5f:bd:58:d2:2b:08:6f:dc:b8:81:d0:3a:98:29:3f:55:88:22:
80:b4:46:0d:cf:97:3c:bf:e2:93:5e:db:ee:85:8a:d8:ea:d2:
b2:3f:97:4c:ab:60:26:dc:f1:6e:3e:ff:e0:bb:5b:53:27:00:
f5:6f:07:c8:f0:89:78:ce:d4:9c:b2:0d:cd:4a:8a:ca:a6:14:
fe:87:b2:4a:f2:a3:22:38:1e:86:20:fa:c7:45:fb:00:eb:47:
7f:8f:c2:b7:bc:75:7c:ba:88:84:84:bb:d5:a0:f2:21:eb:bb:
f5:06:96:b8:80:55:46:3b:ac:85:a0:17:f6:de:e9:20:a3:d1:
f5:42:88:26:a3:f8:32:22:c4:30:68:1c:30:1b:96:9c:81:76:
be:d0:a6:5a:b3:82:29:76:d2:64:e8:11:ba:0c:34:27:f1:56:
0d:0b:91:c6:65:47:08:03:7e:fe:08:a9:47:5d:59:2b:81:e1:
ed:b9:85:de:ce:3a:42:3a:9b:0d:37:c9:b3:8c:94:41:0a:3a:
e6:fb:6c:a1:5b:fc:57:e9:77:1b:11:70:73:75:2b:0e:7b:4f:
fe:9e:1d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:43:27 2024 by rpki-client on console-fra.rpki-client.org