Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/11joggcJbMEpsS1C6TYrYv7_wd4.roa
File: 11joggcJbMEpsS1C6TYrYv7_wd4.roa (raw, json)
Hash identifier: hCblgXahSlLQI8dM6T4Jh8fr6bQuQBre6F6MTve8ygg=
Subject key identifier: D7:58:E8:82:07:09:6C:C1:29:B1:2D:42:E9:36:2B:62:FE:FF:C1:DE
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0193350266CA2E9780E1CF920A2BB2A5F10B
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/11joggcJbMEpsS1C6TYrYv7_wd4.roa
Signing time: Sat 16 Nov 2024 12:46:09 +0000
ROA not before: Sat 16 Nov 2024 12:46:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205175
IP address blocks: 45.155.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:35:02:66:ca:2e:97:80:e1:cf:92:0a:2b:b2:a5:f1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Nov 16 12:46:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d758e88207096cc129b12d42e9362b62feffc1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:c1:8a:57:7a:66:d5:c4:e7:28:a2:74:b0:
88:33:e8:d2:20:09:98:14:a3:00:54:14:1e:d8:81:
1c:9b:09:02:3e:cb:e1:a3:09:a4:26:67:29:93:33:
6f:12:31:b9:d2:c9:73:60:e6:3a:57:dc:ef:d3:56:
be:d7:b4:30:a9:0c:1b:cb:cd:2d:81:33:fa:27:c3:
d8:25:3c:09:e7:28:02:02:8b:7c:de:f4:6a:96:b6:
6d:d6:17:e3:78:2b:ca:c6:47:74:71:63:37:0e:3b:
35:c6:e8:ef:1c:e3:41:bb:a8:9a:3d:79:27:20:d1:
49:da:a1:57:a4:33:7b:81:b2:cd:98:a7:c9:fc:c5:
45:d8:53:a7:20:cd:24:81:bf:dd:8a:f5:c6:b2:5f:
cd:ff:62:33:8e:f8:ac:2e:98:ef:7d:95:cf:40:3f:
6e:11:29:5d:af:2e:5e:20:4c:f1:5e:9f:1f:0c:d7:
84:bf:79:47:c1:e1:f8:2e:33:f8:c7:af:0f:48:70:
e6:04:27:80:53:55:96:bc:56:5e:10:b3:e7:5a:d2:
f7:70:ab:9c:76:b4:0d:c8:07:e7:e5:7d:d1:b6:9a:
25:fc:87:61:0d:be:28:1f:34:09:32:a4:97:eb:0a:
e1:8d:36:5c:54:d1:e7:14:f8:53:11:f8:bc:68:3a:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:58:E8:82:07:09:6C:C1:29:B1:2D:42:E9:36:2B:62:FE:FF:C1:DE
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/11joggcJbMEpsS1C6TYrYv7_wd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.241.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f2:a6:f2:5d:03:9e:ba:d8:32:61:40:fe:a2:de:1d:8c:5b:
06:73:8e:c7:fa:12:57:55:27:c5:1f:5c:b9:98:84:f6:8b:fc:
6f:5f:9a:1d:95:20:86:1c:dc:42:76:b0:1e:71:4c:2a:18:9f:
59:4e:e8:59:af:7c:b8:f0:c5:54:85:13:ec:07:a8:c7:6c:2f:
e0:95:26:b8:ca:af:cc:20:71:23:a6:e8:df:6d:84:92:0c:24:
af:bc:1e:fa:c2:de:91:42:ed:d9:da:13:b2:07:5e:9e:f4:a8:
92:c2:cf:e1:f5:45:14:ff:c6:3f:11:1b:86:c8:d8:91:96:60:
f1:60:bd:b6:45:a4:30:35:2d:23:e3:f2:16:c0:29:e0:de:06:
a7:03:06:67:45:b9:27:5c:4a:ec:62:6e:40:29:ab:c1:40:85:
13:90:1f:c4:55:a8:c2:ba:0e:1f:12:d5:32:47:f4:a9:c4:7a:
b8:6b:0f:97:3e:61:66:a4:44:94:1d:4a:23:f9:51:7d:f1:79:
46:dc:5b:40:8a:32:d1:2e:4b:85:32:ab:9a:37:82:f2:9b:81:
2c:0e:ae:9a:89:b3:0e:3a:ed:5a:f6:9a:65:39:d7:a7:bd:72:
68:55:9d:cf:21:7f:47:f0:9e:82:4f:c0:7e:39:4b:e9:62:27:
04:6b:f6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:49:18 2024 by rpki-client on console-fra.rpki-client.org