Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ac92dZC-yU7ojsx-Y__BQGH_WDw.roa
File: ac92dZC-yU7ojsx-Y__BQGH_WDw.roa (raw, json)
Hash identifier: 1mLG45IX/PfF0Ehqgd47FAMTQNE5JJuFCsenzO/MXD8=
Subject key identifier: 69:CF:76:75:90:BE:C9:4E:E8:8E:CC:7E:63:FF:C1:40:61:FF:58:3C
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01932466B16F8F3354EBCC6951E6B0EFD4C3
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ac92dZC-yU7ojsx-Y__BQGH_WDw.roa
Signing time: Wed 13 Nov 2024 07:22:10 +0000
ROA not before: Wed 13 Nov 2024 07:22:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214000
IP address blocks: 213.145.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:24:66:b1:6f:8f:33:54:eb:cc:69:51:e6:b0:ef:d4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Nov 13 07:22:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69cf767590bec94ee88ecc7e63ffc14061ff583c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:3b:1f:78:22:3e:02:2f:60:18:a4:5b:59:
f7:9b:3b:24:94:75:3e:2e:57:97:81:95:e0:e9:90:
8c:69:71:48:99:df:92:08:af:f2:35:6c:c7:6b:7b:
38:55:e0:66:4c:20:95:d9:c1:81:f0:26:58:91:17:
de:14:a5:c1:cc:8f:4e:11:f3:df:c2:69:5c:7e:55:
48:51:63:22:f8:c9:04:3b:dd:9e:40:98:2b:56:b0:
21:2c:ab:8a:de:c0:c5:85:e4:65:6c:b5:de:ef:46:
4f:51:6f:0f:e3:77:74:dc:11:8a:fe:99:0d:a0:26:
74:c4:3f:f1:cc:db:67:d6:b8:93:99:d7:69:36:70:
b2:e4:1f:a5:a6:60:67:09:73:65:39:a0:f8:6b:81:
ee:48:07:f3:8a:f4:53:dd:76:ce:b2:3e:a6:4d:d1:
ee:6e:69:c7:7f:d3:66:5f:9a:f9:b6:28:a4:8d:15:
f0:e2:a4:58:4a:01:a1:ab:a6:87:84:cd:27:41:96:
aa:a4:42:3d:bf:b0:5c:c8:06:ed:08:31:d9:8b:27:
54:9b:aa:e1:87:4c:09:2c:d9:74:0c:21:e3:bb:9d:
49:9a:17:a6:d6:2c:ef:d4:36:91:9b:94:a9:64:08:
29:4d:3a:5c:92:fd:81:9d:28:d9:bf:b8:6e:41:64:
a6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CF:76:75:90:BE:C9:4E:E8:8E:CC:7E:63:FF:C1:40:61:FF:58:3C
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ac92dZC-yU7ojsx-Y__BQGH_WDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.94.0/24
Signature Algorithm: sha256WithRSAEncryption
98:71:fd:66:02:24:10:00:bd:17:7a:fb:a2:fa:8a:cf:4a:f5:
31:41:42:39:ec:8c:7a:fd:e1:af:9a:5e:9b:c4:fd:91:8a:34:
a2:1f:1d:8f:e6:48:00:b3:4f:68:ad:c7:97:bd:1e:8a:ec:66:
97:5b:54:ad:30:91:9b:9c:d5:18:72:4f:9f:f7:9e:6c:36:c8:
1e:0e:3f:cb:ec:d6:9f:b9:bd:57:bf:83:d6:a0:74:f8:55:4c:
f6:2a:57:0e:05:bb:b6:6f:27:24:5e:e8:83:69:29:da:36:95:
26:e2:a2:a0:6d:83:fa:1b:8f:de:ed:48:5a:a2:98:4b:d1:58:
08:f3:b4:f3:f5:e9:ba:d0:20:f3:a6:0b:2b:00:36:ac:85:b0:
7a:4b:c7:5a:92:a7:95:99:b9:d4:7c:f5:a5:43:b0:83:26:0d:
03:ea:c4:f6:e8:8d:83:60:00:7f:51:97:a3:f9:64:97:63:75:
c2:37:ad:3a:ab:9d:eb:57:e6:69:1e:d5:77:36:74:e4:b0:ac:
15:fa:47:fb:4c:ae:5b:47:31:c2:18:a0:cf:75:bd:4c:c5:a9:
8b:d5:17:ef:22:54:b7:a0:63:11:6b:ac:db:21:15:04:cf:b8:
56:bf:e1:5a:8b:bf:9c:5d:ab:b8:2a:3c:ed:3a:57:9a:ec:16:
30:71:45:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:50:23 2024 by rpki-client on console-fra.rpki-client.org