Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/ihebqV8SNXDhSy7Wm2bCovww0ps.roa
File: ihebqV8SNXDhSy7Wm2bCovww0ps.roa (raw, json)
Hash identifier: 1FpJEe++b9fMIQTcbO7xdjjMMcuvH8cS4sk7Axuluak=
Subject key identifier: 8A:17:9B:A9:5F:12:35:70:E1:4B:2E:D6:9B:66:C2:A2:FC:30:D2:9B
Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial: 0191E2176120E9808962DA1B32F1B8819DDA
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/ihebqV8SNXDhSy7Wm2bCovww0ps.roa
Signing time: Wed 11 Sep 2024 17:17:48 +0000
ROA not before: Wed 11 Sep 2024 17:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204629
IP address blocks: 109.70.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e2:17:61:20:e9:80:89:62:da:1b:32:f1:b8:81:9d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
Validity
Not Before: Sep 11 17:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a179ba95f123570e14b2ed69b66c2a2fc30d29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:80:f0:b0:bd:a2:c8:39:45:a8:8a:01:b8:
e7:58:47:b8:7c:ab:2a:0c:7a:98:88:70:b5:b7:dc:
0a:c3:e5:7b:22:45:e8:ca:f2:d5:75:a8:3f:df:6e:
9e:2d:96:87:fd:b9:6d:34:a9:25:c0:e2:fe:fe:97:
38:6e:dd:eb:3a:26:a3:e8:b7:e6:43:a2:26:f2:98:
a8:de:21:68:a3:1c:91:ca:28:17:f0:25:88:84:7f:
db:17:cf:c4:61:a8:af:77:f7:06:ad:7f:47:59:45:
99:f5:9b:a4:be:7e:93:49:fb:d2:c0:fb:09:f3:e1:
93:ea:78:7d:52:c5:a4:20:97:2d:de:d8:89:15:34:
97:da:04:49:0b:5a:ab:73:28:eb:a7:43:23:9c:d7:
84:7b:f5:b9:ef:aa:fb:69:5a:f3:b3:8f:84:7d:2f:
29:52:bc:62:3d:2b:ec:46:c0:c4:78:9f:38:de:65:
95:ca:ad:4f:87:97:ae:38:96:32:b0:1f:7e:40:76:
e1:fc:52:fa:70:84:73:35:1b:fe:01:22:ef:2f:6c:
ac:fb:3d:0b:27:ce:e8:84:cc:68:fe:f9:fe:07:84:
b1:70:f4:ea:8f:2c:c2:2a:6a:ac:18:a2:db:c5:6c:
68:d4:72:66:a8:d6:bf:3f:5d:9b:05:5f:b2:1e:bc:
9b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:17:9B:A9:5F:12:35:70:E1:4B:2E:D6:9B:66:C2:A2:FC:30:D2:9B
X509v3 Authority Key Identifier:
keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/ihebqV8SNXDhSy7Wm2bCovww0ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.129.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b7:5a:d5:25:0b:de:bc:ad:e4:a5:51:0c:a1:08:9e:96:e1:
65:28:41:32:5a:8e:fd:8d:10:6f:72:41:8d:5a:2d:bc:e6:3c:
d0:b2:30:59:e6:f6:40:ea:94:1d:72:84:18:d9:72:6c:40:21:
0f:ff:11:07:52:18:e1:08:df:b3:7e:47:bd:d8:ba:21:ff:1f:
3c:05:ab:11:bf:2d:5c:47:c7:4d:34:38:a0:c5:4a:1b:b5:a8:
31:8e:23:17:be:70:be:08:51:22:80:2e:1b:cf:26:4b:6e:78:
0f:36:f2:8d:5c:d0:88:78:2c:df:15:33:93:18:06:ec:f7:9c:
d2:09:ad:7e:98:c1:40:36:ed:7e:ee:66:6e:3c:fe:34:23:71:
62:c0:08:2a:d1:f1:24:b5:9d:22:f3:31:31:59:68:57:5c:f0:
ae:c1:74:88:39:44:84:e8:e5:50:c0:de:77:ab:41:72:a8:76:
e4:75:b4:b1:e1:07:b0:73:14:88:05:c5:0c:b0:52:79:d6:17:
43:1c:b4:6d:99:3f:fa:23:0e:dd:9d:86:bf:c2:b3:72:b8:29:
64:61:ef:6e:2e:67:3a:75:05:1b:78:6a:27:33:cc:30:f3:bc:
cc:b0:ca:38:62:55:4a:4f:84:92:44:1f:6c:3b:e5:3a:27:57:
4a:a9:64:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:29:02 2024 by rpki-client on console-fra.rpki-client.org