Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Xo8W-biTi0t3Xmll-Cvm4SWWoSk.roa
File: Xo8W-biTi0t3Xmll-Cvm4SWWoSk.roa (raw, json)
Hash identifier: riYy2Trgw4X6O4Zv5ALf9+vUmIkJ1Gsdibc773HZjro=
Subject key identifier: 5E:8F:16:F9:B8:93:8B:4B:77:5E:69:65:F8:2B:E6:E1:25:96:A1:29
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019289B8CCE8DD0DBB35F33C2705A3370C54
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Xo8W-biTi0t3Xmll-Cvm4SWWoSk.roa
Signing time: Mon 14 Oct 2024 06:30:42 +0000
ROA not before: Mon 14 Oct 2024 06:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62387
IP address blocks: 79.132.64.0/19 maxlen: 19
79.135.136.0/22 maxlen: 22
85.234.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:b8:cc:e8:dd:0d:bb:35:f3:3c:27:05:a3:37:0c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 14 06:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e8f16f9b8938b4b775e6965f82be6e12596a129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:dc:ae:ce:c6:15:d0:6e:5c:4d:6e:00:d2:
5d:58:e3:aa:08:8e:ad:3d:d1:4d:0f:9c:9d:e4:a8:
6d:e7:d1:18:1c:a8:ac:c0:c3:d1:8f:ff:f4:84:ac:
42:8d:e6:15:db:cc:f8:6f:54:4a:cd:79:38:55:90:
db:a6:6b:0d:9b:74:0e:35:6d:fa:e2:72:47:ee:65:
62:67:5b:f8:eb:7d:cc:bb:0b:1b:53:66:54:e2:7a:
6b:d0:0e:36:b3:6f:55:6b:14:a1:ff:cc:9f:72:3a:
c3:59:15:3a:17:81:38:39:d9:7a:8e:a8:70:01:da:
96:11:57:e8:94:d7:00:49:d6:56:74:d4:2e:cb:8a:
83:65:c2:33:1e:0d:37:77:15:22:01:cb:e9:09:79:
bd:21:d9:32:8a:30:35:7b:98:ce:6a:56:76:4e:2b:
25:6a:21:f6:31:c3:d4:e0:6a:da:64:95:b6:41:5a:
65:2e:98:2a:b8:fc:45:06:7f:32:0f:79:ac:4d:07:
0d:31:fc:35:f7:b7:0e:bd:3d:bd:dc:46:47:a1:60:
72:8a:92:5a:d7:bb:bb:e8:56:5b:c4:0a:02:6c:8d:
bc:63:86:3d:ee:ce:59:97:6f:61:73:19:f3:a1:d6:
52:36:d9:1f:f2:d9:42:8f:fe:66:36:e3:d2:48:fe:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8F:16:F9:B8:93:8B:4B:77:5E:69:65:F8:2B:E6:E1:25:96:A1:29
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Xo8W-biTi0t3Xmll-Cvm4SWWoSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.64.0/19
79.135.136.0/22
85.234.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:f7:29:c8:32:8f:02:00:cb:1a:99:1f:a8:c0:5d:98:7b:21:
28:a2:60:c0:1b:fe:4c:9a:7c:3d:92:71:84:b5:04:c5:7a:64:
a8:a4:08:06:41:b9:e5:94:6a:cc:d6:76:66:54:d3:79:84:f8:
33:e3:2b:79:76:11:cd:4c:73:25:97:59:ca:75:11:f5:91:7a:
31:32:11:0c:83:4e:1f:bc:6a:1f:23:4e:9e:8f:93:cd:2d:9a:
59:91:46:ea:1b:0f:ba:11:7e:60:d8:ba:bc:b8:fd:58:63:ce:
01:6d:97:35:9e:15:06:f3:01:91:cc:62:91:53:58:b0:c8:31:
fe:17:d1:75:29:ed:f6:18:b2:2e:f6:2a:15:e6:a3:17:0b:1f:
78:cc:6c:7f:71:ef:dd:14:e3:af:03:0b:b7:14:ac:9b:78:e0:
91:80:47:34:11:76:84:8e:97:78:09:e9:8a:84:51:a6:ec:a5:
31:a7:74:50:10:2b:ef:41:b3:8e:d9:e1:cf:86:0a:2c:9d:60:
0a:db:02:92:0c:af:15:19:35:25:e3:3f:8a:e8:ea:e4:5e:3f:
20:d4:a6:f6:21:a6:b8:41:2a:b0:8c:d7:81:5d:54:ee:19:8b:
2a:fe:ac:fc:75:c8:78:87:09:4f:32:42:d9:ac:64:9f:ff:f3:
1d:b6:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:22:56 2024 by rpki-client on console-ams.rpki-client.org