Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/7erOOiy1Kz-639fqjRntq0tIdgw.roa
File: 7erOOiy1Kz-639fqjRntq0tIdgw.roa (raw, json)
Hash identifier: kCOMjLlq9HyJX+BZiqepnviVMaepC+M2166rKXlLJl4=
Subject key identifier: ED:EA:CE:3A:2C:B5:2B:3F:BA:DF:D7:EA:8D:19:ED:AB:4B:48:76:0C
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018CC56E7F397E38576FDC785344778EFD5A
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/7erOOiy1Kz-639fqjRntq0tIdgw.roa
Signing time: Mon 01 Jan 2024 14:30:02 +0000
ROA not before: Mon 01 Jan 2024 14:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216022
IP address blocks: 217.119.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:7f:39:7e:38:57:6f:dc:78:53:44:77:8e:fd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 1 14:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edeace3a2cb52b3fbadfd7ea8d19edab4b48760c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:a4:38:78:62:09:89:bf:4c:7e:c4:c4:4a:
9f:48:16:62:68:6f:76:5f:14:24:ef:78:e9:3e:ed:
2f:3e:d5:fb:27:02:96:79:2a:66:d3:dd:6a:a6:4c:
0c:1e:8f:c7:4c:ca:14:ee:11:56:e4:56:c9:7e:d5:
73:7c:29:21:4b:41:4d:bf:ba:c4:4b:a6:f2:79:ff:
b4:3e:3c:0e:c3:18:61:ca:c6:5d:ac:4d:83:68:cd:
fb:83:be:e4:d2:87:66:65:46:5b:fd:9e:8c:cf:e2:
ef:a9:02:00:cb:d0:c5:4f:31:43:e7:0e:67:ce:fd:
e9:de:c6:36:da:f0:5a:26:71:ec:09:f9:d4:66:18:
84:cd:20:b2:42:e9:1b:fb:c7:f0:70:b3:75:04:9b:
77:2e:93:33:9d:bf:12:7c:af:75:f4:53:1f:ed:58:
6b:b6:a9:8b:10:56:da:a5:3f:40:0a:eb:c2:b9:85:
d1:b6:e1:8f:96:49:1c:e6:27:ce:6e:a8:62:49:85:
d3:f1:b7:82:7f:b5:37:ce:cf:62:93:8d:64:5c:31:
d8:33:34:0d:a7:d6:1b:fc:b1:09:e0:26:4b:0b:5c:
08:18:6b:a5:ca:02:a4:cf:17:10:1a:47:d8:41:59:
c3:4d:d7:64:0c:c4:2a:73:71:10:c7:67:7b:5f:6d:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EA:CE:3A:2C:B5:2B:3F:BA:DF:D7:EA:8D:19:ED:AB:4B:48:76:0C
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/7erOOiy1Kz-639fqjRntq0tIdgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.143.0/24
Signature Algorithm: sha256WithRSAEncryption
39:33:2c:45:28:5a:e9:38:75:1b:38:ef:f2:b0:f1:78:45:27:
43:6d:65:c2:55:d1:6d:9e:96:0a:77:25:a2:28:a9:e9:a6:92:
33:0d:5b:8c:44:42:f8:56:3e:f7:44:77:82:cd:be:75:6c:fa:
dd:cd:10:50:ab:ef:6b:5c:30:23:59:26:04:f7:40:3e:21:f1:
1d:c2:3c:9c:06:6b:6f:1e:a5:80:25:88:f7:6e:17:4c:4a:bb:
51:e8:1e:67:dd:69:20:2d:02:8d:f6:42:50:0e:93:40:7c:a3:
ec:6c:4e:6d:f6:43:6f:0c:13:57:06:8e:4e:cf:3b:3f:65:56:
9f:82:67:ed:25:fa:87:de:e1:f1:07:ce:8c:a2:bb:69:a2:70:
e8:ea:ad:bf:65:8c:52:db:55:fb:d1:0b:d1:0c:fd:7e:54:0c:
ee:17:2d:69:fe:00:46:f2:ae:67:6a:45:d5:34:e1:a8:fb:b1:
29:8a:e4:e9:59:3b:d5:bd:cb:c5:17:9d:9f:6b:c5:1f:fc:51:
f3:00:fb:7b:c6:ef:c2:91:fc:b7:63:f5:b6:f5:5c:48:87:ef:
2d:c0:7d:ad:eb:a1:8e:54:31:5f:fe:88:1b:55:56:52:9e:2b:
78:5b:98:9e:85:c8:73:1c:13:32:0e:3c:89:f7:af:6e:cb:52:
8b:b8:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:45:58 2024 by rpki-client on console-ams.rpki-client.org