Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/119DD30tEeluywdmFKPuQXyaErs.roa
File: 119DD30tEeluywdmFKPuQXyaErs.roa (raw, json)
Hash identifier: uUxP9pyAo/alpcJhRKwMHv99y+Upd/KE1ABz2kn56k4=
Subject key identifier: D7:5F:43:0F:7D:2D:11:E9:6E:CB:07:66:14:A3:EE:41:7C:9A:12:BB
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 0191E13F53E080A5AB31A3CD50B3AB487AE7
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/119DD30tEeluywdmFKPuQXyaErs.roa
Signing time: Wed 11 Sep 2024 13:21:49 +0000
ROA not before: Wed 11 Sep 2024 13:21:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41540
IP address blocks: 31.172.143.0/24 maxlen: 32
91.231.127.0/24 maxlen: 32
92.60.190.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:3f:53:e0:80:a5:ab:31:a3:cd:50:b3:ab:48:7a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Sep 11 13:21:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d75f430f7d2d11e96ecb076614a3ee417c9a12bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:66:ff:c1:18:18:fd:d5:a6:86:ed:7b:9d:
85:04:2b:b9:cf:3f:de:ee:04:08:2b:9a:57:81:a8:
62:bd:43:81:ed:26:ea:c0:ce:1c:da:bf:87:09:53:
5f:06:8d:c3:4d:70:9e:a0:7f:76:37:de:26:30:00:
6d:e7:41:a8:60:6d:c1:5f:c4:92:fc:fd:35:b7:88:
49:03:3f:2c:f9:79:fe:e5:48:3f:00:0a:a4:8f:d3:
fa:45:8c:5b:8b:d2:e0:cf:e2:ff:52:a5:10:aa:23:
fd:83:4a:66:11:72:36:b3:67:0f:73:9a:11:b0:08:
0f:fd:db:df:13:31:2f:2e:bf:4f:9f:78:f8:be:eb:
80:b0:97:11:ae:3e:c5:46:6b:2c:5c:83:80:6c:ae:
5d:91:da:63:ad:4d:c4:f5:d7:6d:52:17:46:76:36:
d6:3a:3c:19:1d:ac:4e:3a:1b:ca:7f:5a:f8:48:6a:
9f:27:98:77:15:f9:df:b6:32:dc:b1:0d:20:0c:b4:
85:9d:ae:b9:76:81:02:d0:9b:8d:f3:10:8e:f8:60:
fe:b4:c4:d6:74:fa:57:5e:c7:05:69:a7:0e:20:eb:
13:1f:2a:50:aa:31:70:6f:1e:8e:07:6a:68:13:5f:
3e:67:2c:17:da:73:8d:3b:c7:c7:6b:c8:33:fd:e2:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5F:43:0F:7D:2D:11:E9:6E:CB:07:66:14:A3:EE:41:7C:9A:12:BB
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/119DD30tEeluywdmFKPuQXyaErs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.143.0/24
91.231.127.0/24
92.60.190.0/23
Signature Algorithm: sha256WithRSAEncryption
28:6b:5d:34:20:59:cf:93:71:9a:e2:a0:29:ad:37:45:2b:d2:
9d:d4:65:b4:b3:2e:5d:7d:db:d5:f9:e1:de:e8:fa:d2:32:ac:
a0:fd:d6:6e:30:a5:4e:e1:5c:f1:d1:b8:bf:65:3d:fd:49:8d:
04:05:54:f3:4c:ce:00:78:29:50:9b:ca:c9:7b:96:68:81:b4:
e9:9f:58:70:a2:45:35:3c:72:76:82:72:79:5e:51:24:35:73:
59:2b:cc:5c:6c:fa:5a:e8:40:80:03:f7:ac:cd:a4:31:4d:46:
7a:25:95:f8:15:1b:7e:cd:99:6a:b2:65:62:f6:60:15:df:b7:
ab:ba:d9:2e:20:b4:7f:72:03:38:c5:c5:10:c1:94:11:60:78:
44:db:50:4f:3f:48:69:ca:de:1a:f7:e0:e3:3d:96:20:6a:01:
fb:4a:25:02:c2:0d:94:92:6d:f5:5e:d1:61:0c:39:63:44:67:
50:50:1c:8a:a3:6e:84:09:cb:d0:41:ec:b7:55:12:47:ac:4c:
14:0d:57:5d:69:0c:06:90:03:8d:3f:9a:bd:b8:03:25:71:14:
82:68:3b:11:84:02:02:c0:07:8e:86:fd:d4:18:9b:77:2e:03:
27:d8:2f:4c:0f:81:c3:b4:f9:c9:2d:e9:0d:8e:28:0e:3c:ae:
5c:fc:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:31:53 2024 by rpki-client on console-fra.rpki-client.org