Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/e4x3-nvVCsDGlsvzsLxgUqiU5Fs.roa
File: e4x3-nvVCsDGlsvzsLxgUqiU5Fs.roa (raw, json)
Hash identifier: Vv7ysYNbD7AsarPlUWRlpnypFTB/MfMJbhbIzVEWld0=
Subject key identifier: 7B:8C:77:FA:7B:D5:0A:C0:C6:96:CB:F3:B0:BC:60:52:A8:94:E4:5B
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 019227FD5CF5393E32A9E50942E9FA7BF36E
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/e4x3-nvVCsDGlsvzsLxgUqiU5Fs.roa
Signing time: Wed 25 Sep 2024 07:02:48 +0000
ROA not before: Wed 25 Sep 2024 07:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50487
IP address blocks: 194.44.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:27:fd:5c:f5:39:3e:32:a9:e5:09:42:e9:fa:7b:f3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Sep 25 07:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b8c77fa7bd50ac0c696cbf3b0bc6052a894e45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:86:99:92:18:dd:f0:77:a4:70:64:1a:7f:
8d:04:fe:6f:8f:c8:4d:ca:62:c0:b2:fe:9d:8a:ae:
37:ce:e9:56:02:95:e2:82:42:27:29:1b:f8:10:b9:
06:01:2e:51:1a:1d:49:ba:bb:1e:b0:ff:3a:33:f5:
36:54:b1:b5:66:1c:5c:b1:76:a3:9f:1f:26:f3:d3:
04:be:06:9e:2e:58:20:f0:78:8d:c6:dd:84:21:62:
a2:ca:e4:69:10:f3:06:f6:e9:52:6a:e6:34:34:77:
2b:a9:10:a8:92:9d:84:7e:25:95:b5:24:95:bd:d6:
16:c1:9c:45:55:0e:79:8e:1c:91:f7:b9:d3:03:23:
67:30:5c:0c:fb:d5:64:db:aa:2f:f2:89:02:00:4a:
6d:48:8d:6d:15:a2:13:ab:69:d9:2d:d8:10:4b:a4:
f8:2f:7d:8e:fb:ae:f7:b4:cd:80:6f:31:16:98:97:
f4:91:c3:39:24:69:d5:1c:0c:81:4e:ee:4b:db:af:
65:31:e1:45:ab:d1:c1:d9:49:b5:61:71:50:c6:5f:
ca:4e:0c:c9:13:95:81:ce:44:7f:23:09:84:a5:a8:
81:b3:36:e6:b4:a0:b4:92:4a:9b:e3:d2:2f:06:1e:
2c:78:8d:bf:82:6d:a9:e2:43:19:77:0f:89:4e:15:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8C:77:FA:7B:D5:0A:C0:C6:96:CB:F3:B0:BC:60:52:A8:94:E4:5B
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/e4x3-nvVCsDGlsvzsLxgUqiU5Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:84:3b:f0:bc:cb:f2:1b:3b:ea:00:31:f6:b0:cb:70:d1:be:
51:ce:a5:91:da:e4:32:75:61:ef:84:ea:dd:e1:2c:ac:ca:2b:
ad:9c:8e:d9:38:24:f4:bd:fd:e3:4d:1d:36:de:73:5f:08:0a:
b0:7f:f8:5a:ee:e3:b5:fa:16:f3:f2:4f:01:0b:54:15:a3:be:
b7:6a:ad:41:df:cc:b1:bc:5d:c5:52:32:d7:1e:c6:44:20:55:
c6:9b:89:53:9b:0c:2c:f4:89:ab:85:fd:60:56:c2:e2:14:65:
20:64:ac:67:76:c9:70:71:48:fe:22:6d:5c:82:2f:39:20:93:
4b:7e:60:0d:77:37:49:b8:53:01:8a:a7:d6:1f:4c:ff:e9:1f:
8b:82:ab:5e:88:4f:06:23:8c:d8:af:cd:30:35:32:f8:21:62:
17:8c:ec:45:e2:30:ef:bc:07:71:ee:c3:ce:e3:18:13:63:47:
77:dc:15:51:70:b9:b2:72:c1:32:4f:2c:46:aa:86:e7:5e:1b:
e2:4f:c1:a5:43:fb:a5:83:2b:d7:d4:1b:ca:3f:7f:2a:47:ac:
4a:db:8c:ae:85:2b:5f:b6:c3:63:8d:31:92:cf:48:5f:67:64:
ef:6f:22:db:40:fd:5c:bd:a3:67:0e:7f:cd:40:37:8a:f3:71:
34:ba:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:34 2024 by rpki-client on console-fra.rpki-client.org