Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/XgSZU6VZwzBRsTWDLOG8lIgO7Hc.roa
File: XgSZU6VZwzBRsTWDLOG8lIgO7Hc.roa (raw, json)
Hash identifier: sK46/h9BRWiNruUAVODrMLH4mPL84C3pSNJSXun38sE=
Subject key identifier: 5E:04:99:53:A5:59:C3:30:51:B1:35:83:2C:E1:BC:94:88:0E:EC:77
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 018CC424BF17F3BBC8BF92B92A56782CB8C2
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/XgSZU6VZwzBRsTWDLOG8lIgO7Hc.roa
Signing time: Mon 01 Jan 2024 08:29:51 +0000
ROA not before: Mon 01 Jan 2024 08:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56716
IP address blocks: 31.129.240.0/22 maxlen: 22
31.129.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:bf:17:f3:bb:c8:bf:92:b9:2a:56:78:2c:b8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Jan 1 08:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e049953a559c33051b135832ce1bc94880eec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:91:e8:48:e7:8a:63:50:10:9f:4a:3c:e7:
25:c2:6c:61:6b:ec:36:ab:80:c4:f3:df:88:b2:b5:
81:42:1a:74:90:dc:8d:ed:6b:34:97:84:54:9b:e6:
84:0e:ac:e6:4e:9e:5d:3e:90:3c:91:2e:ab:e6:42:
44:b4:ca:0a:77:bd:6a:51:aa:eb:fe:21:cb:24:29:
58:96:fb:23:06:e0:62:12:55:a0:36:5f:60:c1:7e:
13:bc:74:14:d9:b3:68:ae:4f:42:3e:7e:a1:49:00:
90:8a:a6:01:ec:c8:f7:83:2b:ec:ee:97:d3:8f:8b:
10:4c:dd:cb:90:01:69:d8:b2:f1:89:71:94:19:4b:
1b:05:eb:7a:74:cb:51:26:84:e2:6c:68:4e:ee:fd:
71:4c:90:c8:88:3e:5f:5a:3f:2a:8a:31:bc:5f:8e:
b5:60:aa:17:50:19:65:f9:a8:8d:e2:4d:ed:4b:21:
cf:19:8e:b0:0a:fc:46:31:cc:f6:88:8a:78:16:35:
1b:0f:ed:99:55:58:c9:7c:32:55:de:47:5d:fc:90:
df:b6:53:51:c2:62:79:d8:e1:ec:56:38:c5:b6:c8:
4c:80:c4:32:36:81:a7:aa:c5:21:b9:a5:8d:ff:df:
36:e7:8e:31:6d:b7:50:1f:4c:3f:2a:2d:a2:0f:a7:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:04:99:53:A5:59:C3:30:51:B1:35:83:2C:E1:BC:94:88:0E:EC:77
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/XgSZU6VZwzBRsTWDLOG8lIgO7Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.236.0-31.129.243.255
Signature Algorithm: sha256WithRSAEncryption
84:f7:2f:10:d7:d9:7f:7b:94:0e:5c:91:56:47:1a:48:0c:fe:
81:bf:a1:4a:ac:11:1d:e0:f5:58:e6:4a:74:62:c4:27:f4:9e:
c8:72:70:ab:72:a9:6b:da:0a:87:b2:f9:b6:bb:eb:1b:37:4d:
d8:84:17:87:c0:74:db:d5:82:57:c6:9e:d8:0d:75:6c:96:6f:
ff:d8:ec:7d:e0:c3:3e:61:44:d7:d5:84:1e:b9:5c:ce:92:36:
f9:31:6f:28:01:29:f9:17:55:77:ab:f1:82:3d:09:66:90:de:
24:c1:f1:e4:94:bd:0f:c4:7d:ae:4b:44:1b:2b:5f:46:75:5e:
0f:d3:ce:b8:95:1a:3a:4c:56:8f:eb:09:c8:5d:99:23:9f:91:
b0:0d:f2:b3:77:e4:8a:88:6f:9f:1b:4c:ad:b9:6b:35:fa:63:
1b:31:7e:d7:3a:c3:cb:a2:de:f2:17:aa:eb:ce:8c:47:f2:3b:
4e:d9:66:41:1f:40:bf:f0:0b:69:38:72:ea:63:86:30:fe:09:
40:0c:53:b7:22:a5:6d:a5:b6:2f:c9:db:d6:f5:12:f8:50:ac:
53:2b:3d:7c:3f:f8:56:dc:31:37:7d:6f:6c:42:4b:0f:50:16:
cc:24:e3:38:60:ab:ba:7c:f5:4f:4d:0d:55:fe:a9:2a:f6:3d:
b7:93:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:12:13 2024 by rpki-client on console-ams.rpki-client.org