Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/xPaDgmZJtvkYJnbVTvDN6y5kCN8.roa
File: xPaDgmZJtvkYJnbVTvDN6y5kCN8.roa (raw, json)
Hash identifier: jpj57cjz5JQ7AKLvgVozxqs+F1ljz049xGFx+3sqsJo=
Subject key identifier: C4:F6:83:82:66:49:B6:F9:18:26:76:D5:4E:F0:CD:EB:2E:64:08:DF
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 0190406367C2910AFC2D004CC5B7780A215F
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/xPaDgmZJtvkYJnbVTvDN6y5kCN8.roa
Signing time: Sat 22 Jun 2024 14:39:34 +0000
ROA not before: Sat 22 Jun 2024 14:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13043
IP address blocks: 164.59.128.0/23 maxlen: 24
164.59.130.0/24 maxlen: 24
164.59.136.0/21 maxlen: 24
164.60.0.0/16 maxlen: 24
212.64.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:63:67:c2:91:0a:fc:2d:00:4c:c5:b7:78:0a:21:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Jun 22 14:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4f683826649b6f9182676d54ef0cdeb2e6408df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:b8:53:1c:74:77:f7:0e:1a:43:50:ff:b8:
d4:df:29:97:b9:15:db:e4:45:a3:53:0e:85:a8:dd:
35:af:97:60:42:95:ac:27:59:4f:a5:be:03:27:41:
c3:44:7b:d3:7b:72:8f:7c:16:3e:34:ad:bd:e2:6c:
2e:17:13:14:29:ce:ed:b3:55:c6:bd:1d:12:ad:03:
22:bf:5f:dc:3f:c7:8c:98:42:40:3b:38:2f:da:67:
37:0f:7f:ad:89:a6:07:f4:db:97:3e:64:e8:aa:09:
15:15:70:8e:e1:37:b6:91:46:39:1b:35:e0:b7:38:
34:53:d1:95:9c:ac:27:19:87:69:d0:64:d9:ba:f1:
58:b4:62:1a:45:e7:3f:49:d1:11:a0:a6:01:52:12:
60:d4:f9:9f:83:b6:87:4a:1f:2a:fe:65:11:f3:a3:
4f:31:37:4a:32:54:18:44:c8:ce:b1:4b:53:e3:6e:
27:02:be:d7:08:46:d1:ed:f0:cd:64:78:15:46:e4:
a5:6c:28:14:22:13:9d:a7:29:be:de:59:c8:f2:c5:
d5:be:b0:1e:1c:93:58:4d:7e:4a:4f:8f:48:e0:78:
d3:15:94:4c:f3:c2:87:d6:90:35:f9:75:c3:f4:a7:
16:58:ce:2c:f0:53:d2:85:4c:7d:dd:fb:ae:d8:34:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F6:83:82:66:49:B6:F9:18:26:76:D5:4E:F0:CD:EB:2E:64:08:DF
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/xPaDgmZJtvkYJnbVTvDN6y5kCN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.59.128.0-164.59.130.255
164.59.136.0/21
164.60.0.0/16
212.64.225.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b7:65:cd:7a:cc:fc:34:b6:76:0c:42:83:e2:25:d7:43:0d:
0f:35:57:88:89:c5:b5:2b:3f:8a:93:01:25:b6:23:c1:1d:b9:
53:7d:5d:41:22:76:0f:e3:5c:df:3b:dc:4e:db:84:83:9a:9a:
cb:f9:e0:62:f5:82:fe:69:dd:c5:33:4d:21:60:87:e1:f8:71:
0a:65:1c:11:d0:cc:0d:ed:6d:ea:3a:ad:90:19:f5:09:9b:49:
eb:1a:dc:07:26:61:b4:e1:ab:a3:26:b8:bf:2c:dd:f6:e4:94:
7a:cb:a1:f5:eb:01:2c:cd:24:e0:26:e3:0b:a9:20:0a:0c:1a:
e3:68:84:cf:07:4d:f8:a7:ed:72:19:d6:1c:22:71:c0:11:6e:
da:6d:7d:9f:15:2e:d5:a9:41:2e:07:8f:ea:62:84:15:94:f0:
db:55:a4:4b:ed:5d:68:e8:05:cf:1b:e1:84:b6:bc:2e:59:d8:
29:63:c3:97:f0:e7:fd:c8:62:b8:24:22:af:da:1e:92:d8:a4:
cd:8e:00:eb:b2:26:a2:4d:a8:68:53:29:d5:6d:bb:80:6b:9b:
e2:bb:47:19:52:a9:13:a9:35:68:1a:b3:8c:7d:ca:d4:6f:11:
ce:2c:4c:dd:25:e8:a3:8f:ea:e4:d0:09:35:dd:64:e3:e8:65:
4d:5f:99:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:16:31 2024 by rpki-client on console-fra.rpki-client.org