Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/xxX00MXhFfCFf-U-mwkK2UyZYsY.roa
File: xxX00MXhFfCFf-U-mwkK2UyZYsY.roa (raw, json)
Hash identifier: yLR0CQgKjQOfRtRa9nA9S89s06E7Wgse2ilRrtGFjsU=
Subject key identifier: C7:15:F4:D0:C5:E1:15:F0:85:7F:E5:3E:9B:09:0A:D9:4C:99:62:C6
Certificate issuer: /CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Certificate serial: 018CC492FC9BE0A47503542E0FCB62A6FE68
Authority key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/xxX00MXhFfCFf-U-mwkK2UyZYsY.roa
Signing time: Mon 01 Jan 2024 10:30:16 +0000
ROA not before: Mon 01 Jan 2024 10:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57707
IP address blocks: 217.28.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:fc:9b:e0:a4:75:03:54:2e:0f:cb:62:a6:fe:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Validity
Not Before: Jan 1 10:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c715f4d0c5e115f0857fe53e9b090ad94c9962c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:7e:d4:37:fd:84:39:d7:12:0e:e5:29:56:
d3:5f:96:ba:7a:5c:79:b0:58:6f:76:ae:9f:af:ed:
54:86:a1:d5:6b:ac:51:1d:e5:5f:71:8f:c3:45:11:
11:2a:0c:30:c8:a5:b5:18:bf:38:e0:de:43:7f:22:
c2:f0:fa:be:c3:4b:ad:de:64:38:8d:5d:1d:be:50:
f3:4a:7b:fb:22:65:c2:0b:9f:f1:06:54:bd:57:2a:
cc:38:ea:55:e0:2c:cc:e0:66:f9:a6:8c:da:8f:61:
54:f5:e6:58:c5:96:ca:c5:2f:fd:49:e5:e8:02:fc:
33:eb:d7:f3:48:b2:65:a1:da:ad:97:9a:f7:a2:e1:
b1:f3:a7:13:d6:2f:a2:28:0b:3f:34:4e:19:f0:93:
27:84:c7:40:b9:9e:3f:94:27:fa:91:8e:8a:a4:83:
87:1d:7a:8b:72:7a:17:0d:fb:8f:10:90:89:23:36:
88:dc:34:16:4d:8b:7b:70:f5:3b:ca:dc:0d:ef:1f:
b8:e6:d7:f9:09:39:1c:7b:00:15:59:01:41:e8:74:
93:ee:58:f6:78:d1:12:34:ee:55:34:67:62:b7:ef:
78:39:98:1f:66:a3:a7:85:94:d6:07:6c:f8:0b:6f:
4b:a3:98:37:19:f6:0a:58:8c:a1:78:33:f4:8c:36:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:15:F4:D0:C5:E1:15:F0:85:7F:E5:3E:9B:09:0A:D9:4C:99:62:C6
X509v3 Authority Key Identifier:
keyid:FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/xxX00MXhFfCFf-U-mwkK2UyZYsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.88.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:eb:31:6a:de:fb:05:f1:d5:da:51:40:16:c2:7e:8f:3f:07:
f9:dd:92:e9:8b:f7:19:21:e2:0f:e9:28:e0:17:be:79:9b:7f:
0f:b8:d9:54:b9:61:56:62:ee:68:45:7b:b0:2b:27:39:05:85:
5e:c7:72:5a:d8:e7:6e:63:63:23:b2:ee:96:d0:17:10:31:36:
a6:55:97:69:5b:5d:03:d3:c5:53:de:f1:47:96:4c:00:dd:a3:
b9:87:bd:1b:2d:b2:86:f1:08:80:6f:26:fa:b1:0b:61:71:14:
67:f1:7d:ac:11:c4:7e:52:97:ac:f7:19:2e:21:f1:b9:e2:3d:
fd:ef:21:da:ac:89:5b:24:e2:28:a4:75:b5:db:6b:ac:eb:6c:
4d:eb:c2:9d:7c:7f:11:f4:62:f2:a9:c1:47:8b:86:ac:80:f1:
e1:4b:db:0d:5e:39:70:dc:0a:97:87:4e:61:52:eb:75:8b:70:
99:5b:59:fe:71:fd:2d:5c:3b:0b:b0:30:a5:2e:6a:0a:c6:58:
50:cf:5f:53:cd:4f:ed:5a:75:59:f6:21:11:d4:a0:b8:c9:ce:
76:67:a3:7d:44:de:b7:5b:2d:10:16:90:0b:16:18:14:fb:0f:
0a:4f:54:aa:3d:7f:d9:70:07:82:4b:f0:55:a1:11:8d:25:fc:
8a:a0:5e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:51:42 2024 by rpki-client on console-ams.rpki-client.org