Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Rr9BIlTvVE_sB08CNo7J0WRekus.roa
File: Rr9BIlTvVE_sB08CNo7J0WRekus.roa (raw, json)
Hash identifier: Wh+UxjAqh1aHIdcHvvBKv6oCnE6gO1wED5elIot7WCA=
Subject key identifier: 46:BF:41:22:54:EF:54:4F:EC:07:4F:02:36:8E:C9:D1:64:5E:92:EB
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01902526BFDCEB0558DC08B1E4EC651FC617
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Rr9BIlTvVE_sB08CNo7J0WRekus.roa
Signing time: Mon 17 Jun 2024 07:43:34 +0000
ROA not before: Mon 17 Jun 2024 07:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58172
IP address blocks: 217.119.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:25:26:bf:dc:eb:05:58:dc:08:b1:e4:ec:65:1f:c6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 17 07:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46bf412254ef544fec074f02368ec9d1645e92eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:33:09:48:c7:10:4d:07:e1:66:0e:cf:61:
d0:95:67:cb:5a:30:0f:cc:7b:bf:dc:11:8d:5a:bb:
9f:16:7c:92:85:55:70:bc:a3:64:61:54:d9:11:e6:
fc:12:c0:4b:64:11:36:0a:4c:b5:e6:a0:70:39:e4:
c5:24:dd:e3:dd:d2:a3:18:76:87:ed:ed:f6:6b:0d:
9e:ae:58:20:af:6e:f2:50:ef:4b:c0:68:f0:0a:fa:
95:da:b6:99:00:fc:d4:b1:74:72:b9:d9:7a:c3:35:
52:bc:65:dc:75:05:4d:4d:e4:e8:3c:f2:c4:d1:22:
95:5f:5a:2d:bb:46:42:0f:e2:de:6e:5b:89:aa:54:
82:8e:6d:9c:82:1f:5c:ce:22:53:ca:2e:0c:cd:8d:
c4:d0:19:3e:f1:7e:3f:86:ef:3a:95:d7:ad:e5:58:
86:39:fb:8a:27:23:d0:51:9a:64:6b:f9:6b:53:f5:
dc:c4:f2:1e:81:bc:ae:be:e2:f3:9f:11:81:59:fc:
8a:e4:5e:3c:32:7c:dc:b9:78:f8:cf:d9:ec:1b:31:
3d:81:e1:2c:47:4e:ba:d8:93:9d:68:f4:82:02:43:
35:6a:10:49:aa:ef:67:9b:90:cd:79:60:f7:0d:18:
86:e9:a8:30:be:1c:1d:da:d4:05:92:96:8d:bd:da:
c8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BF:41:22:54:EF:54:4F:EC:07:4F:02:36:8E:C9:D1:64:5E:92:EB
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Rr9BIlTvVE_sB08CNo7J0WRekus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.139.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8f:d9:f8:b6:82:f8:f0:1a:39:ed:cb:80:94:ec:b5:51:19:
fd:81:7e:14:94:48:b2:49:6c:f3:7a:ca:e6:fa:4b:5c:64:89:
78:30:f1:ec:e1:b4:17:d8:07:a2:d7:02:e0:0f:a6:a1:a4:0b:
96:56:14:9f:ab:8d:a6:cf:07:6f:ec:f8:f6:fc:7f:7e:e0:d4:
ac:ec:a9:fc:83:c8:18:85:e0:0a:6a:53:36:31:da:3b:75:8d:
90:4a:39:49:7e:64:53:31:7c:50:36:ec:8c:af:b4:16:bf:58:
4d:0a:6c:99:a6:b4:3c:60:bc:60:db:35:a3:e5:be:75:b9:65:
01:cb:1b:28:9b:71:a0:41:57:e9:be:be:93:1f:5a:7d:0c:67:
91:19:c4:4a:82:3a:79:d4:be:ef:95:da:db:c7:86:41:5a:df:
86:83:8e:bf:ae:76:e7:cc:3d:e4:67:12:e2:84:28:74:99:b4:
e8:e7:3a:13:87:6a:a2:91:af:88:82:2a:5d:a7:e2:2a:e5:dc:
cd:09:1b:f4:1c:61:46:aa:b8:85:52:33:4b:a7:34:eb:59:5f:
d2:79:35:89:23:15:f3:cf:19:ba:95:2c:91:4b:f3:e5:7f:49:
f0:08:ac:2e:59:3f:a6:2b:16:1c:16:f3:6c:18:14:40:ea:5d:
3b:78:8a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:18:04 2024 by rpki-client on console-fra.rpki-client.org