Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/xHg8KPSYD-xf1ujFJscPrs7QPK8.roa
File: xHg8KPSYD-xf1ujFJscPrs7QPK8.roa (raw, json)
Hash identifier: OW7q1WIIu2fbxtzNrbbi2k0oP+qfbNkBKR2h+GvKqHw=
Subject key identifier: C4:78:3C:28:F4:98:0F:EC:5F:D6:E8:C5:26:C7:0F:AE:CE:D0:3C:AF
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0190BE30E8E3C817007C79EAB11BDC4D2422
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/xHg8KPSYD-xf1ujFJscPrs7QPK8.roa
Signing time: Wed 17 Jul 2024 00:56:34 +0000
ROA not before: Wed 17 Jul 2024 00:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138997
IP address blocks: 37.128.250.0/23 maxlen: 24
176.221.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:be:30:e8:e3:c8:17:00:7c:79:ea:b1:1b:dc:4d:24:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jul 17 00:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4783c28f4980fec5fd6e8c526c70faeced03caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:79:1a:12:9e:fc:c8:a1:b5:69:d2:60:36:
94:df:a7:e7:61:93:1e:9b:32:be:7d:cb:f8:5c:be:
d3:54:00:24:2a:e7:12:99:23:7e:bf:dc:25:31:f8:
2f:dc:77:63:96:00:32:dd:52:82:3f:5c:20:47:e3:
e8:70:67:d1:56:9f:70:49:13:57:bb:a3:10:67:8e:
4d:72:e9:d7:7f:48:51:94:0c:56:25:d4:4f:c2:cf:
ce:22:d6:91:3f:5d:9d:9e:cd:36:5a:55:07:1b:be:
e0:2e:c1:a9:b3:c6:d5:34:2b:4a:46:ac:84:70:e3:
01:2b:8b:8c:8f:e8:2f:ff:0a:07:6a:00:c9:35:0e:
f4:5f:8d:eb:87:f4:ee:0f:b6:67:b2:12:c7:a3:d3:
dc:58:9b:df:12:03:64:7e:50:33:b3:9d:c1:e0:b8:
1d:45:ce:e5:48:6e:1a:24:5e:2f:95:06:7d:98:b2:
0a:37:4e:a2:d0:4a:94:2a:2a:71:26:0b:57:7e:94:
ee:32:d2:90:4f:cf:c6:c3:63:99:5f:f9:c5:b5:ee:
ed:18:38:a9:e0:0a:e9:48:bb:a2:0c:29:15:73:03:
aa:c8:8e:8e:82:f6:25:8e:68:f5:2b:b3:6d:d0:6b:
3d:7e:44:1f:e2:1e:2b:e1:dc:12:b2:ff:ff:22:60:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:78:3C:28:F4:98:0F:EC:5F:D6:E8:C5:26:C7:0F:AE:CE:D0:3C:AF
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/xHg8KPSYD-xf1ujFJscPrs7QPK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.250.0/23
176.221.16.0/22
Signature Algorithm: sha256WithRSAEncryption
12:6c:92:f3:e3:2d:73:7b:4e:bb:33:49:8c:72:f9:84:72:3d:
fe:38:00:51:45:ae:dd:3a:96:8e:4f:7f:bc:9e:b0:eb:3b:6c:
ef:d0:c8:97:84:09:40:fb:71:f3:f4:3d:dc:68:5d:9b:9c:60:
89:4a:20:a2:d4:8b:2e:9d:f5:8e:24:c7:f8:e9:33:e5:b2:2f:
ef:72:17:fb:68:05:3c:84:73:c7:ae:01:50:62:6e:87:b7:d6:
90:82:a0:85:76:c4:84:1e:d1:d5:77:33:35:92:98:8d:3f:7c:
65:32:7d:43:22:05:8f:8c:b5:2d:c1:15:72:a6:d9:e7:02:3f:
dc:8d:e0:3e:2a:24:30:4d:b7:bc:60:d7:89:98:ca:17:a4:e4:
fc:e4:eb:38:04:bb:3d:c8:d7:ee:2b:74:db:0b:94:38:1d:b3:
79:76:c4:c0:d8:74:cc:a3:15:92:32:f6:b9:49:70:7c:f2:be:
18:a6:bd:17:11:21:03:b9:3a:65:d1:6a:09:e3:e5:84:76:c3:
bb:30:46:ec:d8:ce:9a:af:a0:65:98:53:4e:d5:bf:b5:38:f4:
bd:d2:e8:49:89:98:ad:93:68:0b:06:db:32:5b:e5:c7:1e:4f:
7e:9c:8e:d5:ab:66:d9:b5:af:c9:e6:03:ca:c5:a7:07:0b:6e:
2b:c2:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:48 2024 by rpki-client on console-fra.rpki-client.org