Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/cc5vFGSjl_YA6g66PnN-FEIefPE.roa
File: cc5vFGSjl_YA6g66PnN-FEIefPE.roa (raw, json)
Hash identifier: bCiu7ZQXfIGWtcNxFJE4qJlyv27S14YTe4JPHS7pEwQ=
Subject key identifier: 71:CE:6F:14:64:A3:97:F6:00:EA:0E:BA:3E:73:7E:14:42:1E:7C:F1
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019326658E3CC726B3E94E88176FF75C8AA4
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/cc5vFGSjl_YA6g66PnN-FEIefPE.roa
Signing time: Wed 13 Nov 2024 16:40:09 +0000
ROA not before: Wed 13 Nov 2024 16:40:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400992
IP address blocks: 87.251.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:26:65:8e:3c:c7:26:b3:e9:4e:88:17:6f:f7:5c:8a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Nov 13 16:40:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71ce6f1464a397f600ea0eba3e737e14421e7cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:c8:57:1e:06:b5:9b:2c:65:7d:91:0e:a9:
0e:de:aa:10:42:ab:81:22:18:d2:71:e7:a3:9c:67:
a8:4e:4d:f1:62:10:2e:71:8f:5d:b0:e7:1e:70:76:
50:f4:07:f1:d5:68:c7:6d:ef:d8:bd:dc:38:b7:77:
a9:6e:a3:bf:5e:88:65:e3:2c:5e:59:d2:fb:03:bf:
a6:51:c0:ce:6c:79:11:92:00:4f:69:d6:4a:20:e8:
d8:9d:b6:3e:91:97:8c:f3:03:fc:f9:29:9e:e2:b2:
67:86:5c:db:4b:81:7c:a7:aa:4a:c3:94:3e:38:62:
6a:57:b6:92:98:3d:ab:56:66:2a:4a:92:30:75:b3:
8d:4d:bc:02:0b:b5:56:ad:20:89:95:db:d8:b8:43:
b4:a3:15:af:f4:51:1a:76:f5:6a:82:67:5a:26:0f:
23:1f:f3:fb:80:2b:31:79:34:f1:7a:a0:8e:04:0a:
e8:a1:7a:91:11:d5:27:95:db:0f:09:ef:1f:04:74:
4c:74:00:39:d0:b0:79:3d:94:a3:92:40:3c:57:31:
bd:b6:77:3a:8a:2b:d8:ae:99:15:89:9f:e3:dc:ea:
fa:43:f8:bc:d7:e4:03:3c:0f:76:c9:a2:18:ae:8d:
5a:b5:01:ec:37:86:2a:2c:ab:f6:54:c5:cc:4a:47:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CE:6F:14:64:A3:97:F6:00:EA:0E:BA:3E:73:7E:14:42:1E:7C:F1
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/cc5vFGSjl_YA6g66PnN-FEIefPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:86:65:ed:6a:e4:cf:40:a4:de:f3:a4:ae:20:b4:46:05:46:
6d:7d:81:2d:61:4c:77:43:fe:be:4c:cf:78:14:69:7b:ab:92:
19:2b:84:ae:0e:b7:dc:dd:d7:68:fb:21:45:81:ad:78:a3:eb:
1d:67:d8:fc:9b:d6:da:f8:ed:8b:54:a4:dc:24:ac:10:36:2f:
01:14:c1:97:f3:a4:58:f4:32:92:c8:f3:db:94:02:77:8e:b2:
f0:8f:bc:c6:5a:59:e2:cd:25:a7:da:54:14:9b:61:bf:bd:e0:
a4:b1:e1:71:b9:54:26:36:46:4d:49:2f:60:82:26:91:74:f8:
e2:51:a9:e8:4f:61:d9:f0:60:db:56:c5:64:89:ee:5d:12:78:
88:20:e5:e5:e8:a0:38:09:4a:8d:5b:fb:1d:aa:be:e9:db:ee:
ba:c8:69:0d:5d:31:90:4c:9a:63:0e:3b:fd:cc:c4:87:c5:8e:
b8:32:c7:cc:60:bb:df:8d:8f:05:09:d7:66:e5:50:cf:5b:ba:
30:30:ea:bd:f5:a0:eb:5e:b4:60:82:7e:ac:81:0b:c7:ec:b9:
eb:52:ae:8d:b2:40:d8:a2:e5:d6:a3:ba:c4:b2:0c:9e:56:b3:
37:92:b5:24:18:a1:8a:a8:45:c8:6e:a9:7d:f6:d0:67:92:77:
58:53:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:39:09 2024 by rpki-client on console-ams.rpki-client.org