Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/_XojgoFuCVh12qr_22N3y9wp8kg.roa
File: _XojgoFuCVh12qr_22N3y9wp8kg.roa (raw, json)
Hash identifier: L0mJyGkptXrrUxIhLBAmXmbBXkoCMwukwC9TdaKQcOc=
Subject key identifier: FD:7A:23:82:81:6E:09:58:75:DA:AA:FF:DB:63:77:CB:DC:29:F2:48
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 019147090804CA6FE90E8C06128716CB920C
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/_XojgoFuCVh12qr_22N3y9wp8kg.roa
Signing time: Mon 12 Aug 2024 14:40:59 +0000
ROA not before: Mon 12 Aug 2024 14:40:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214628
IP address blocks: 83.141.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:47:09:08:04:ca:6f:e9:0e:8c:06:12:87:16:cb:92:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Aug 12 14:40:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd7a2382816e095875daaaffdb6377cbdc29f248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:da:a9:4f:3d:93:fa:6b:71:bf:76:4d:87:43:
ac:36:8e:0c:c9:d9:1c:2b:b1:87:5f:fc:60:55:f2:
07:50:c3:75:0f:34:bb:1f:80:c7:5e:6d:b5:b7:e6:
4c:bd:ca:b8:a4:e6:27:b7:f8:1d:b2:c1:44:4d:09:
1a:0c:85:86:0c:32:1a:a7:51:27:ee:35:65:97:6f:
3e:99:9b:cd:89:cf:b6:25:e3:6f:ca:da:06:21:af:
36:fc:f1:c5:13:15:8c:3d:03:7f:14:38:e8:83:fc:
9a:37:36:1c:a1:2b:30:40:cf:0f:3f:7c:47:33:71:
7f:81:6c:7f:c7:55:33:5f:a2:6e:4c:71:14:e0:0d:
71:b0:5c:da:9c:e4:09:6d:26:a6:55:d9:4b:99:72:
36:46:75:9e:32:6a:4f:47:57:27:3a:dc:34:fc:52:
f4:fc:d7:30:d3:c5:b8:54:51:1f:1f:bb:b8:c9:50:
f8:9d:c9:0a:77:34:18:7f:9f:ea:f2:cd:ff:10:d8:
7d:f3:7e:98:81:ab:ef:46:e7:13:9f:b8:c9:b2:3f:
a0:06:e8:55:97:63:77:eb:2e:75:2c:33:8a:bd:fa:
f6:7f:af:98:93:5f:f0:9a:f9:02:95:5f:2f:e3:9b:
6f:7b:9d:45:2e:c0:e1:41:0f:4d:b0:1b:ec:4b:4c:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7A:23:82:81:6E:09:58:75:DA:AA:FF:DB:63:77:CB:DC:29:F2:48
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/_XojgoFuCVh12qr_22N3y9wp8kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.141.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:bc:ee:d8:90:db:79:d3:41:16:df:8f:2f:49:43:39:7d:aa:
a6:c8:69:3b:2c:ab:40:8a:75:b5:ec:7b:41:ad:aa:44:d3:af:
c6:d5:77:57:1c:f6:4f:53:ee:39:36:80:d6:6d:69:af:08:f5:
b4:1a:c9:7f:3e:44:3a:c5:b2:30:30:37:a4:d4:6e:b0:e4:e8:
c5:79:0e:e2:b2:1a:59:db:76:cc:45:f1:e0:27:f0:fe:ec:ed:
1c:33:86:fa:e9:d1:f9:61:d6:ce:0b:40:91:77:50:f2:19:7a:
14:36:0d:85:9f:f8:41:7f:9a:cf:95:c2:57:46:48:7f:16:27:
da:0b:38:87:2a:08:f8:fd:c6:81:d2:70:fd:a4:82:b4:84:b3:
91:a9:54:95:54:49:5c:f8:9f:e5:1e:d6:c3:b9:6f:9b:4f:29:
e3:a4:c1:0f:88:0f:06:22:dc:cd:5f:83:9f:23:31:cf:ba:bd:
9c:71:3a:33:7e:c8:c1:1d:ca:ae:7c:90:fc:20:cb:c6:0b:14:
e4:11:59:c0:ae:29:59:61:ef:ac:88:72:80:94:ef:f6:ab:1c:
37:63:38:6c:20:2e:92:73:36:64:4a:b2:84:fb:32:8c:29:3c:
e8:64:52:c8:f6:75:cf:5a:a1:a8:27:24:84:88:a8:9e:f2:91:
68:ac:75:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:03 2024 by rpki-client on console-ams.rpki-client.org