Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/XqL1FcEK0UNOhNpFZXW6gzOp8sQ.roa
File: XqL1FcEK0UNOhNpFZXW6gzOp8sQ.roa (raw, json)
Hash identifier: 01//wM3pvSQEBN0ZqM3YhwHsDeyV0GK1+MahCFIhi6k=
Subject key identifier: 5E:A2:F5:15:C1:0A:D1:43:4E:84:DA:45:65:75:BA:83:33:A9:F2:C4
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE9C30400D9BE318C8DEAAF1DE142B19B
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/XqL1FcEK0UNOhNpFZXW6gzOp8sQ.roa
Signing time: Mon 08 Jan 2024 15:48:41 +0000
ROA not before: Mon 08 Jan 2024 15:48:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57273
IP address blocks: 87.229.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:c3:04:00:d9:be:31:8c:8d:ea:af:1d:e1:42:b1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 8 15:48:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ea2f515c10ad1434e84da456575ba8333a9f2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:e8:72:df:d6:02:b5:88:62:4e:a1:af:09:
01:11:5f:3b:7f:d3:7c:1b:3b:a4:2b:72:61:ff:8b:
1b:ee:e6:fb:c2:f4:1b:37:27:b5:4e:6e:8e:b7:dd:
c2:c0:71:8a:6f:f9:f2:78:56:dc:11:27:3e:c9:38:
92:6d:80:c9:1f:79:90:ca:b7:ac:ee:97:c6:71:be:
15:d0:7d:55:39:5b:79:29:30:48:b0:34:57:40:04:
e7:0a:38:15:67:20:b5:7f:9f:57:e9:6a:bc:69:14:
10:40:db:58:63:08:4c:92:37:08:5f:11:19:59:22:
cd:cb:eb:ba:24:07:9f:a7:1f:1a:9a:06:c5:b7:96:
b7:8c:45:d9:be:77:4b:73:22:bc:6b:1d:f0:67:3f:
ba:b6:dc:3e:fd:66:ae:3c:e7:3c:b2:fa:9f:9b:fd:
b8:b2:25:17:03:b6:17:16:1a:71:6c:c9:ac:f1:f4:
ff:b9:58:b7:4c:32:fb:b5:ab:74:61:b6:83:41:e5:
a7:14:2d:02:8e:7a:89:64:c2:5c:a7:6f:ee:53:a7:
65:ca:30:b1:cd:e8:91:3f:e6:23:a3:fd:68:c4:a6:
5c:f5:6d:51:7c:7e:f2:c5:27:e9:5f:1a:4a:34:48:
a4:32:f7:bb:07:12:35:de:47:69:5d:f1:ce:86:ab:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A2:F5:15:C1:0A:D1:43:4E:84:DA:45:65:75:BA:83:33:A9:F2:C4
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/XqL1FcEK0UNOhNpFZXW6gzOp8sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.126.0/24
Signature Algorithm: sha256WithRSAEncryption
59:94:96:d5:1c:06:dd:79:05:34:f1:e8:4e:c2:df:68:33:59:
ee:da:c7:28:81:59:91:62:1d:af:8d:b2:c8:0e:3a:8c:49:7e:
76:c3:bb:4b:bf:d5:55:6e:ee:e8:43:e6:37:ae:ae:01:c9:eb:
41:a4:99:7d:69:89:56:58:aa:ba:90:8d:0e:02:71:6c:76:00:
70:3d:f3:6d:ec:e7:9f:e3:f2:79:c9:dd:7b:2e:a7:f1:63:5d:
cd:92:7f:4f:ff:c9:5d:8a:f2:35:2e:bc:bd:e3:59:95:cc:f3:
3b:9d:80:a0:3a:c8:99:6c:fd:c5:b9:3f:35:2c:f1:16:21:d9:
48:c2:07:6a:4e:1e:af:ad:56:7e:da:d2:12:c9:2b:87:25:2b:
9b:81:13:9a:64:11:a6:da:c5:0c:f4:22:d1:de:c7:a6:ed:39:
bc:7b:df:dc:4f:90:cf:19:dc:75:db:6e:ae:f3:84:bb:55:e5:
bf:d2:66:17:2b:ef:fd:95:3e:8f:32:6c:9c:0a:8c:8e:4d:28:
b0:ae:f6:25:3f:5c:4f:73:b9:3a:a2:cd:87:fd:f8:34:99:b1:
54:05:60:6a:7a:76:99:fe:42:3f:0f:84:9d:89:08:ab:ce:47:
58:c6:b0:32:dc:ce:be:fc:05:46:b9:0e:7e:68:1c:c8:83:b3:
22:86:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:30:03 2024 by rpki-client on console-fra.rpki-client.org