Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8eU51W4gvYlrBfKlNhgIj4WpsMU.roa
File: 8eU51W4gvYlrBfKlNhgIj4WpsMU.roa (raw, json)
Hash identifier: nIeTDMsRiBm4Te+SSJJFIB9zHoRtvTEyDTf3r2xCkhg=
Subject key identifier: F1:E5:39:D5:6E:20:BD:89:6B:05:F2:A5:36:18:08:8F:85:A9:B0:C5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0190CAC976A67EE7DBC52E09613321DC5861
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8eU51W4gvYlrBfKlNhgIj4WpsMU.roa
Signing time: Fri 19 Jul 2024 11:38:38 +0000
ROA not before: Fri 19 Jul 2024 11:38:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39944
IP address blocks: 139.28.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ca:c9:76:a6:7e:e7:db:c5:2e:09:61:33:21:dc:58:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 19 11:38:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1e539d56e20bd896b05f2a53618088f85a9b0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:3b:af:ed:94:df:1c:37:4c:46:df:ce:7c:
34:c5:6d:91:99:04:47:77:43:33:0f:23:55:10:27:
eb:ac:a1:78:2e:0d:cf:86:58:3f:25:38:59:33:99:
10:49:bb:dc:70:81:b9:29:65:e8:0b:15:21:ec:66:
70:cb:f8:74:e7:7d:6f:bf:9f:07:92:ef:09:c7:3a:
9f:dd:8e:d3:d3:3c:67:80:b9:2e:d6:fd:7f:f8:d6:
47:7c:4f:13:0d:5f:1e:ad:ae:ca:6a:52:2d:7e:41:
1d:e3:35:37:73:89:ed:b6:f4:b2:cb:a6:5e:70:7b:
ed:1f:17:62:e7:2a:0f:b2:da:54:07:c1:29:81:65:
46:a9:13:7a:81:29:02:69:d7:5e:cf:fc:ef:47:83:
49:10:bf:43:aa:ff:02:f8:08:f4:e3:3c:56:90:bb:
7c:4b:0c:27:be:dc:32:47:a9:8c:4e:11:55:65:df:
a1:9a:6b:0c:96:7c:dd:0a:e8:7d:bc:4d:4f:7f:4e:
8b:f4:01:c2:98:f1:df:89:a4:37:2c:83:b8:0c:6d:
b3:35:bf:25:c5:fa:1d:4c:15:1a:b8:22:44:fa:93:
9b:cf:a3:85:c1:b6:91:05:7a:91:eb:45:f7:92:bd:
39:47:71:89:8c:47:80:65:8e:6f:8a:1b:d1:3d:49:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E5:39:D5:6E:20:BD:89:6B:05:F2:A5:36:18:08:8F:85:A9:B0:C5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8eU51W4gvYlrBfKlNhgIj4WpsMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.86.0/23
Signature Algorithm: sha256WithRSAEncryption
46:87:71:31:03:ee:62:8b:2d:02:4c:77:66:4f:72:96:41:d0:
39:31:7b:b1:11:bb:87:9a:77:ee:4a:1b:87:67:6d:a5:41:4f:
dc:dd:26:86:57:1e:bc:36:72:e2:ec:49:99:10:76:f9:80:c6:
da:b4:3b:83:93:c1:ae:ae:b4:a1:e0:a7:4b:14:a4:6a:0f:33:
69:4d:d0:5b:73:67:2d:53:61:39:2d:13:fd:bc:d2:bc:0a:d1:
a9:c1:84:ef:70:f7:04:1c:00:e2:a9:e4:2c:96:c5:48:03:5b:
f8:bb:13:cc:8d:f8:7d:e7:5e:4a:fc:78:10:0c:18:a2:86:13:
8b:a0:29:3d:fb:4c:3f:86:58:5a:44:f8:d3:e3:ab:a4:26:53:
bf:7e:f0:28:65:17:cb:8d:35:37:80:32:93:93:01:16:41:41:
66:8f:16:61:c1:f4:79:e3:96:73:e9:b7:c1:84:62:71:d8:ea:
a2:f0:86:8d:83:ff:fd:1e:0d:b5:18:c1:ca:da:e0:11:fe:24:
1b:94:e8:b2:f3:fe:fd:73:49:2c:b6:c6:61:b5:c0:75:f9:ec:
61:d5:47:18:cb:87:49:f0:dd:92:ed:b5:33:84:cb:64:87:ef:
f4:e5:ae:dc:59:13:5e:25:d9:84:79:f6:98:bc:96:69:7a:7f:
b2:52:5b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:56 2024 by rpki-client on console-ams.rpki-client.org