Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/MXV6hwQ3kkRnXccCtafjJ0OHCd8.roa
File: MXV6hwQ3kkRnXccCtafjJ0OHCd8.roa (raw, json)
Hash identifier: JvVO48OvhWspiBB9IZKljgUZp9eDK6W9XLbXxwEeEXQ=
Subject key identifier: 31:75:7A:87:04:37:92:44:67:5D:C7:02:B5:A7:E3:27:43:87:09:DF
Certificate issuer: /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial: 018CC50043994A7CA32AC6ADCDCE9A561CB3
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/MXV6hwQ3kkRnXccCtafjJ0OHCd8.roa
Signing time: Mon 01 Jan 2024 12:29:38 +0000
ROA not before: Mon 01 Jan 2024 12:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202177
IP address blocks: 217.173.202.0/24 maxlen: 24
217.173.203.0/24 maxlen: 24
217.173.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:43:99:4a:7c:a3:2a:c6:ad:cd:ce:9a:56:1c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Validity
Not Before: Jan 1 12:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31757a8704379244675dc702b5a7e327438709df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:b0:db:f6:db:35:36:41:80:e9:95:06:0d:
16:41:23:29:eb:e8:b9:2f:4f:5c:3b:c8:b9:13:00:
7c:bf:09:6f:61:2e:4c:ff:60:e4:8a:f7:29:91:80:
e1:27:1f:4e:94:78:28:26:7d:b0:1c:a6:49:7c:9f:
59:24:90:5c:4c:98:f7:b4:5f:9f:29:b1:82:66:d4:
3c:9a:e8:9f:11:4f:46:32:0b:01:1c:dc:7a:60:ff:
c8:f3:58:bd:69:80:5d:11:49:32:0e:bd:5c:cb:4e:
65:df:87:12:fb:6e:be:5c:d2:95:c3:8c:50:fc:f9:
3e:0a:67:f8:85:82:a3:29:a0:59:db:ef:fb:66:73:
a5:e7:71:51:83:d6:66:ec:a0:6b:23:8b:f3:45:c5:
15:ea:fa:32:b3:34:5c:b1:49:75:c2:56:94:90:97:
4f:a3:0f:1f:fd:71:f9:cf:af:78:ae:74:5a:47:f2:
d7:d3:b9:b3:ca:e2:3b:f7:d2:78:05:40:0c:0a:55:
a7:5e:85:da:c3:60:40:55:e9:06:c0:2e:e1:41:75:
37:7c:6d:f1:17:64:bd:20:f9:66:27:f0:77:13:73:
b9:1a:e7:31:11:1d:95:83:ae:a3:4c:51:fe:3e:17:
37:b6:2b:59:fd:15:b8:d1:a2:d6:0b:f1:ec:bb:bc:
60:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:75:7A:87:04:37:92:44:67:5D:C7:02:B5:A7:E3:27:43:87:09:DF
X509v3 Authority Key Identifier:
keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/MXV6hwQ3kkRnXccCtafjJ0OHCd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.202.0-217.173.204.255
Signature Algorithm: sha256WithRSAEncryption
74:bb:b1:09:61:a8:28:32:7e:e8:94:6d:3b:e2:2e:5c:c7:f4:
36:88:2e:95:b1:64:4d:76:75:2b:1e:af:d9:4d:69:09:f4:2e:
55:b1:ba:d4:81:9e:04:66:50:f7:2b:c2:07:ed:fd:07:71:d4:
3c:37:77:6f:b4:ee:00:f4:5d:3f:35:b4:d1:dd:31:94:d9:63:
e8:a5:ef:55:41:f6:06:b0:64:55:ba:1f:db:84:a1:94:14:6a:
45:b5:57:9e:7a:64:87:ca:ec:1b:02:cc:bb:ab:43:3a:09:20:
27:eb:01:03:1d:c6:dd:df:96:05:17:11:18:27:02:54:f9:0e:
15:d2:f7:74:63:a4:25:d1:02:58:57:c7:32:7d:3c:c4:d7:cb:
e7:da:5a:0c:78:e6:79:3b:63:2e:61:b9:33:59:9a:92:8d:9c:
af:fb:7c:94:c6:6d:9f:32:26:15:19:96:5b:30:22:4d:53:70:
cb:1c:f0:c2:65:72:7f:09:6b:1d:25:8a:26:e4:98:7c:1f:a8:
bb:70:fd:99:b4:78:3a:5e:b5:b7:f7:41:75:b5:21:4f:13:ec:
0e:63:ef:8a:c8:9d:4e:74:29:47:de:98:41:4d:ec:60:2e:79:
c2:e9:cd:10:4f:6a:2c:22:2a:d6:ad:e6:56:87:59:e7:4d:7b:
39:18:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:43:18 2024 by rpki-client on console-fra.rpki-client.org