Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/xFdkLufHeXd9eDnyONO5HY-BGgQ.roa
File: xFdkLufHeXd9eDnyONO5HY-BGgQ.roa (raw, json)
Hash identifier: r+4kiu6vwt8TCXchCWFx5MVh57bSAWFZx1VHIHtwbio=
Subject key identifier: C4:57:64:2E:E7:C7:79:77:7D:78:39:F2:38:D3:B9:1D:8F:81:1A:04
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 01907E197F60ED56D65C125D73C203AAA5B7
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/xFdkLufHeXd9eDnyONO5HY-BGgQ.roa
Signing time: Thu 04 Jul 2024 14:15:18 +0000
ROA not before: Thu 04 Jul 2024 14:15:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216200
IP address blocks: 46.255.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:19:7f:60:ed:56:d6:5c:12:5d:73:c2:03:aa:a5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Jul 4 14:15:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c457642ee7c779777d7839f238d3b91d8f811a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:64:8d:93:d1:32:82:85:da:ec:0a:50:63:
c6:76:6e:70:10:71:d7:64:81:03:47:b0:35:44:50:
98:02:72:c0:f4:f6:f1:ce:44:ac:88:cb:00:88:a7:
f2:34:eb:f9:57:a7:4f:cf:a8:d4:f6:06:97:9b:c6:
b1:eb:f7:a2:99:5c:10:07:84:df:91:e0:f5:10:4f:
3d:14:45:c1:a8:6b:ab:c6:f5:86:b3:07:b7:fb:07:
fc:8a:6e:24:11:91:5a:36:83:95:59:b1:64:b6:f6:
71:74:ed:5f:cb:63:3b:43:ab:43:24:7a:b0:d9:67:
6e:bc:e3:7c:6b:32:02:c9:e5:73:00:a0:c6:76:11:
24:6d:6f:dd:f4:08:78:45:c2:4c:7a:b5:56:4e:8d:
41:ed:e7:8b:90:10:b1:57:60:5a:79:f3:a1:b7:4e:
d8:e9:33:71:bd:46:65:18:c8:ff:e3:b6:48:9b:42:
4d:18:55:98:36:21:60:35:eb:a8:eb:4d:ab:01:86:
93:a4:85:64:03:3a:20:57:9e:33:31:da:df:dd:4b:
58:84:6b:05:cc:52:cc:25:6e:12:76:6b:3f:5a:3a:
a5:d3:8c:cd:53:a6:4e:b0:a1:73:6f:42:3d:60:30:
c5:44:64:90:d5:96:97:92:e1:0a:39:f3:15:ee:2c:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:57:64:2E:E7:C7:79:77:7D:78:39:F2:38:D3:B9:1D:8F:81:1A:04
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/xFdkLufHeXd9eDnyONO5HY-BGgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.27.0/24
Signature Algorithm: sha256WithRSAEncryption
19:49:0e:44:50:bc:72:4e:f0:9e:78:08:e9:fe:35:4e:c9:2a:
07:7d:c0:8b:76:b4:c5:44:00:40:44:0b:e6:eb:0b:90:a2:e3:
86:34:5c:6b:7d:f5:5b:c4:5b:dd:2f:2d:3f:b7:0e:8c:91:67:
a2:c5:97:43:84:2b:07:94:b3:c1:1f:35:f9:a3:a0:f0:94:39:
e5:90:86:f2:bb:1b:ca:db:18:d2:28:c7:cb:eb:f4:48:53:3e:
25:d0:8f:c6:70:0b:6c:b7:b8:57:17:68:6c:ce:ac:84:56:c0:
6a:00:e3:42:c5:48:d3:65:e7:53:7f:e3:be:99:fd:89:b8:a3:
d9:8d:00:c9:c9:e9:53:80:54:5c:e3:bc:19:9d:50:da:7b:a0:
14:7d:8f:3f:ed:2d:fc:e3:eb:a7:ae:6e:06:c1:b5:7e:87:a5:
77:14:71:35:43:98:b1:d0:cf:24:13:de:e4:15:92:3e:78:82:
4d:9a:2e:ef:4c:bc:42:7e:a8:53:61:85:ee:3e:e8:ea:73:7c:
c4:f6:72:25:18:d5:d8:d8:ac:f1:a9:c6:42:40:d0:1f:29:3e:
21:b5:0e:70:90:12:5c:49:f1:4c:fd:f0:9b:05:29:ac:5b:b3:
33:38:51:a3:f1:50:bd:45:72:5e:1b:08:2a:48:ed:e8:10:83:
c1:5b:3a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:49 2024 by rpki-client on console-fra.rpki-client.org