Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/xBGehg-rWoErrndMqAPitvitPu0.roa
File: xBGehg-rWoErrndMqAPitvitPu0.roa (raw, json)
Hash identifier: mITwKMbJl7Pp9fOAoiT79a43cWlOOV82h3f57/WlObk=
Subject key identifier: C4:11:9E:86:0F:AB:5A:81:2B:AE:77:4C:A8:03:E2:B6:F8:AD:3E:ED
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01934FF890A90A0B0FF8152D7DE228DDBF10
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/xBGehg-rWoErrndMqAPitvitPu0.roa
Signing time: Thu 21 Nov 2024 18:25:10 +0000
ROA not before: Thu 21 Nov 2024 18:25:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7040
IP address blocks: 2.57.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4f:f8:90:a9:0a:0b:0f:f8:15:2d:7d:e2:28:dd:bf:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Nov 21 18:25:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4119e860fab5a812bae774ca803e2b6f8ad3eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:93:69:45:67:cc:1c:d6:bc:e6:97:cb:0c:
bb:7a:4c:72:a8:cc:59:7e:c5:da:58:63:3a:34:2e:
1e:15:65:2b:81:3b:b4:f8:1f:eb:58:3a:66:14:de:
c3:ac:77:cd:ce:66:3b:bb:29:a0:55:ee:48:96:6a:
00:0c:43:5d:5f:ec:48:3c:05:4a:ac:d1:53:a3:dc:
d4:06:61:bf:05:a1:b0:4c:19:a8:36:da:af:a7:14:
30:55:a9:cb:14:d4:3f:2d:10:30:15:78:a4:69:36:
2d:eb:7d:71:b6:c3:4d:99:71:04:69:0f:28:16:51:
6b:f0:8b:65:be:c8:af:e9:8f:07:fb:d8:00:da:00:
fc:d5:e0:0a:1c:e9:69:98:99:c0:0e:9d:68:fe:e2:
42:14:54:c4:9a:1e:08:e6:2c:34:44:b2:ae:f3:eb:
16:39:86:3c:23:27:3f:7f:06:f1:09:c4:61:7a:f6:
92:c9:ea:b5:75:a0:27:53:d9:06:d2:ef:8b:ee:19:
fb:61:80:c0:60:16:1a:ce:8b:57:16:b6:80:7a:7e:
a1:48:7e:52:4d:5d:03:ac:89:51:f2:50:37:0f:a1:
42:a6:a9:69:d0:f8:b7:0d:7c:4d:48:64:16:87:81:
74:f7:5f:16:1e:0f:9d:e3:d7:42:55:ce:e0:6b:8c:
d6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:11:9E:86:0F:AB:5A:81:2B:AE:77:4C:A8:03:E2:B6:F8:AD:3E:ED
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/xBGehg-rWoErrndMqAPitvitPu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.169.0/24
Signature Algorithm: sha256WithRSAEncryption
48:da:9e:9a:cb:c9:e6:4d:90:b1:6c:5c:07:4f:de:84:83:b5:
11:5f:82:0e:b7:f4:7c:0f:9a:f3:17:cd:82:4b:fc:a4:47:17:
3c:27:1f:c4:82:95:1a:85:e3:ae:bb:de:59:23:2f:1a:50:0a:
e5:5b:22:7d:8a:02:22:5d:08:cd:14:0d:38:f6:93:a9:7b:d9:
67:48:2f:1c:4d:17:4e:52:5a:84:76:72:ab:df:a2:ee:9a:db:
fd:7f:e6:f2:5b:8c:7a:13:bb:e3:12:cd:eb:78:5e:0d:e6:5f:
44:0f:d2:66:e8:8b:33:b9:dd:98:ef:58:27:ad:ac:e7:c4:85:
c1:ae:71:ef:05:cf:82:c4:82:7d:00:7e:62:88:2f:4a:ad:10:
67:35:db:a5:21:59:22:21:9a:16:73:84:92:e1:c4:69:c8:00:
2a:55:09:eb:17:e7:a2:7a:9a:3f:e9:7c:11:72:0a:38:79:d0:
1d:38:c2:13:5e:1c:e8:2e:29:6f:fb:11:9c:93:96:3f:a2:81:
22:83:0c:15:5f:9c:c9:15:97:10:70:c2:b2:03:3c:44:54:75:
6a:4d:32:fa:9d:33:a6:02:4c:ad:74:31:ce:ab:39:14:f7:e1:
6c:54:91:b3:c9:5f:86:f9:46:54:17:c7:80:da:82:e3:27:72:
63:0f:25:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:28:47 2024 by rpki-client on console-ams.rpki-client.org