Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/XQ1Pfcxl52nnTKzg6WjC8fiuh24.roa
File: XQ1Pfcxl52nnTKzg6WjC8fiuh24.roa (raw, json)
Hash identifier: h64L7bTmIVQWgvTm50g/mUKGK3kYcQzVTlaMV2Ecx3k=
Subject key identifier: 5D:0D:4F:7D:CC:65:E7:69:E7:4C:AC:E0:E9:68:C2:F1:F8:AE:87:6E
Certificate issuer: /CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
Certificate serial: 019129426C6AE6403141F4392D400F6E4A84
Authority key identifier: EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/XQ1Pfcxl52nnTKzg6WjC8fiuh24.roa
Signing time: Tue 06 Aug 2024 19:55:04 +0000
ROA not before: Tue 06 Aug 2024 19:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58192
IP address blocks: 81.30.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:29:42:6c:6a:e6:40:31:41:f4:39:2d:40:0f:6e:4a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
Validity
Not Before: Aug 6 19:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d0d4f7dcc65e769e74cace0e968c2f1f8ae876e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:de:da:9e:f4:bb:7c:8e:38:9e:19:5f:cf:ab:
25:4d:b5:2e:c7:c9:52:dd:2c:d5:f5:b2:c6:2e:87:
66:ed:7f:98:3b:66:17:39:1a:75:7e:ef:16:d4:ab:
4a:2c:9c:6d:6c:57:48:0d:9c:c7:f1:32:a0:91:5d:
8b:0c:4b:1a:f6:63:54:8f:72:6a:32:bb:67:93:f3:
b9:e3:1a:1b:db:36:41:9b:db:76:43:ee:89:f3:0c:
41:ca:1a:e3:56:38:4d:81:af:a5:0c:3c:49:47:33:
f2:43:05:bb:bf:49:e1:30:b6:61:d2:37:aa:17:98:
fd:7f:be:e5:40:ae:65:60:ef:a1:a4:14:cf:62:02:
15:ec:6f:e2:a0:fa:8f:80:7b:50:22:c1:04:00:63:
40:70:2b:df:77:2c:bf:42:a3:bb:d4:04:6c:40:c2:
1c:b5:22:cb:98:a3:a3:74:31:7e:5e:5f:6d:69:d5:
00:29:40:7f:33:94:90:a4:1f:c9:ba:f7:78:a6:e1:
80:92:50:80:b9:2a:a7:14:33:03:2c:af:2c:72:49:
f1:c2:85:2c:15:0e:54:c8:62:b3:fd:63:27:ae:c1:
a5:96:b6:d0:51:d4:13:cc:42:fa:e2:fa:b4:8d:b0:
60:c5:58:12:2b:39:93:22:59:44:03:b0:f5:b1:9e:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0D:4F:7D:CC:65:E7:69:E7:4C:AC:E0:E9:68:C2:F1:F8:AE:87:6E
X509v3 Authority Key Identifier:
keyid:EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/XQ1Pfcxl52nnTKzg6WjC8fiuh24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:1e:82:98:f1:b9:82:d9:c5:13:ed:69:65:c5:a3:1d:db:49:
54:58:02:d3:cd:41:94:65:88:76:69:e1:dd:19:0a:6d:9f:52:
9d:9f:79:a5:fe:44:72:44:75:73:46:06:dc:af:8b:b7:0d:49:
8a:d0:ba:9a:d5:32:00:59:c5:6f:03:1a:5d:8a:63:32:79:3d:
4b:7b:8c:71:bd:f6:f8:67:a8:f2:67:0d:b1:f1:a5:fc:b4:ee:
03:b0:58:fc:8f:03:c3:68:e2:44:dc:24:21:f6:4e:b6:91:75:
7e:9a:f2:ba:0f:66:6e:70:64:33:a9:a2:3f:67:f7:6d:a5:a1:
3c:1c:de:69:72:a2:38:31:4c:0a:c9:a1:91:b2:51:ce:61:a9:
c2:0c:8f:ff:ab:0c:1e:8a:f6:37:f3:0c:31:a8:b5:92:a9:8e:
8b:da:c9:f8:15:c5:d4:5b:68:fd:05:a6:83:c1:73:29:05:21:
92:88:3f:7e:d4:1c:70:af:c7:c2:bb:bf:99:bc:2c:f1:5a:fe:
c4:f6:55:3f:30:0c:ed:1a:42:58:ca:06:a1:31:96:e6:78:11:
34:ec:bd:f7:72:39:ce:f5:d3:88:91:da:c4:5f:4f:39:36:da:
f2:d1:4c:a0:9a:bb:18:07:e7:08:21:c4:ff:3b:30:71:43:e2:
dc:aa:4d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:29 2024 by rpki-client on console-fra.rpki-client.org