Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/xX5hc2fx50IylJXQweF679mp3A0.roa
File: xX5hc2fx50IylJXQweF679mp3A0.roa (raw, json)
Hash identifier: a7eQ8Z6os3AFc1f+/8gLwDIv1x6tc76w5D01f9K1Rbg=
Subject key identifier: C5:7E:61:73:67:F1:E7:42:32:94:95:D0:C1:E1:7A:EF:D9:A9:DC:0D
Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial: 018CC6B93D037E27FB9858C01BD74E385EF5
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/xX5hc2fx50IylJXQweF679mp3A0.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209350
IP address blocks: 78.24.207.0/24 maxlen: 24
2a09:5e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3d:03:7e:27:fb:98:58:c0:1b:d7:4e:38:5e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c57e617367f1e742329495d0c1e17aefd9a9dc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:8a:26:81:e3:99:cb:6f:ff:69:b1:d3:d7:
dd:80:ed:67:b1:f0:37:10:3f:8a:d9:8e:78:d3:72:
d7:aa:21:7e:21:0e:d1:71:9f:3e:da:94:0b:00:92:
ff:28:4b:5c:24:77:b1:4b:46:a8:86:49:a5:4d:a8:
0e:22:73:21:ac:01:e6:c7:62:c1:50:1b:50:72:60:
b0:aa:c0:26:d6:6f:24:0e:81:02:88:76:61:dd:f2:
ce:72:15:8c:72:bf:e5:14:c1:44:0e:76:97:0a:c3:
84:14:08:25:2a:b1:22:97:53:52:38:d5:96:d8:a5:
65:80:46:07:92:7c:e2:69:c8:f1:e2:92:d2:13:c4:
9a:89:62:4c:ba:12:92:e4:a6:fc:46:f2:2b:30:c0:
6d:95:00:42:ab:3d:38:b4:65:d8:07:e5:9b:3d:d0:
dd:5a:56:6b:f6:25:84:9b:29:6e:05:1a:f2:e9:8b:
da:34:17:40:a1:f0:64:d2:78:ff:9d:53:58:1d:31:
52:f3:9b:8e:8d:3d:c0:8f:28:d3:ad:93:1c:53:c5:
5c:e4:a1:26:33:31:47:a3:66:1f:59:93:78:c0:43:
a9:e1:4a:ac:3c:7a:31:b7:af:25:7e:a9:57:88:48:
26:93:61:03:cf:d3:8d:8a:85:66:3f:2a:ab:db:a1:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7E:61:73:67:F1:E7:42:32:94:95:D0:C1:E1:7A:EF:D9:A9:DC:0D
X509v3 Authority Key Identifier:
keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/xX5hc2fx50IylJXQweF679mp3A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.207.0/24
IPv6:
2a09:5e00::/29
Signature Algorithm: sha256WithRSAEncryption
52:27:80:30:d6:15:3b:f6:48:4e:de:5e:60:93:c7:e8:77:7e:
6a:27:63:fb:66:7b:ff:05:4b:36:ad:0f:36:d4:d5:6c:ec:88:
e4:db:43:3e:c7:3c:e0:26:a7:7a:77:c7:71:25:17:f4:78:ce:
89:70:1a:54:ef:b6:ee:53:af:40:c6:01:2e:92:15:80:16:93:
8a:2f:f2:f6:36:f1:90:56:79:de:7a:23:18:ce:e1:4c:49:a3:
38:b1:52:26:99:86:56:9d:75:a5:95:45:e8:3d:3a:f4:b9:23:
65:d6:d3:09:0c:b8:4f:9a:87:71:89:1b:90:1e:87:df:d4:fa:
29:54:f6:a2:2e:02:df:20:d3:bb:05:c7:01:f0:d9:52:a8:a1:
d0:c9:d4:d2:fc:f8:f3:fb:63:52:df:f0:8b:01:a1:7f:ca:3e:
e9:56:80:a8:a9:d1:82:c5:fb:50:d3:30:05:a7:c8:f9:f0:e8:
98:0c:b9:d5:8b:3b:fb:3d:dc:a5:ba:7a:eb:c2:62:28:d9:9c:
77:bd:2c:25:6d:ea:51:71:a4:d8:aa:c0:de:b9:1c:ce:36:cc:
0b:41:a9:48:91:81:0d:98:4d:ff:51:38:02:2c:da:5f:ca:8c:
66:86:3f:9b:27:4b:88:0b:12:35:70:4b:59:35:22:01:37:fb:
b9:dd:af:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:27:17 2024 by rpki-client on console-ams.rpki-client.org