Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/RnxnwrqUwQDoGNSjB5H3sGbY2so.roa
File: RnxnwrqUwQDoGNSjB5H3sGbY2so.roa (raw, json)
Hash identifier: NXCcIK5GyvWuYvbs4Tv1MIC7wCXrAHTOK17/VCDfdtQ=
Subject key identifier: 46:7C:67:C2:BA:94:C1:00:E8:18:D4:A3:07:91:F7:B0:66:D8:DA:CA
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 0190596A0468FB8DEB93D415B2BE5F04EFF5
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/RnxnwrqUwQDoGNSjB5H3sGbY2so.roa
Signing time: Thu 27 Jun 2024 11:17:18 +0000
ROA not before: Thu 27 Jun 2024 11:17:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 206.245.209.0/24 maxlen: 24
206.245.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:6a:04:68:fb:8d:eb:93:d4:15:b2:be:5f:04:ef:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Jun 27 11:17:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=467c67c2ba94c100e818d4a30791f7b066d8daca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:6e:a2:b0:76:13:c7:bc:df:a1:2c:01:d5:
e4:88:75:e3:2d:7d:a5:1d:fc:cf:83:df:3b:10:4c:
0e:bf:32:ad:f1:f5:57:4d:c5:65:c2:08:31:ce:ea:
3f:ee:29:f2:83:17:a1:9c:93:40:cb:79:bc:19:e7:
d6:73:2f:8a:f8:88:fa:f8:9c:a6:34:21:27:bf:2d:
1b:73:86:4b:ae:33:10:bb:4d:c9:a1:c5:22:b8:f7:
34:79:73:f3:27:a7:c3:53:08:c4:c0:c0:5a:e3:85:
87:47:90:37:1b:25:d8:e9:64:c3:aa:67:1a:c6:9d:
03:71:a4:82:4a:81:17:9e:ee:02:15:f8:e5:2b:69:
90:60:65:42:87:42:da:d9:1d:fa:52:3e:e5:fa:2e:
9e:b8:64:84:e1:45:77:fe:48:7b:7c:f3:71:6e:cc:
de:ee:81:04:79:66:a3:de:15:9e:36:e7:5a:ef:55:
f1:57:72:12:e2:d3:c5:14:8e:a6:48:08:3a:1a:2a:
45:0a:d8:78:d8:4e:22:25:f0:e1:7e:61:b9:02:b3:
30:5c:6f:9d:2a:da:24:3d:2b:d2:97:2f:8c:3c:fc:
03:c7:9f:48:a4:09:be:e3:52:4d:cf:4a:1b:8e:ac:
cb:b8:dd:02:14:50:ab:a2:e6:2e:eb:a4:03:27:58:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:67:C2:BA:94:C1:00:E8:18:D4:A3:07:91:F7:B0:66:D8:DA:CA
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/RnxnwrqUwQDoGNSjB5H3sGbY2so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.209.0-206.245.210.255
Signature Algorithm: sha256WithRSAEncryption
58:a2:d2:c6:b1:3f:e1:5d:d9:dc:a8:bb:3e:be:02:4e:fa:27:
7b:1c:b8:d5:10:3b:77:b6:0e:ae:7e:d6:57:b2:c3:93:ee:5f:
99:7d:3e:85:1b:9e:f8:02:3b:ae:d6:4b:b1:92:77:e0:0a:27:
fe:d3:fa:ea:16:3f:89:e2:11:23:49:e3:f0:60:b9:76:5d:64:
53:a8:ca:84:8b:95:70:be:cc:d2:df:f8:8b:af:5d:e7:5e:66:
3b:a6:e3:a1:6f:12:2d:5b:11:d2:a9:67:20:a6:0b:58:24:8b:
ac:10:ea:63:5d:71:dc:80:58:3e:09:8b:11:67:da:e3:37:b8:
cf:28:34:24:22:ae:64:33:42:03:a7:3c:33:16:4c:b8:22:61:
71:40:88:15:46:ad:08:8c:6f:ee:0f:96:f1:a0:5d:55:49:64:
f0:c2:ee:d5:bf:4f:96:31:75:49:79:d2:6b:28:03:27:e8:54:
73:5f:67:2e:9f:8a:f3:aa:db:33:a0:76:7b:d8:87:82:5a:0b:
17:11:c5:8e:eb:0c:0f:86:a5:72:f4:0c:c0:bb:07:5e:3e:77:
4c:72:68:ce:80:a0:66:70:a8:35:4e:da:d4:e8:e2:4c:d6:73:
cb:f2:8c:c7:d8:63:34:8b:df:58:26:93:fd:4b:5b:90:18:26:
17:65:bd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:50:56 2024 by rpki-client on console-fra.rpki-client.org