Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/xjl072d9T9n3g7BfJgCRK_IZvcs.roa
File: xjl072d9T9n3g7BfJgCRK_IZvcs.roa (raw, json)
Hash identifier: w5fxzE2X0sp4RAf6CHxkGFkYNMFZpOFwmh0TPqdcn6Y=
Subject key identifier: C6:39:74:EF:67:7D:4F:D9:F7:83:B0:5F:26:00:91:2B:F2:19:BD:CB
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 01931C1AAB1A90495768BA3B262506A1C290
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/xjl072d9T9n3g7BfJgCRK_IZvcs.roa
Signing time: Mon 11 Nov 2024 16:42:10 +0000
ROA not before: Mon 11 Nov 2024 16:42:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214390
IP address blocks: 45.112.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1c:1a:ab:1a:90:49:57:68:ba:3b:26:25:06:a1:c2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Nov 11 16:42:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c63974ef677d4fd9f783b05f2600912bf219bdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:45:2c:d3:7e:2f:ce:e1:6f:1d:fa:5b:20:a0:
25:d1:d0:5e:76:e3:33:e4:89:d2:65:93:a3:31:b6:
f9:52:5d:09:2c:b5:b0:20:26:e9:60:2d:8f:0f:39:
69:5c:42:0c:14:cf:8e:61:c2:8d:ef:c3:76:1e:f1:
e4:97:48:df:08:15:c7:0c:39:f7:22:be:fb:fe:48:
c5:c4:ec:a2:f3:c8:85:ec:ff:29:b2:d3:14:98:e8:
1b:af:50:fc:52:67:24:56:2f:bc:0f:ed:f8:69:0a:
6f:57:93:3e:fb:5d:1e:10:6d:a6:43:a4:18:c5:e0:
99:68:7b:f4:d4:f8:70:38:07:ad:19:54:21:03:3c:
15:3f:77:4e:a6:b1:44:27:e0:50:84:5a:48:80:dc:
a2:cd:8e:02:d1:ad:fd:05:42:53:f7:96:cb:10:03:
cc:9e:a3:3d:d2:1e:ae:9e:81:32:12:36:02:74:66:
f7:ea:00:1a:e5:9a:fc:48:eb:84:55:21:17:d7:a0:
76:c6:ab:fa:63:ca:27:0d:5e:b1:49:db:0e:36:76:
65:9c:80:f3:04:71:77:4b:48:20:85:6d:35:f5:a2:
48:f5:ed:e3:d8:32:d8:e4:22:8e:f1:d5:14:95:19:
14:8b:8c:18:cf:19:14:f4:f0:a4:02:e3:bb:e9:79:
fc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:39:74:EF:67:7D:4F:D9:F7:83:B0:5F:26:00:91:2B:F2:19:BD:CB
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/xjl072d9T9n3g7BfJgCRK_IZvcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.123.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:df:d8:0d:f1:60:89:c2:e3:a2:dd:2f:03:fb:b3:cb:40:7c:
f1:6b:4e:25:6a:6b:78:ef:15:34:f7:2c:8b:53:cb:a9:a1:75:
31:de:1b:71:a1:2c:4e:cc:ca:2a:ec:af:02:e1:bf:22:00:aa:
ba:d9:ba:1c:5a:cf:03:f1:c2:57:9a:fe:b7:03:4f:a4:95:db:
c2:5f:f8:20:2c:df:52:e4:87:18:69:40:52:2e:4e:0b:a8:54:
80:28:61:62:91:f8:7d:f9:5b:2b:21:ec:bf:98:55:2b:84:d0:
1a:75:22:b1:65:75:17:8a:f1:ab:63:ad:79:45:c1:9b:88:8e:
f4:ca:18:29:bb:42:97:e1:e0:a5:8e:bb:75:57:11:6e:76:73:
b5:81:f1:a4:1e:99:08:76:4b:ee:91:5f:f5:45:ca:63:88:d8:
6b:ac:88:41:39:f9:31:38:1a:15:40:cc:51:fd:aa:17:4c:c7:
07:92:3f:77:80:0a:87:86:a8:32:96:a1:77:ac:1f:13:05:11:
c1:12:3a:e6:4f:10:fc:df:5d:d5:71:fa:db:2a:b0:1e:04:ba:
21:c8:b5:1d:2e:78:bd:3d:a7:28:d3:10:1a:d9:64:ea:60:29:
75:af:02:86:16:5b:3c:54:f8:6b:35:2a:67:42:4e:8a:2e:6a:
08:6b:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:12:00 2024 by rpki-client on console-ams.rpki-client.org