Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/XEdhPG7eMaZ8TkN7ky0L0QxDWhc.roa
File: XEdhPG7eMaZ8TkN7ky0L0QxDWhc.roa (raw, json)
Hash identifier: bo3uF/SrAlELZalxKukbR9usQRGLHATOCznA8y8OiK4=
Subject key identifier: 5C:47:61:3C:6E:DE:31:A6:7C:4E:43:7B:93:2D:0B:D1:0C:43:5A:17
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 018CC3B6F28400B97B966FDA80CE6848E1E0
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/XEdhPG7eMaZ8TkN7ky0L0QxDWhc.roa
Signing time: Mon 01 Jan 2024 06:29:55 +0000
ROA not before: Mon 01 Jan 2024 06:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196773
IP address blocks: 217.168.97.0/24 maxlen: 24
217.168.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f2:84:00:b9:7b:96:6f:da:80:ce:68:48:e1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Jan 1 06:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c47613c6ede31a67c4e437b932d0bd10c435a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:ff:6d:1b:81:fa:16:17:61:56:19:2d:bd:
b7:9c:ed:2f:84:1e:bf:fc:49:73:5e:a3:1e:56:f8:
d6:10:b2:5e:95:d7:12:ef:52:a0:1c:6c:73:aa:02:
e7:5c:d0:55:81:5f:7b:fd:86:bc:44:e9:b3:d7:61:
87:aa:34:09:87:fc:54:f1:2b:ae:3e:78:e3:16:74:
68:50:8f:a4:c0:32:96:1b:45:c3:fe:bc:da:bd:69:
42:e8:69:c9:ba:2b:57:2f:5d:2e:c2:17:df:8e:6d:
bc:15:7a:69:9f:12:0d:80:44:af:59:ec:bd:80:e2:
a1:d0:b0:2f:2c:ca:ea:64:57:96:f4:f5:04:4a:df:
9b:eb:a9:fa:3f:2f:8d:a1:26:25:10:71:f6:22:82:
99:e1:69:9c:ec:68:ab:5c:93:15:bf:ae:58:f8:37:
2d:a7:95:ec:11:d1:12:cf:a0:bc:1a:cc:f7:6d:e7:
0f:8f:a3:09:6a:54:02:bc:9b:29:76:61:fc:51:df:
8a:cd:f9:2e:50:77:61:97:6c:3d:82:45:2f:ee:dc:
72:5e:f8:93:83:5b:61:33:db:e6:c4:5d:6f:27:4c:
2d:2a:b3:90:a7:29:c4:2c:45:48:de:ab:30:0e:64:
56:9c:9c:bd:3f:11:e0:8e:1c:f5:c2:0f:2a:e1:b6:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:47:61:3C:6E:DE:31:A6:7C:4E:43:7B:93:2D:0B:D1:0C:43:5A:17
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/XEdhPG7eMaZ8TkN7ky0L0QxDWhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.168.96.0/23
Signature Algorithm: sha256WithRSAEncryption
19:0a:ef:3d:45:39:b9:5f:84:7b:a8:4c:c9:eb:79:22:13:a8:
5c:a9:35:5b:4b:b8:cc:24:aa:24:cd:86:68:1a:e2:7d:cb:d8:
12:b3:87:0c:50:f6:a2:a5:f8:fb:27:59:7d:24:00:44:8c:12:
bf:d0:60:25:a0:72:ff:bf:0d:b5:ea:b5:1f:9b:55:9e:cc:d5:
e8:bc:1b:5e:64:95:bc:90:6c:b9:d9:b4:40:e7:34:25:e4:16:
f9:e5:b8:36:08:80:14:9c:d0:a3:4b:e6:60:d6:a3:a3:a1:50:
1a:e0:45:54:d5:25:eb:85:69:81:eb:d5:76:ac:ab:2c:e8:fc:
10:0d:9a:fc:17:c4:b8:80:7f:a0:59:45:92:3e:a5:13:bf:80:
eb:0c:3b:c8:5f:b6:a9:39:3f:17:5e:a6:55:31:58:19:ad:d9:
1a:23:15:58:1c:4a:ba:11:16:43:4e:3a:4c:c8:19:b3:86:52:
d3:a0:ff:ce:08:a9:f7:87:08:ba:f9:91:ef:51:93:27:4f:e1:
88:02:eb:5d:b3:24:f7:33:e3:79:1c:3b:52:b3:50:c4:7f:f9:
77:9b:50:a4:9b:62:b4:33:e9:5c:97:2c:a3:9b:62:f4:89:5d:
61:5a:a4:4a:3a:bd:0e:50:57:dd:e3:df:1b:46:0d:8b:b2:a2:
f6:bd:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:27:21 2024 by rpki-client on console-fra.rpki-client.org