Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/0uZ5qXbEEXnOdIQ_xsYeifDBm7I.roa
File: 0uZ5qXbEEXnOdIQ_xsYeifDBm7I.roa (raw, json)
Hash identifier: 7so/1+JowmWVLlri/5vQOywEoGzigxU3ic1JAc1k9JU=
Subject key identifier: D2:E6:79:A9:76:C4:11:79:CE:74:84:3F:C6:C6:1E:89:F0:C1:9B:B2
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 018CC4254ACAE2ED70E754F6F993F4C88052
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/0uZ5qXbEEXnOdIQ_xsYeifDBm7I.roa
Signing time: Mon 01 Jan 2024 08:30:27 +0000
ROA not before: Mon 01 Jan 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197091
IP address blocks: 217.11.136.0/22 maxlen: 22
217.11.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4a:ca:e2:ed:70:e7:54:f6:f9:93:f4:c8:80:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2e679a976c41179ce74843fc6c61e89f0c19bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:f3:7a:e8:33:60:8d:26:b0:a1:c2:c7:9e:
73:5b:e4:27:fb:51:82:db:33:28:b2:2e:3c:ed:31:
f6:a6:03:da:c6:ba:90:01:5e:88:53:29:ae:84:e0:
1f:7b:54:ef:1b:e4:e9:d1:d0:2d:ce:04:2f:45:b0:
6b:87:b4:c6:09:c4:fb:5a:0b:71:59:e7:19:53:1e:
d5:8d:bd:11:25:67:41:0c:e8:e6:60:a0:60:07:99:
21:b8:9d:40:52:2d:06:be:f0:0c:7e:e3:d1:a0:30:
6b:1c:e3:c3:5b:a9:e7:d8:0c:65:31:fb:cd:e1:94:
54:cb:ae:74:39:ba:34:77:b5:61:10:8b:7c:8b:cc:
15:61:e4:01:a6:2a:fb:68:7e:de:8e:0c:df:22:55:
28:20:1b:91:26:d8:12:e5:e4:9f:2b:15:56:b6:90:
2e:9f:e5:95:01:29:ea:f7:25:f0:7a:0b:ab:68:f8:
c5:7b:cc:fb:61:d0:a0:d2:cf:68:4a:93:1f:05:e2:
d7:b4:e6:6e:ec:91:6a:1d:30:f5:61:0c:9f:bc:fc:
08:ec:80:15:05:f5:f9:c2:8e:d3:b3:f4:7e:78:d7:
48:75:da:59:bf:e0:6e:ac:e3:51:64:f4:a5:33:a6:
15:8c:a6:c3:df:b7:c6:27:98:4a:9c:51:2f:e7:3f:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E6:79:A9:76:C4:11:79:CE:74:84:3F:C6:C6:1E:89:F0:C1:9B:B2
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/0uZ5qXbEEXnOdIQ_xsYeifDBm7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.11.136.0/22
Signature Algorithm: sha256WithRSAEncryption
54:b1:d0:87:05:ce:00:67:cf:7b:ba:57:53:6c:22:5a:0b:ea:
6a:9e:0b:8f:52:56:88:45:b5:55:15:5e:04:6c:04:ed:06:93:
ad:89:0e:e3:6b:a0:bd:27:78:52:a0:36:a2:88:6a:99:6a:07:
99:94:4d:25:31:f1:18:ae:b5:51:5d:a8:60:f0:a3:c4:ad:a0:
f8:6e:d0:c6:c9:b4:27:b6:c8:54:05:c6:9a:b4:1b:a2:1c:ea:
b7:6b:7b:ed:56:b3:a4:ea:bc:a0:1d:d8:8b:1a:27:ae:7a:af:
65:f8:9d:b8:2d:c0:43:3d:82:ec:b9:ea:92:87:62:6c:10:9f:
72:f9:73:1e:66:f7:f0:90:9a:c2:8c:f1:16:0d:0f:b9:bd:7e:
e1:d6:f9:45:56:d8:72:69:f3:88:80:36:dc:44:0d:e4:40:cc:
d7:b1:6f:55:f8:d9:28:55:a3:3f:1f:05:9a:0a:55:96:b8:ac:
17:1f:e7:cb:e9:59:ba:7d:32:0d:5f:92:4f:77:eb:51:55:c2:
c8:0e:a3:31:aa:9d:f1:e3:83:50:2f:00:98:cc:aa:42:5b:9b:
bf:db:6a:1f:c8:1c:f1:8f:d8:fd:8d:0a:b2:47:35:30:04:ba:
ff:52:05:b5:00:f2:04:01:30:f1:dc:6b:9a:fd:90:b7:a4:4d:
30:db:8c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:20:11 2024 by rpki-client on console-ams.rpki-client.org