Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/aH2wXa57pNMxu0vSAzEAdH2GLCU.roa
File: aH2wXa57pNMxu0vSAzEAdH2GLCU.roa (raw, json)
Hash identifier: iLTh6H/fg7jKkVITNzGwR/DsAhzxYJal5UdIDzBWR6g=
Subject key identifier: 68:7D:B0:5D:AE:7B:A4:D3:31:BB:4B:D2:03:31:00:74:7D:86:2C:25
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 018D9CE90D9C7A2E432B3A9E113F75F38A90
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/aH2wXa57pNMxu0vSAzEAdH2GLCU.roa
Signing time: Mon 12 Feb 2024 10:42:15 +0000
ROA not before: Mon 12 Feb 2024 10:42:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 217.147.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:e9:0d:9c:7a:2e:43:2b:3a:9e:11:3f:75:f3:8a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Feb 12 10:42:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=687db05dae7ba4d331bb4bd2033100747d862c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:93:40:f4:15:9e:d2:08:06:4d:f9:f3:6c:
f3:63:41:02:6c:b9:57:51:25:8c:ef:17:f9:a1:a7:
91:80:8f:dd:f8:e5:70:57:09:5b:9e:73:2f:76:07:
fa:3f:a0:a1:4e:47:1c:67:ec:31:b3:b4:86:1c:af:
e4:9b:b6:cd:c4:84:43:f8:57:72:6d:0f:bd:b3:31:
4a:4b:eb:25:d6:10:73:7d:aa:e7:ec:08:ec:3c:ab:
7e:ae:5c:67:62:00:02:f7:aa:f2:7c:dd:03:69:52:
59:4b:ec:f6:99:e9:f9:c9:72:ec:cb:10:d6:ce:ad:
8d:30:7f:46:c7:67:e6:4f:3e:ce:ce:44:49:7d:de:
7b:15:5c:09:d8:e9:0c:8c:c1:73:01:db:c9:cc:c6:
33:5c:6a:f0:5f:4a:11:4b:a2:d5:89:c9:91:4d:ce:
0f:17:5a:33:33:f5:62:c8:05:bf:ca:e8:44:8e:33:
00:9f:73:5a:47:a9:b8:f0:43:4c:98:5b:b0:e8:ca:
95:56:43:78:bf:22:b9:7e:4d:a5:5c:3f:e1:f7:15:
93:c8:37:1f:f6:a3:ec:b9:3a:66:60:44:1a:c9:63:
49:b1:50:f2:21:18:ba:a1:61:dc:14:86:14:ac:76:
4b:9b:32:6d:1b:70:e5:3f:f8:25:db:83:6b:06:a2:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7D:B0:5D:AE:7B:A4:D3:31:BB:4B:D2:03:31:00:74:7D:86:2C:25
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/aH2wXa57pNMxu0vSAzEAdH2GLCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c6:6f:c3:62:82:af:90:e5:e4:c0:97:3c:1a:1a:d9:ee:0f:
79:38:58:fb:42:f0:d1:39:b9:3d:62:7d:33:92:6c:01:e1:74:
6b:ba:14:60:e2:86:4f:ea:ee:d1:d3:f8:50:75:34:53:12:7a:
3d:98:19:24:25:ca:74:e9:5c:ab:2b:fc:6b:25:2d:d8:56:b7:
8a:a3:ff:ab:fe:20:40:54:52:41:88:95:e7:51:b4:9e:06:8b:
7f:9d:11:05:f2:f8:7f:57:e4:61:13:8f:4f:cd:6c:41:d0:b7:
ca:1e:28:0b:93:08:f4:5f:60:c8:66:b8:1f:fa:e3:cd:77:9e:
01:08:e6:cf:86:7b:c3:5a:4a:e3:b0:7b:c0:28:75:b5:d0:72:
2a:c0:ee:52:e1:c1:70:6c:a5:95:6a:2a:f9:17:12:9f:15:27:
0d:22:c6:29:c4:28:6c:43:e9:8d:d0:71:94:e4:43:ff:58:15:
fc:e1:1e:6e:e7:d3:99:59:7c:37:5d:ab:9d:fb:70:2d:bb:51:
79:3f:42:5c:ca:d8:84:8c:95:26:94:d0:02:5a:be:c9:1c:2f:
ba:87:e9:84:04:c2:23:c6:c3:93:31:41:18:3f:8e:af:b4:c0:
7d:f8:5a:d4:f8:99:da:48:04:da:fa:95:4a:65:b9:3c:ad:e3:
98:b5:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:07:32 2024 by rpki-client on console-fra.rpki-client.org