Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/sV2hubeATJEjxo_DGRlJdCeacvQ.roa
File: sV2hubeATJEjxo_DGRlJdCeacvQ.roa (raw, json)
Hash identifier: InjYJNKnUMDnFLgzDGFfOOclgOX7yz7nNF2QElCO2DI=
Subject key identifier: B1:5D:A1:B9:B7:80:4C:91:23:C6:8F:C3:19:19:49:74:27:9A:72:F4
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 018CC3B7185659DFBBBE90D736721776E876
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/sV2hubeATJEjxo_DGRlJdCeacvQ.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 217.64.209.0/24 maxlen: 24
217.64.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:18:56:59:df:bb:be:90:d7:36:72:17:76:e8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b15da1b9b7804c9123c68fc319194974279a72f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:c9:ae:31:ee:ac:53:d0:4d:98:89:0e:1e:
8b:a8:81:52:ff:3d:61:7a:02:10:af:38:6c:43:8d:
fe:72:10:84:31:70:2f:b9:07:fe:84:1e:54:87:9e:
24:8c:96:45:1e:2d:ea:af:79:e1:77:a3:cd:7e:9b:
2e:39:cc:d8:c5:fe:b9:71:34:08:2b:75:c9:6b:c8:
b0:81:50:5d:23:1e:78:21:c3:a1:85:f2:a1:9a:ed:
58:fc:19:40:38:d8:2e:15:16:ea:85:ca:67:79:8f:
80:a8:dc:c0:61:05:05:9d:5f:0b:69:ea:30:5f:4a:
6f:8b:ed:de:91:0d:5d:3f:f2:8e:3a:6d:04:3d:8d:
da:98:f1:ec:c4:f6:55:f5:2f:28:11:1c:3b:ad:b5:
cc:2b:b8:a7:48:fb:a9:37:b5:dd:3b:ef:57:b1:c6:
3c:30:0b:0f:e8:21:2e:d1:4c:b6:b9:43:46:8b:a1:
f6:0d:ce:eb:bb:c2:93:a4:c8:05:28:8a:9d:53:12:
a9:b9:63:63:c4:97:61:13:85:a5:03:84:80:76:2f:
3b:7d:79:23:39:b6:dc:43:a5:3f:86:b4:bc:54:22:
4e:77:7c:fd:71:34:e5:71:a2:2e:2e:af:c3:14:1b:
7c:1f:8f:3f:e8:37:10:f6:47:fc:b7:09:d6:69:8d:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5D:A1:B9:B7:80:4C:91:23:C6:8F:C3:19:19:49:74:27:9A:72:F4
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/sV2hubeATJEjxo_DGRlJdCeacvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.64.208.0/23
Signature Algorithm: sha256WithRSAEncryption
49:84:95:48:ee:d6:c7:1e:a8:09:22:8e:e0:17:a8:03:70:71:
e9:a5:b2:43:df:69:8f:b4:01:57:73:5c:a4:02:24:0d:ed:05:
cd:3d:ee:aa:df:78:ba:af:b9:05:77:08:1a:57:c7:2c:88:46:
ed:f5:2a:3f:d0:03:f9:f9:d5:da:ee:3d:0c:0b:9a:13:4c:d2:
48:cc:86:20:3a:a6:05:b4:3f:2e:62:b6:ae:76:ba:92:9d:e8:
83:4c:b8:18:02:3a:cb:cf:78:d2:90:e2:54:db:20:65:53:a1:
2a:8e:33:70:1f:42:ff:80:14:1c:9f:ca:6b:8e:f1:b1:7c:00:
54:a0:71:b6:53:5a:3a:cc:d7:1e:d5:61:ab:d2:db:f5:1e:d1:
20:51:c1:d2:81:6e:f0:bc:95:be:47:44:5f:2a:c9:a5:57:3c:
b5:4d:c7:63:a7:e3:b3:50:62:8a:ed:88:e5:1f:75:7a:58:49:
77:2c:27:ae:b2:91:54:fe:df:1c:14:4b:3e:9e:58:c8:30:b2:
16:cd:c4:1b:e1:f3:84:0d:68:6a:e1:5e:bb:48:80:e4:16:fe:
8b:20:9f:d0:a0:b6:32:98:17:8c:4d:b7:33:62:5a:27:bf:e9:
e3:9c:29:c1:37:35:9f:2f:53:c6:4a:49:e4:9a:ec:cd:11:5b:
b3:08:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:10:38 2024 by rpki-client on console-fra.rpki-client.org