Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/71j7-DdUGyJiroE2WUEstBNC1EU.roa
File: 71j7-DdUGyJiroE2WUEstBNC1EU.roa (raw, json)
Hash identifier: KY6SOm/7cUfg7AEM0g91/8Tq198cY0Aqx910YYVqvD0=
Subject key identifier: EF:58:FB:F8:37:54:1B:22:62:AE:81:36:59:41:2C:B4:13:42:D4:45
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 018CC8702A08D7528898B8505355AC654B6D
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/71j7-DdUGyJiroE2WUEstBNC1EU.roa
Signing time: Tue 02 Jan 2024 04:30:43 +0000
ROA not before: Tue 02 Jan 2024 04:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50889
IP address blocks: 193.246.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:2a:08:d7:52:88:98:b8:50:53:55:ac:65:4b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Jan 2 04:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef58fbf837541b2262ae813659412cb41342d445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ad:5a:cb:d9:86:d8:54:4e:2a:87:7c:50:c2:
47:f4:a4:c9:01:35:f7:cf:fc:77:aa:ac:6d:91:bd:
70:b7:b7:5b:8c:6a:f8:6a:7a:b0:05:02:94:de:b0:
22:54:0f:79:8c:85:f0:c3:dc:58:cc:0e:6b:cc:5a:
f0:55:b5:73:25:e3:15:a7:a8:65:20:62:97:2b:f7:
e2:cb:96:0a:dc:ba:e0:91:e0:2a:d2:61:67:22:19:
16:99:92:0c:b4:92:23:1d:92:00:8b:a8:0d:b2:19:
47:21:5e:d9:e2:03:ab:55:34:a0:42:1f:da:65:03:
3d:aa:f0:ed:7b:d4:aa:68:4e:db:87:36:69:5c:e7:
1f:4e:cb:4b:36:58:e7:8e:2f:1c:2e:06:03:9e:ac:
91:2f:1f:91:39:92:9a:38:e5:93:9a:28:18:ed:c6:
cf:b9:96:a4:52:5b:bc:9a:87:5a:f9:02:8e:f9:58:
d0:0c:ea:23:5e:4c:3c:88:cc:31:a0:7f:56:94:3c:
d1:46:43:19:5c:a7:36:fc:52:2e:2f:83:b4:04:94:
2e:42:8b:a8:94:26:a5:86:83:d0:77:16:c4:5a:f4:
af:24:4c:4a:ec:92:6a:93:2e:e3:32:0d:7e:91:5c:
b6:53:4a:90:b0:39:4d:54:e1:ed:e1:52:74:d5:41:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:58:FB:F8:37:54:1B:22:62:AE:81:36:59:41:2C:B4:13:42:D4:45
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/71j7-DdUGyJiroE2WUEstBNC1EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:cb:55:46:14:eb:b9:f0:79:22:9e:9c:92:1e:3f:a6:ec:b8:
21:39:e3:61:81:87:6e:ad:37:36:97:23:a5:4f:65:14:ab:56:
b5:78:d8:d0:b7:6d:ed:c6:a4:4d:62:34:e5:20:66:03:48:84:
5d:c5:3b:1f:b8:3a:91:33:38:10:e9:34:2d:62:2e:ec:20:a2:
43:b5:d3:16:60:39:bf:e9:88:75:15:e0:76:37:f7:76:d9:09:
3b:9a:86:8a:df:db:65:ec:c5:c5:60:9f:93:3d:7a:c8:af:69:
a7:d8:cb:e5:e2:da:5c:85:99:ba:bc:ad:74:cd:9d:c5:ac:8f:
dd:d2:35:df:51:c2:75:50:04:10:95:0c:44:15:80:15:76:35:
56:f5:aa:b1:5b:25:38:79:b9:09:5d:ee:72:3a:5a:4e:1a:00:
4e:76:9c:c3:cc:00:cb:bf:b6:0b:fa:b4:4a:0c:00:72:7a:cd:
b1:8c:3f:16:a1:4a:a3:ba:54:11:b8:c6:27:f5:0c:dd:80:7e:
6e:be:d5:d3:b8:fa:31:60:ee:69:a3:3b:fc:a5:54:5c:5f:f1:
35:e6:02:08:41:26:2b:65:1f:be:dc:16:e0:82:1d:44:9c:74:
e0:cc:7c:51:cd:0a:1b:e0:87:26:dd:36:8d:bd:e5:9c:4a:c3:
4f:fd:42:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 23:38:24 2024 by rpki-client on console-ams.rpki-client.org