Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/rXUctUPnpjBD4HC2V17aKdpCVho.roa
File: rXUctUPnpjBD4HC2V17aKdpCVho.roa (raw, json)
Hash identifier: +Wbze0nJCCbNbNp0AVq7CiFXwdmmUMLIxTCn4x3kJ1c=
Subject key identifier: AD:75:1C:B5:43:E7:A6:30:43:E0:70:B6:57:5E:DA:29:DA:42:56:1A
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 018CC870297D09AC8A7F6CB3F6D2C47D710C
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/rXUctUPnpjBD4HC2V17aKdpCVho.roa
Signing time: Tue 02 Jan 2024 04:30:42 +0000
ROA not before: Tue 02 Jan 2024 04:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48076
IP address blocks: 217.199.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:29:7d:09:ac:8a:7f:6c:b3:f6:d2:c4:7d:71:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Jan 2 04:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad751cb543e7a63043e070b6575eda29da42561a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:88:d9:31:cd:49:31:fd:14:5a:91:62:a1:20:
a9:83:10:d9:b9:61:b1:14:bb:cc:1b:a4:53:e9:1b:
7b:e5:6f:80:dd:37:21:92:5b:bd:ea:ed:84:1b:f7:
89:57:00:87:9f:21:15:ca:3f:ef:0b:26:57:55:b9:
5c:cc:36:4b:47:52:3d:46:c7:08:96:e5:32:3f:d2:
44:66:66:b3:1d:1b:25:6d:61:8c:93:5e:f6:14:bd:
df:60:b6:e6:5d:ee:88:5e:39:b4:5e:76:ca:20:ba:
5e:67:cd:01:2c:de:b8:6f:75:b1:2f:d8:53:0e:b0:
b9:e7:e5:e6:f1:fc:6e:5d:a3:28:47:fa:4b:7f:4d:
5d:af:6c:97:08:87:60:be:98:be:03:5f:88:5d:d1:
8b:85:5d:7a:c1:87:98:d0:01:c0:bd:89:38:2b:25:
38:a8:13:9a:87:cc:19:0c:d2:fe:aa:70:86:03:0f:
36:6e:8b:43:c1:c5:b9:ce:6f:e4:c4:d2:16:09:b9:
97:1a:d7:e4:d0:fa:08:3e:0e:34:72:af:63:01:a2:
4a:2a:47:bb:2e:72:da:2d:a7:3b:95:4a:af:f4:78:
45:d9:d6:57:42:59:a1:ca:7e:9f:f1:58:24:b5:ef:
f4:ad:e5:a1:b0:22:fb:41:6a:9c:a3:02:38:8a:b6:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:75:1C:B5:43:E7:A6:30:43:E0:70:B6:57:5E:DA:29:DA:42:56:1A
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/rXUctUPnpjBD4HC2V17aKdpCVho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.199.211.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5f:3d:3b:8e:3b:53:d7:be:dd:8e:91:e0:bb:d6:bb:ea:93:
c2:57:b5:0f:9c:5e:e5:2a:ac:8f:7e:20:7b:c4:83:88:a4:6e:
2e:b4:37:df:36:78:6a:f5:c3:dd:ef:2c:9b:d7:30:f0:93:e5:
74:fc:aa:a3:3e:f4:fd:41:85:94:a3:f7:2a:28:0d:d3:e5:5c:
8d:ac:5f:cf:27:05:51:37:a5:5c:e7:53:7a:5a:9e:30:c5:62:
2b:9b:1f:d1:de:3c:78:d9:3f:7c:e9:8b:e8:d8:b5:cb:f3:ea:
3e:39:fa:db:a2:64:99:a5:59:5e:8f:bf:66:88:c4:8b:d0:c3:
b3:2d:58:f7:35:7e:ec:7d:90:fb:f7:8d:83:6e:0e:38:75:5b:
d2:d0:6a:6d:b8:b4:23:ea:62:2c:ff:ac:a7:e6:b7:52:7b:6d:
2d:89:05:c3:ad:cf:20:06:26:fb:f4:b7:e0:aa:4d:a8:f9:fa:
c9:41:85:1c:5d:21:37:19:fa:f8:7a:74:4a:79:47:61:da:3f:
36:9d:fc:c2:2c:4c:40:27:a6:77:53:3f:19:36:ae:cb:19:d9:
91:ef:c1:ec:f8:0b:32:e0:64:26:5c:29:63:02:23:ab:99:aa:
4e:fb:32:eb:1b:5e:9e:0b:b6:a2:e6:16:d7:8d:49:4a:2c:b7:
27:11:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:10:59 2024 by rpki-client on console-ams.rpki-client.org