Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/xMD72CiLEDXu5L6vxsSoUS_DTQc.roa
File: xMD72CiLEDXu5L6vxsSoUS_DTQc.roa (raw, json)
Hash identifier: veCqsTJgISYwX/71zCvarMPUh3yEsXa/ktFWVRXhw1w=
Subject key identifier: C4:C0:FB:D8:28:8B:10:35:EE:E4:BE:AF:C6:C4:A8:51:2F:C3:4D:07
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 018E84BAE711B9087E2607BE66989C40AFCB
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/xMD72CiLEDXu5L6vxsSoUS_DTQc.roa
Signing time: Thu 28 Mar 2024 11:03:45 +0000
ROA not before: Thu 28 Mar 2024 11:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216129
IP address blocks: 107.161.154.0/24 maxlen: 24
199.83.103.0/24 maxlen: 24
202.181.188.0/24 maxlen: 24
2a13:d200::/32 maxlen: 32
2a13:d200:6::/48 maxlen: 48
2a13:d200:7::/48 maxlen: 48
2a13:d200:8::/48 maxlen: 48
2a13:d200:9::/48 maxlen: 48
2a13:d200:10::/48 maxlen: 48
2a13:d200:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 23:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:ba:e7:11:b9:08:7e:26:07:be:66:98:9c:40:af:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Mar 28 11:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4c0fbd8288b1035eee4beafc6c4a8512fc34d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:19:ad:80:a4:42:0d:19:58:76:0d:f8:24:3b:
9d:0c:0d:88:fe:23:bd:53:da:5d:f1:ac:59:35:59:
28:c9:ea:e4:b0:1c:9b:dc:6c:c3:22:fd:e1:3f:6e:
73:c0:b2:54:20:1f:28:66:b1:9e:36:78:e6:79:65:
8d:76:66:96:b0:46:72:da:31:08:30:86:7f:31:7e:
b4:8e:89:67:50:ce:68:27:e5:b3:3a:a0:ba:61:6d:
91:cd:75:d2:61:64:ab:5a:f8:29:c4:2a:7e:06:ed:
6d:17:a9:f4:b4:f3:e8:68:b9:2e:00:24:77:2b:8b:
0d:bb:e8:89:a5:59:dc:72:7c:58:02:7f:83:fd:94:
cd:a4:7f:18:1a:2d:99:66:45:59:93:8a:8c:cf:df:
50:4a:5b:58:9f:1a:c2:c3:35:79:69:71:e5:a0:f2:
83:ec:6e:a2:32:95:91:28:0a:3b:7a:26:47:f4:e8:
70:ce:38:26:3f:a6:7e:14:e0:4b:38:4a:0b:63:3d:
b3:e0:c5:b1:e7:2e:fc:fe:b2:6a:c4:0a:d7:5c:9d:
ec:25:bc:5f:53:3a:53:6c:c3:8a:37:16:de:8f:3c:
fa:13:88:34:52:d0:4f:ca:d8:4b:62:f4:ce:2c:72:
9b:c2:03:3e:2d:6e:f0:a0:1b:84:d0:f6:f6:b9:f1:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C0:FB:D8:28:8B:10:35:EE:E4:BE:AF:C6:C4:A8:51:2F:C3:4D:07
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/xMD72CiLEDXu5L6vxsSoUS_DTQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.154.0/24
199.83.103.0/24
202.181.188.0/24
IPv6:
2a13:d200::/32
Signature Algorithm: sha256WithRSAEncryption
85:b1:c4:67:79:d4:89:3e:27:7d:d3:91:42:11:f5:cb:eb:9d:
d1:f8:fb:9c:2a:12:f9:36:6d:ca:90:ec:0c:ce:8d:83:e4:83:
bc:a6:61:6b:e8:66:11:11:35:a1:18:0a:13:7c:f2:8b:48:24:
35:22:16:60:63:b2:51:66:81:0a:55:37:27:88:10:de:ae:7e:
6a:b2:22:16:32:3b:b9:a0:5a:60:b5:dd:5e:84:1a:46:d0:51:
a8:80:0f:79:a6:b9:f1:0a:3b:1a:2f:ef:fc:51:12:33:47:df:
72:ee:36:ad:f7:eb:ae:5b:ec:9c:ce:6d:82:60:39:d1:10:ab:
66:24:97:3a:5c:64:2a:7f:51:36:b3:8b:ff:5c:e5:45:6a:46:
02:5c:44:62:f8:76:0d:a5:cf:14:80:aa:81:33:74:00:a9:0e:
94:da:12:f0:0a:f7:7d:5e:ef:0c:ef:35:bc:85:af:5d:10:c1:
62:5b:f3:17:9c:9f:ce:d6:99:e9:ba:44:2c:e3:09:1c:2a:17:
78:1f:99:f9:77:bb:f0:e2:86:11:5f:3a:6d:85:ed:c6:53:13:
15:87:4e:41:c1:04:90:3d:d6:69:90:8f:15:16:9f:21:3e:cd:
ba:06:22:50:e7:4c:2d:33:31:ae:b0:db:2f:91:99:1c:88:d2:
08:00:96:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:59:00 2024 by rpki-client on console-fra.rpki-client.org