Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/XgidnO0qN3GOwYt8qwKyVyv8kcI.roa
File: XgidnO0qN3GOwYt8qwKyVyv8kcI.roa (raw, json)
Hash identifier: daWdLlgE2eETtQWyROECi3JuUowV7BrE1VEn9+vuuCw=
Subject key identifier: 5E:08:9D:9C:ED:2A:37:71:8E:C1:8B:7C:AB:02:B2:57:2B:FC:91:C2
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 0190133BF3AB2DC7657731BA8BE47C77F637
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/XgidnO0qN3GOwYt8qwKyVyv8kcI.roa
Signing time: Thu 13 Jun 2024 20:13:34 +0000
ROA not before: Thu 13 Jun 2024 20:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 192.109.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:13:3b:f3:ab:2d:c7:65:77:31:ba:8b:e4:7c:77:f6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Jun 13 20:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e089d9ced2a37718ec18b7cab02b2572bfc91c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:b5:7d:15:4d:94:8c:f3:e0:c1:17:b3:ac:
56:1f:70:47:2d:56:6e:60:05:b5:07:21:7b:08:78:
a7:9d:d3:b1:6f:02:3c:80:24:dd:e9:9c:ce:9f:9a:
f6:99:a0:40:d8:59:9f:91:5e:bd:b1:a8:d5:b6:2d:
83:6e:9f:0c:ee:31:35:df:25:de:85:b6:5d:af:a9:
6b:c8:06:c0:fa:26:a2:c0:e1:81:b3:8d:8a:e5:55:
b7:97:59:0c:d7:cd:27:c8:0f:01:f4:9c:1d:56:54:
07:dd:39:d3:52:9b:ec:97:62:1b:50:58:68:89:d2:
28:c2:2d:e6:70:3e:4a:4c:79:87:31:12:f8:6d:c6:
c4:27:d4:35:b0:10:f6:39:38:ae:7c:aa:5a:78:0f:
fa:7e:20:f2:b8:ba:87:aa:51:73:51:48:c3:3b:f7:
b9:ae:dc:2e:bb:9d:61:a2:ab:34:fd:1a:7a:31:48:
e0:2f:86:32:6c:9c:05:c1:e6:8a:4e:fa:0d:7f:19:
1d:c4:b4:d1:7d:9b:8a:8c:67:fc:fd:34:4e:c9:c8:
0d:7f:77:e3:ef:7b:6e:77:81:8c:e4:02:68:61:de:
45:de:1f:14:66:91:4d:67:ce:df:79:9a:c4:18:f0:
4e:1d:a0:24:11:2a:23:2e:cf:7f:27:f9:b0:dc:69:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:08:9D:9C:ED:2A:37:71:8E:C1:8B:7C:AB:02:B2:57:2B:FC:91:C2
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/XgidnO0qN3GOwYt8qwKyVyv8kcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
49:76:73:7f:f6:0e:21:df:3c:79:45:59:54:dc:db:d2:70:80:
30:b7:d8:4b:c7:2d:be:d7:6d:dc:c6:d7:b9:9c:77:db:cd:c8:
c3:c2:9c:7f:8c:e5:c8:2c:59:76:ff:66:f9:8f:9c:bc:0e:eb:
43:17:3b:cb:3e:ec:77:c5:40:c6:5d:f8:de:18:1e:37:66:dd:
27:e2:85:69:44:b1:f9:96:61:d0:8c:78:02:71:7e:38:24:f9:
20:21:45:7d:a3:d6:57:ab:1f:82:1a:bd:ef:54:6e:8b:3f:11:
a5:a4:35:b2:75:5d:01:ce:78:1b:6a:62:28:2d:6b:0c:2f:32:
2f:89:8c:9d:c2:70:85:ca:18:a5:c7:3b:2c:46:7f:95:01:be:
fd:5d:cf:e2:d7:b6:76:6b:f2:65:33:a1:4a:8b:7c:f0:f8:23:
8a:07:cd:08:6a:ec:65:a0:c7:6d:ec:12:3a:50:d4:c8:c8:28:
ec:e8:db:ae:58:64:64:ae:25:f2:a5:ee:dd:01:14:56:78:c1:
96:b3:a6:73:21:fc:50:42:0f:52:65:40:fd:ff:8f:11:34:7f:
57:a1:cc:f2:3f:6d:06:f4:3b:e7:2b:4b:8a:78:9c:87:5d:98:
df:57:e4:f6:8e:da:8e:8a:8a:5b:9f:d8:ec:dd:0a:b7:91:54:
e6:01:67:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:34 2024 by rpki-client on console-fra.rpki-client.org