Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/R6qnxzSqrJvnZVhRxgLg7xnUtxE.roa
File: R6qnxzSqrJvnZVhRxgLg7xnUtxE.roa (raw, json)
Hash identifier: w+NddXB34CEwht27VhrK+DWNXEaLnW8iKIoa/Ct5DdI=
Subject key identifier: 47:AA:A7:C7:34:AA:AC:9B:E7:65:58:51:C6:02:E0:EF:19:D4:B7:11
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 018CC7956D264A7248431A9C7357637BBA47
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/R6qnxzSqrJvnZVhRxgLg7xnUtxE.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 217.119.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6d:26:4a:72:48:43:1a:9c:73:57:63:7b:ba:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47aaa7c734aaac9be7655851c602e0ef19d4b711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9f:6f:56:20:9b:71:04:bd:22:03:0a:47:cd:
8a:01:87:65:af:b5:c3:1d:01:23:81:50:b0:df:d5:
f7:3f:be:d3:b3:6c:99:af:13:17:af:3b:c6:12:1f:
3d:81:be:87:59:1a:a0:f3:27:00:5d:76:fd:54:40:
f8:ef:65:9e:99:86:6f:f3:09:07:11:6a:5b:94:e1:
a0:24:0c:a1:e3:0d:67:7a:96:f3:96:8d:c1:81:62:
e7:97:e3:3f:8d:dd:49:07:37:0a:1e:a7:67:1c:8d:
7c:12:6d:36:a1:7f:0c:58:c6:c0:0e:0d:97:4e:a8:
2a:ce:3d:34:ec:aa:13:71:9c:a3:15:ae:dc:bb:0b:
61:71:3c:95:81:ac:a0:73:f6:f3:fc:c8:f6:46:85:
43:ef:3e:ab:50:4b:57:d7:f0:c1:23:c7:21:2e:92:
b2:df:ee:02:3c:91:51:8b:cc:c4:1c:c9:66:6c:2d:
83:b6:77:91:9b:d1:bb:b4:41:00:47:53:06:eb:c8:
d8:81:75:71:09:55:75:c2:bd:a8:8f:be:38:56:49:
a5:ad:d3:3b:e1:a1:f5:5b:79:85:7b:71:1a:fc:a8:
13:9d:ab:7f:6b:17:8f:0b:9c:a4:69:f5:17:09:73:
a7:b2:ef:43:26:a4:71:52:f9:72:7f:fd:7e:23:fc:
cd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AA:A7:C7:34:AA:AC:9B:E7:65:58:51:C6:02:E0:EF:19:D4:B7:11
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/R6qnxzSqrJvnZVhRxgLg7xnUtxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.131.0/24
Signature Algorithm: sha256WithRSAEncryption
35:62:84:df:f1:a6:3f:6c:50:df:cc:a9:68:f2:45:09:8d:6c:
16:a1:0f:6f:f3:11:2c:4f:79:4c:03:93:31:ad:ab:43:60:c8:
97:d8:74:eb:3e:d7:e3:a6:c7:63:61:f8:5d:81:50:95:f6:30:
b3:14:4e:7e:cd:e4:17:e6:61:7c:ce:e8:dc:d2:d1:1c:07:f8:
05:db:3c:7f:cb:d9:ab:80:51:32:b6:fa:ec:4d:00:3d:19:4d:
b9:4e:80:db:e4:cd:cd:c0:bc:a9:c7:96:e2:31:53:5c:54:86:
0d:0c:42:14:56:71:fe:fb:ff:2c:73:f7:cb:7b:07:c1:a5:bc:
93:74:39:97:db:ee:8d:01:05:88:80:82:0b:7b:35:02:a3:a7:
d7:9b:18:3f:92:0a:35:59:38:d5:20:0f:6e:9b:ff:a8:a3:ca:
37:7b:8a:b3:ae:23:e1:e0:0b:e5:3b:b4:87:da:6e:e2:cc:f7:
69:4d:1a:b6:22:2b:6f:5c:d5:f6:e3:e6:b1:cc:3b:a7:86:52:
4c:14:1d:72:1a:ab:c6:3b:cf:20:a4:40:a7:b9:53:7f:48:8d:
c1:c6:ce:8f:13:4c:08:09:aa:fa:cd:a5:40:34:99:eb:eb:d4:
f1:21:1b:b9:7f:00:b3:0b:d4:42:5d:c9:71:45:4d:0e:1d:d0:
2e:f8:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:46 2024 by rpki-client on console-fra.rpki-client.org