Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Rrn_rFrjeZyBhpDtpQElpxkVhV4.roa
File: Rrn_rFrjeZyBhpDtpQElpxkVhV4.roa (raw, json)
Hash identifier: RdbLJu4LkWYkL9r8j7igcIjoz3QSiaEJGmTFHPIdYso=
Subject key identifier: 46:B9:FF:AC:5A:E3:79:9C:81:86:90:ED:A5:01:25:A7:19:15:85:5E
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01909781A611287DD17C0571A4BBCABCAE42
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Rrn_rFrjeZyBhpDtpQElpxkVhV4.roa
Signing time: Tue 09 Jul 2024 12:39:34 +0000
ROA not before: Tue 09 Jul 2024 12:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 103.127.76.0/24 maxlen: 24
103.127.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:97:81:a6:11:28:7d:d1:7c:05:71:a4:bb:ca:bc:ae:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 9 12:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46b9ffac5ae3799c818690eda50125a71915855e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:bf:98:f5:9e:c1:3f:1e:c7:9d:c5:26:7e:
8f:17:da:2c:5a:ae:92:98:e0:e0:43:06:65:f7:6a:
99:3c:09:a1:bb:30:98:9b:f2:df:89:51:06:da:36:
96:57:05:62:9b:89:40:2e:76:9e:00:37:fe:83:9e:
bf:e8:27:6b:9a:88:aa:cb:5b:08:6d:c8:51:ac:17:
87:c1:f2:c4:23:71:5d:89:e3:48:b2:f1:9d:1d:f6:
bb:67:03:5d:89:bd:b5:06:eb:43:db:25:be:8d:76:
f0:86:8c:71:cc:b6:e1:68:c5:7e:91:24:59:f9:91:
2b:81:b9:4c:ad:34:d8:f4:a2:09:7f:98:22:b2:9c:
c4:e5:f0:53:f9:7e:b1:86:ce:76:5a:6e:99:60:9a:
a2:d5:56:63:3c:af:7f:cf:bf:09:79:11:d1:4f:0c:
e6:76:66:d6:49:8e:41:8b:39:1d:6d:ed:a9:77:5e:
d7:19:ea:3e:de:27:b3:c8:63:c2:aa:fe:b5:cc:8a:
3d:3d:58:de:21:c6:cc:2b:02:f0:37:b1:03:f8:26:
f7:e9:2d:dd:17:1b:8d:d5:87:0c:69:cc:fa:82:e6:
32:e9:17:ae:01:37:38:9a:1e:a2:56:ac:b6:5b:68:
5f:69:c6:e9:61:3c:03:5f:b9:60:30:37:b0:73:bb:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B9:FF:AC:5A:E3:79:9C:81:86:90:ED:A5:01:25:A7:19:15:85:5E
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Rrn_rFrjeZyBhpDtpQElpxkVhV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.127.76.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:4c:8a:34:92:63:c5:06:7f:4b:35:2a:0e:7d:6b:f3:2f:20:
75:68:c7:30:90:b1:d9:bc:3a:7b:44:9a:5a:bf:a2:a9:76:8d:
f1:a7:23:ae:39:13:c5:81:59:7c:b4:32:9d:b3:b2:2d:86:2b:
e2:a4:91:13:81:f8:4a:c6:9d:c3:e4:f6:c8:6e:25:97:d9:2a:
b4:a9:6a:af:73:91:7b:eb:c5:fe:d9:f9:c2:4a:52:66:b0:f2:
6e:95:89:b7:64:c4:5f:78:92:8d:3a:aa:6a:5d:23:14:27:cb:
cf:b2:23:ff:57:63:5b:b0:35:19:81:eb:ca:eb:82:9f:ff:1b:
24:c2:77:3f:6a:8c:39:c5:00:a0:3e:6c:ec:d3:31:5d:be:1e:
06:60:6e:f5:10:3f:fd:2c:04:ad:3e:03:f1:a1:98:8a:55:7d:
e4:0a:fb:11:74:ab:90:0a:fe:ee:47:d9:0d:4c:88:f7:68:f7:
ab:b1:4a:d2:b6:53:a3:f7:92:e7:e7:88:a0:e2:ca:c0:8f:fd:
a5:f0:de:61:09:24:8f:1a:e7:e0:71:c7:37:df:13:48:f8:cd:
51:a0:68:17:db:30:4d:b3:ea:f1:39:4b:a5:a6:c3:a3:91:62:
48:6f:8b:11:ab:c4:12:ae:b0:b4:e2:96:54:14:a3:6d:f0:23:
cc:94:90:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:41:58 2024 by rpki-client on console-ams.rpki-client.org