Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/X-fB_A5F94_q-cCyqlL3HF9GOec.roa
File: X-fB_A5F94_q-cCyqlL3HF9GOec.roa (raw, json)
Hash identifier: 4mphb2QHAuz4HmvgEIyCLBIo815hCRFJP876HXCkRVQ=
Subject key identifier: 5F:E7:C1:FC:0E:45:F7:8F:EA:F9:C0:B2:AA:52:F7:1C:5F:46:39:E7
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56F04EA68840CB3BEB8E0A5FCF0F724
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/X-fB_A5F94_q-cCyqlL3HF9GOec.roa
Signing time: Mon 01 Jan 2024 14:30:36 +0000
ROA not before: Mon 01 Jan 2024 14:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197216
IP address blocks: 89.252.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:04:ea:68:84:0c:b3:be:b8:e0:a5:fc:f0:f7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fe7c1fc0e45f78feaf9c0b2aa52f71c5f4639e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:3f:36:d4:41:f6:33:aa:24:f4:95:8d:ef:
66:01:c9:20:32:2d:1b:f4:f4:ff:0a:54:21:da:5c:
f7:bd:5f:4b:2b:10:19:9f:5f:45:03:0b:ee:76:b2:
47:ae:b8:d0:59:3a:d3:4f:f2:a9:f1:88:4e:a8:66:
1e:92:b0:08:cc:2c:f1:99:be:23:96:15:1e:26:1a:
be:a0:2e:05:9c:3c:93:c2:36:6c:92:e5:03:2a:c9:
87:82:9d:b6:a6:ae:45:3e:ca:e3:77:e8:ee:ba:8f:
d1:78:1f:f3:dd:dc:7b:dd:ff:37:45:43:3c:28:0a:
47:38:69:25:90:37:dc:55:b6:4a:57:3d:db:71:ca:
f0:cd:4b:10:18:1d:f2:6d:15:27:29:d6:8b:fc:f6:
d2:00:62:d0:c1:70:a2:69:8c:63:90:89:e8:f3:d2:
6c:42:2e:c5:25:e2:0a:02:2a:09:a4:3f:20:ee:f1:
3a:47:ce:29:f5:a8:29:c5:75:b2:18:bf:f4:dd:ae:
c9:30:3c:68:d5:03:44:f1:74:d6:b3:9d:9e:26:09:
e6:26:bb:d0:6e:a0:21:29:b5:f8:80:e0:c9:e0:56:
1a:3e:9a:a7:88:24:3e:46:19:ae:63:40:86:d7:3e:
b8:51:55:24:bc:4f:74:80:24:3f:dc:3f:2d:4a:e5:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E7:C1:FC:0E:45:F7:8F:EA:F9:C0:B2:AA:52:F7:1C:5F:46:39:E7
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/X-fB_A5F94_q-cCyqlL3HF9GOec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b4:60:16:1d:57:68:87:85:99:82:ba:87:9c:a0:8c:73:41:
36:2f:b3:59:6d:51:9a:90:2d:06:97:f9:58:d4:cf:af:c6:e0:
0a:d9:fe:38:79:91:97:b3:ef:9b:0b:a3:2d:21:35:79:97:94:
db:a0:fd:0b:e9:5a:28:e7:17:d4:07:44:e0:14:2c:4f:91:4d:
a0:6c:29:52:56:b1:ab:77:66:8e:80:bf:89:43:23:77:bd:53:
7c:ad:5d:87:d0:5f:02:00:8d:ac:2b:71:c0:6b:d9:0b:a6:b0:
dd:52:25:52:26:25:16:81:fb:76:ef:4b:78:e4:bd:e7:44:59:
a2:62:9c:39:b4:ef:a4:9f:2c:1e:1c:18:9a:d4:9d:c9:59:21:
d4:31:35:85:f8:a8:62:33:f0:15:52:65:31:30:37:3f:38:a6:
b7:da:73:01:0e:6e:5a:9e:fe:4c:0c:ac:c5:b0:ef:1e:05:bd:
d7:2f:cb:81:aa:48:fe:cb:5f:35:2a:4e:42:6a:f8:25:0e:cf:
ba:d4:e9:96:42:7b:bb:0b:50:d5:e4:48:26:57:e5:8d:69:82:
af:55:bd:41:ea:53:6a:f9:a4:25:68:03:d8:42:30:1a:cb:e4:
84:04:b8:f5:42:db:e8:94:34:40:45:83:d9:45:ef:a7:d2:f7:
15:4b:af:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:00:30 2024 by rpki-client on console-fra.rpki-client.org