Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/XF_u5fJ2JUF0k5zzUyYBSO3HUAY.roa
File: XF_u5fJ2JUF0k5zzUyYBSO3HUAY.roa (raw, json)
Hash identifier: gBnxVgwNRqo5OlVjtEOHUEtZppEmXz6HvK86de+BHPc=
Subject key identifier: 5C:5F:EE:E5:F2:76:25:41:74:93:9C:F3:53:26:01:48:ED:C7:50:06
Certificate issuer: /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial: 01933F860C84C5DB21B9BD5ECD16BFDB2CCC
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/XF_u5fJ2JUF0k5zzUyYBSO3HUAY.roa
Signing time: Mon 18 Nov 2024 13:46:09 +0000
ROA not before: Mon 18 Nov 2024 13:46:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209531
IP address blocks: 147.78.168.0/22 maxlen: 22
147.78.168.0/23 maxlen: 23
147.78.170.0/23 maxlen: 23
2a09:27c0::/29 maxlen: 29
2a09:27c0::/30 maxlen: 30
2a09:27c4::/30 maxlen: 30
2a14:5980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:86:0c:84:c5:db:21:b9:bd:5e:cd:16:bf:db:2c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Validity
Not Before: Nov 18 13:46:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c5feee5f276254174939cf353260148edc75006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:69:33:20:1d:62:56:e0:cc:98:cd:9b:55:
53:46:7c:76:f5:23:c4:6c:20:b6:e3:d1:44:51:0b:
83:75:c1:7d:38:7e:c4:93:d7:fd:f2:55:79:e1:17:
a9:f4:b3:4a:d0:86:9b:03:84:ee:66:9e:a7:c0:e2:
aa:8e:bd:d7:66:df:93:58:c0:a8:7f:ab:d4:95:79:
bb:20:98:17:c8:96:97:57:32:08:b1:69:c8:2a:3c:
19:c5:d3:78:ec:85:e8:de:d5:f0:ce:3f:22:22:6d:
69:ba:79:ca:70:6c:7d:0f:86:ea:85:5f:db:86:12:
cd:29:51:63:a6:a9:e6:aa:b1:dc:ea:17:75:a2:ed:
1e:3d:c1:41:3b:c6:f4:f6:98:a7:e2:e9:b7:ac:cd:
41:98:3d:06:0e:b5:31:14:b7:2d:71:21:8c:48:fd:
dd:e5:4a:64:10:30:48:14:96:53:3f:eb:38:01:07:
82:c1:53:d6:b4:27:69:08:53:7f:0f:ed:19:58:16:
bd:1a:9c:bf:25:06:a5:56:34:7b:d0:16:fe:fa:b0:
cf:74:ac:c9:1c:af:f5:9b:2b:24:45:da:41:ff:a3:
b0:58:a7:e2:48:61:59:7a:ed:63:a5:b6:c7:81:07:
63:a2:a5:5d:1f:d5:fd:c0:33:82:87:44:f9:22:43:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5F:EE:E5:F2:76:25:41:74:93:9C:F3:53:26:01:48:ED:C7:50:06
X509v3 Authority Key Identifier:
keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/XF_u5fJ2JUF0k5zzUyYBSO3HUAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.168.0/22
IPv6:
2a09:27c0::/29
2a14:5980::/29
Signature Algorithm: sha256WithRSAEncryption
50:63:de:5c:7a:98:b6:2b:be:28:80:29:53:4b:ba:ce:e5:04:
8c:64:40:f0:fb:c4:64:64:1b:7d:14:bf:50:6b:9f:fc:38:6b:
63:20:d9:e7:13:b8:ed:c0:d8:84:fd:cc:69:7a:db:59:7a:96:
d9:41:dc:48:54:2c:d4:f3:b3:e2:a1:30:38:17:c7:e6:eb:69:
96:f3:b1:f4:5d:a9:f8:db:56:c8:39:54:21:a3:75:10:a3:ef:
3c:3c:03:1c:d0:87:3a:ff:74:28:e4:0f:b1:9c:f2:4b:32:c7:
d0:5e:60:18:92:e4:01:ba:dc:d8:b9:53:2b:33:8f:fb:b6:a0:
9c:23:e1:92:3d:ad:ff:56:01:5b:a1:c9:25:67:a6:f3:14:c8:
c3:07:d2:9c:91:94:61:e3:c5:af:12:9e:09:be:05:1e:e8:42:
c7:1a:02:52:41:d4:39:b3:87:43:67:51:75:b4:5b:2b:11:49:
0e:54:d6:5c:cd:d0:25:28:ac:95:80:d5:e7:26:37:fa:0e:fa:
74:72:3f:32:6d:2b:1a:ed:e7:0f:cf:48:b6:05:ba:f8:8e:cb:
95:d1:2d:54:0f:0b:6e:d6:86:ae:a9:23:c7:b6:72:78:eb:16:
4b:8c:e0:e0:c5:fc:65:84:22:12:e9:ac:03:ea:b0:6b:57:2f:
74:c9:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:39 2024 by rpki-client on console-ams.rpki-client.org