Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/o9huJ3LylhXNtSCte0p9O9JU68Q.roa
File: o9huJ3LylhXNtSCte0p9O9JU68Q.roa (raw, json)
Hash identifier: FIHXhfRRIiKWfrjNim/0lH48cwRl5t6Q7zWIjy69MUs=
Subject key identifier: A3:D8:6E:27:72:F2:96:15:CD:B5:20:AD:7B:4A:7D:3B:D2:54:EB:C4
Certificate issuer: /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial: 018D7E3D7E0D511C1C8E398EA32C7F24719E
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/o9huJ3LylhXNtSCte0p9O9JU68Q.roa
Signing time: Tue 06 Feb 2024 11:46:15 +0000
ROA not before: Tue 06 Feb 2024 11:46:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198256
IP address blocks: 217.194.128.0/23 maxlen: 23
217.194.128.0/24 maxlen: 24
217.194.129.0/24 maxlen: 24
217.194.158.0/23 maxlen: 23
217.194.158.0/24 maxlen: 24
217.194.159.0/24 maxlen: 24
2a14:6f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:3d:7e:0d:51:1c:1c:8e:39:8e:a3:2c:7f:24:71:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Validity
Not Before: Feb 6 11:46:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3d86e2772f29615cdb520ad7b4a7d3bd254ebc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0f:00:71:b8:82:ea:9e:61:b8:9a:2f:6e:ad:
3d:19:f3:fa:76:ef:a3:58:13:64:28:6c:e7:53:68:
de:44:48:09:c4:61:b5:b5:11:9b:32:2f:9a:62:a0:
ea:57:ed:73:ce:14:90:eb:e7:c6:74:8e:81:12:8d:
03:74:73:7b:c9:a5:3d:5f:f7:5d:5f:67:2e:a3:d6:
0c:a6:a8:c0:13:c7:50:d3:c7:ef:9b:1c:20:ee:6b:
34:ef:37:6e:59:58:da:b7:ba:9a:97:8c:c7:62:1d:
c5:54:94:1c:83:ac:c4:0c:4f:18:06:64:a5:82:1f:
bc:1f:30:20:c7:e1:4a:0d:77:e8:78:62:0d:41:a9:
a7:4b:b4:34:94:f0:e6:7c:90:84:d9:06:0d:be:bd:
09:37:4d:ae:17:55:fa:33:31:9d:48:bb:69:c6:cc:
8c:d0:86:ac:25:d8:82:4f:a3:6d:f0:4b:de:fc:b4:
7a:99:15:c1:f8:c4:6e:b6:a6:1b:51:8e:76:6b:b0:
4b:c9:21:5b:6a:d9:a2:1f:8d:3b:89:da:be:5a:24:
06:c0:ba:56:45:54:7b:6a:26:c1:cb:65:b3:c9:bb:
41:37:57:d7:5d:d7:76:04:1f:51:a1:3a:ad:e5:99:
38:46:c2:73:1a:dc:47:2f:1f:4b:e3:03:6a:59:2d:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D8:6E:27:72:F2:96:15:CD:B5:20:AD:7B:4A:7D:3B:D2:54:EB:C4
X509v3 Authority Key Identifier:
keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/o9huJ3LylhXNtSCte0p9O9JU68Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.128.0/23
217.194.158.0/23
IPv6:
2a14:6f80::/29
Signature Algorithm: sha256WithRSAEncryption
9b:11:e0:03:43:fe:a2:55:ba:02:1e:65:98:91:82:05:10:2e:
a3:1a:16:74:95:4a:ed:b1:30:42:7b:38:88:26:63:7f:a3:14:
2e:60:8f:bb:d5:c3:a6:08:0b:db:7b:99:91:64:f8:6f:e4:5a:
29:22:fa:b5:a3:17:51:dc:5c:df:da:c1:44:69:47:76:2f:05:
b9:41:2e:6a:d7:0c:f9:78:f4:d4:de:04:1a:71:cb:de:dc:77:
1f:64:11:20:68:09:40:72:d1:0d:74:e8:73:ce:ae:76:b0:16:
98:23:40:5c:e5:70:91:98:7b:ec:11:1f:60:0c:12:28:6e:2f:
80:de:b4:92:90:d2:8b:aa:f2:a6:af:c5:51:ca:32:d3:6e:66:
a2:4f:71:b8:e6:af:85:d4:8e:78:eb:69:34:bb:8d:a9:f9:27:
49:ed:25:9e:99:ef:24:81:7c:64:79:09:1c:ce:de:c7:e1:dc:
6d:db:e2:7c:9f:bd:e8:97:14:93:58:7f:44:ef:19:2b:6f:91:
bb:36:d3:7a:bd:f9:82:8b:30:20:b5:85:b0:c0:bb:da:f4:6c:
34:67:16:72:db:d7:42:dc:48:64:0f:57:e3:ec:3a:5f:96:b0:
20:8d:3a:e7:78:ce:3d:57:ea:4e:fa:51:2e:03:be:97:00:f1:
19:e5:16:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:29:18 2024 by rpki-client on console-fra.rpki-client.org