Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/4LfQIyNS3wgm6LAXqN9CIwg1no4.roa
File: 4LfQIyNS3wgm6LAXqN9CIwg1no4.roa (raw, json)
Hash identifier: wlodZ+XO9DSSfHWD8e+4FGfD1EaEbct4hhmmo+/1Dhg=
Subject key identifier: E0:B7:D0:23:23:52:DF:08:26:E8:B0:17:A8:DF:42:23:08:35:9E:8E
Certificate issuer: /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial: 018CCA2A236480F37462BF77A6EC5F447ECE
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/4LfQIyNS3wgm6LAXqN9CIwg1no4.roa
Signing time: Tue 02 Jan 2024 12:33:28 +0000
ROA not before: Tue 02 Jan 2024 12:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2486
IP address blocks: 194.0.9.0/24 maxlen: 24
2001:67c:217c::/48 maxlen: 48
2001:678:c::/48 maxlen: 48
2001:67c:2160::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:23:64:80:f3:74:62:bf:77:a6:ec:5f:44:7e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Validity
Not Before: Jan 2 12:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0b7d0232352df0826e8b017a8df422308359e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:a0:07:5b:30:47:fe:51:66:ad:e1:8f:1a:
55:ad:6b:5a:1f:86:c9:8d:7c:98:16:4c:af:03:66:
60:28:6f:43:f4:ec:03:dd:04:aa:77:0d:23:12:a1:
52:26:86:89:f3:69:3f:d9:45:dc:cc:6e:03:f7:bb:
77:48:67:f8:9d:f4:db:c2:48:a1:61:dc:0b:68:63:
2d:b8:27:e7:bc:77:fe:ec:09:ce:a6:cb:ae:a2:80:
9a:5d:fe:e2:2c:f1:5b:d8:09:a5:cc:e4:1e:6f:32:
f0:95:d4:5a:9e:21:59:f9:d2:06:8d:b9:14:81:0e:
14:f8:f8:0c:86:f7:3a:c6:3f:8a:e9:b1:7a:da:e8:
54:ec:66:18:9f:58:09:ef:d8:1f:38:f6:41:4f:f9:
a4:bc:5c:fb:7b:4b:8c:53:b5:3e:da:33:c8:e0:63:
3e:7a:ae:e7:f8:e0:af:3d:2c:67:bd:40:3b:9c:24:
9a:26:25:2f:85:52:48:19:dc:4d:05:d8:e3:72:a4:
ed:a1:37:90:85:ff:23:d0:f2:1e:04:ee:f2:dc:5b:
36:86:ce:40:28:87:00:c7:79:d3:db:13:b9:c1:3a:
4c:d6:3c:66:f7:63:97:50:bb:74:83:bd:03:1b:42:
8a:54:72:1d:b3:e6:15:75:72:30:58:54:fc:bd:ba:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B7:D0:23:23:52:DF:08:26:E8:B0:17:A8:DF:42:23:08:35:9E:8E
X509v3 Authority Key Identifier:
keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/4LfQIyNS3wgm6LAXqN9CIwg1no4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.9.0/24
IPv6:
2001:678:c::/48
2001:67c:2160::/48
2001:67c:217c::/48
Signature Algorithm: sha256WithRSAEncryption
12:43:1e:d5:36:c2:e5:37:b7:53:bc:e8:b6:e4:b7:07:43:b2:
73:e4:b0:88:a9:51:89:e6:a3:40:9c:03:c0:56:cb:26:f0:7c:
0b:4c:52:e5:8d:95:64:a8:45:2a:7e:f9:e5:0c:8b:dc:c7:59:
41:48:6a:16:73:a0:0b:77:f4:dd:ca:0a:10:ec:d2:46:93:ee:
5e:e4:9c:60:0c:1c:34:0f:5f:5b:1b:21:13:ab:f2:dc:d2:e8:
11:6e:2d:6a:4b:ff:04:67:0a:dd:75:fa:f4:76:d1:9f:e8:2a:
ea:2c:e7:a6:2e:4e:95:ae:25:63:14:55:35:ac:40:d7:17:76:
c1:ed:ba:fd:89:40:ef:81:c9:a9:08:4d:5d:77:6c:e7:e5:9f:
8e:ed:b5:63:5d:d9:54:e8:10:fb:12:3b:37:ee:d8:fc:f2:83:
b9:7b:9e:6f:3d:6d:42:61:85:4a:40:2b:56:a4:72:ac:73:4c:
a8:bb:58:2e:c1:ec:d7:5d:e7:e9:b8:59:09:83:18:ed:09:69:
a2:e9:95:7f:84:53:ec:46:c7:d3:57:56:a0:92:23:0f:24:31:
0c:3b:80:91:04:76:b9:8d:10:33:4c:9f:b6:8b:28:e0:9e:1c:
80:05:11:58:95:59:73:d8:43:dd:30:e0:d8:85:5b:55:8b:a5:
0c:5a:0b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:15 2024 by rpki-client on console-fra.rpki-client.org