Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/xb7GLZatKUTNZRse1AurQSNewso.roa
File: xb7GLZatKUTNZRse1AurQSNewso.roa (raw, json)
Hash identifier: zpL/3hc+SjX1QFFvVXHUQS3to+376Qlxt4F5YE+RM8c=
Subject key identifier: C5:BE:C6:2D:96:AD:29:44:CD:65:1B:1E:D4:0B:AB:41:23:5E:C2:CA
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 018CC64B6E1E43E6389FD99EA817983115F4
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/xb7GLZatKUTNZRse1AurQSNewso.roa
Signing time: Mon 01 Jan 2024 18:31:21 +0000
ROA not before: Mon 01 Jan 2024 18:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24618
IP address blocks: 81.17.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6e:1e:43:e6:38:9f:d9:9e:a8:17:98:31:15:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 1 18:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5bec62d96ad2944cd651b1ed40bab41235ec2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:10:1c:01:21:75:b1:96:c0:9b:e7:4a:0c:df:
60:94:46:5f:bf:af:86:23:82:86:65:5d:21:5c:ef:
ed:95:f8:db:aa:06:32:0f:73:bf:da:ac:cd:3b:33:
f3:87:cf:8f:90:60:60:31:a3:e9:6c:1d:cf:68:e8:
e4:d9:8c:00:7d:57:d4:53:a9:b2:2f:a7:30:ab:63:
aa:0e:f9:76:cc:ba:09:47:9a:d0:43:1f:eb:0b:bf:
65:63:bf:1d:8b:06:f7:de:9b:cd:bf:bc:7c:27:c3:
31:43:df:c9:04:f8:66:5b:b0:5d:16:ff:4f:a0:58:
36:1b:0b:ce:79:a5:0d:db:e2:f7:05:10:dd:d1:30:
f5:9a:bb:48:98:56:41:44:de:c7:56:9b:64:94:2e:
49:8a:63:a3:5d:40:34:75:43:ec:4d:5b:45:80:82:
b2:bb:db:14:86:bb:9f:e7:ed:1c:e3:05:ed:9c:4d:
40:6e:8d:f9:0b:8d:fc:38:10:43:68:49:eb:80:39:
5e:1e:9f:00:c1:ed:75:c0:f2:2b:c8:3a:bf:47:85:
74:da:65:2d:fc:ef:f9:10:e0:e1:f9:de:7a:e1:5d:
85:fe:c1:7b:eb:b4:cf:4d:8c:2d:e1:9b:25:75:e8:
a7:91:b0:16:14:7d:55:5f:d6:18:4a:8a:8c:12:83:
ea:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BE:C6:2D:96:AD:29:44:CD:65:1B:1E:D4:0B:AB:41:23:5E:C2:CA
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/xb7GLZatKUTNZRse1AurQSNewso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:0f:87:15:92:f1:ce:20:ec:0d:e3:3a:cb:48:1b:88:33:d0:
1c:a5:f5:78:d7:17:68:9c:04:76:42:ef:5c:73:4d:91:20:0f:
ec:83:ac:28:ff:ef:9c:f4:d1:af:42:a7:2f:9a:46:d7:83:d7:
b5:1b:65:3b:e3:28:8f:6b:b2:6b:ee:ce:15:80:74:75:17:70:
c0:3a:67:40:00:5f:19:30:71:7a:72:f0:26:0e:56:54:48:40:
13:3d:04:45:84:9a:20:78:b8:2c:2e:53:ab:41:ce:63:1b:87:
ac:ad:26:a8:f6:0f:df:d9:00:9d:85:36:7a:84:ea:ef:e1:3c:
88:29:83:18:71:c0:2a:2c:02:13:e6:ba:30:37:24:a3:90:ae:
cc:1f:2c:f3:24:2a:f7:e8:0c:40:8f:71:73:85:26:6e:31:73:
09:3c:2f:ca:a8:ba:bc:71:7a:3f:0b:bb:7a:b5:d9:38:4f:52:
06:f1:ca:cb:ee:f6:59:17:66:70:89:32:f7:2d:00:43:7d:05:
e3:6c:a8:b2:ca:cb:d8:84:70:fd:e9:7c:1a:ef:9f:4f:eb:d7:
6d:07:5f:02:63:14:92:75:f8:9e:2d:1d:89:30:4f:e1:d8:bc:
2e:89:1b:e8:77:3b:69:0b:5b:71:76:6b:f0:45:26:27:a2:ed:
5b:4e:e8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:14:53 2024 by rpki-client on console-ams.rpki-client.org