Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/JwUR8uEFePjBi68r1H9jAgJba8c.roa
File: JwUR8uEFePjBi68r1H9jAgJba8c.roa (raw, json)
Hash identifier: QfZ35ny3du6Ig66UHhbjDDJ3GKSxRRS0C5i2AnedbBo=
Subject key identifier: 27:05:11:F2:E1:05:78:F8:C1:8B:AF:2B:D4:7F:63:02:02:5B:6B:C7
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 0190EF72EC4F943FE8CB8EABD9D44F71F68F
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/JwUR8uEFePjBi68r1H9jAgJba8c.roa
Signing time: Fri 26 Jul 2024 14:30:04 +0000
ROA not before: Fri 26 Jul 2024 14:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8903
IP address blocks: 158.172.140.0/23 maxlen: 23
158.172.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:72:ec:4f:94:3f:e8:cb:8e:ab:d9:d4:4f:71:f6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jul 26 14:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=270511f2e10578f8c18baf2bd47f6302025b6bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:62:85:80:8a:e8:15:99:96:ed:db:cd:18:a9:
ea:4c:f1:58:7b:79:55:dd:e0:21:b6:d4:c3:5e:f4:
c4:9c:7b:7f:e7:a5:f5:76:a9:b3:a9:7e:de:48:db:
5c:8c:3d:b7:21:92:25:5f:cd:89:d6:15:c6:e5:7f:
e8:62:92:69:4b:37:ff:16:ec:d5:5d:86:cc:da:7a:
19:f9:20:cf:90:52:3e:b0:f1:65:22:9c:86:34:bc:
50:80:6e:63:34:1e:4f:ca:fe:ca:ef:18:c4:12:98:
39:70:e6:cc:1b:56:cc:6f:b6:94:fb:48:c3:02:a0:
04:4a:02:25:87:91:76:98:a9:0b:91:9e:52:bc:a9:
46:6e:29:28:0b:86:b2:7e:4b:35:15:e5:e5:60:dc:
88:8f:eb:bb:27:c9:8a:85:3c:fd:8e:3d:f3:e2:f9:
b6:ba:bb:74:43:60:48:ab:d4:63:35:e4:0d:d0:5a:
1d:00:49:d5:a6:e1:38:6d:9b:a1:c8:67:79:78:cf:
e9:74:e3:92:98:de:a0:5a:7f:77:0e:89:67:14:d9:
f0:6b:e5:73:66:69:84:95:0e:b3:70:9c:2c:50:e4:
ed:24:f7:db:98:d5:74:00:a7:2f:47:cc:f6:66:db:
5c:62:5b:00:83:6f:aa:0a:b6:79:73:ce:be:35:4a:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:11:F2:E1:05:78:F8:C1:8B:AF:2B:D4:7F:63:02:02:5B:6B:C7
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/JwUR8uEFePjBi68r1H9jAgJba8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.140.0-158.172.142.255
Signature Algorithm: sha256WithRSAEncryption
67:8c:5c:9a:5c:e2:e9:86:b3:bb:9d:4f:c3:28:07:7d:14:13:
4b:cc:51:1a:89:24:14:fc:84:5d:74:c1:64:db:b5:ba:d4:c9:
8b:de:ce:88:4c:22:a8:6b:6b:7d:3d:10:77:b9:69:61:a2:51:
56:63:ac:d0:1b:66:aa:14:3a:ca:25:15:52:23:e1:0c:eb:a8:
40:e4:b4:a1:37:46:66:ef:98:27:a9:4d:0e:80:47:00:6d:39:
54:1e:75:ef:8e:ae:ff:33:d2:fd:f4:71:a1:14:ef:44:71:07:
61:1f:d3:e4:94:df:61:7d:0e:b7:7b:75:12:bd:41:3c:ca:c3:
55:31:03:8d:ea:eb:3a:01:9e:b5:9f:f4:80:f1:2b:84:6e:a8:
86:b3:32:f8:83:a6:c2:9c:8c:b4:10:58:91:d9:b3:97:25:7b:
30:22:54:97:ab:07:8d:e6:16:49:56:7a:ed:5b:ef:ea:94:bd:
3a:41:8f:77:47:27:2e:cb:6f:ec:bb:4c:3a:aa:99:a3:54:f8:
e8:40:d3:45:08:8b:96:95:1d:78:c4:b8:42:36:68:f2:fb:75:
3e:db:e8:7b:03:ce:93:92:77:f1:2f:cf:f8:e2:fe:11:04:7c:
ff:b2:0f:75:fd:85:3a:6a:df:a9:6c:49:38:43:1b:fb:b9:81:
bf:d6:e0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:11:45 2024 by rpki-client on console-fra.rpki-client.org