Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4CcQuYgtuhnxi_HYXNXZkhCwXV0.roa
File: 4CcQuYgtuhnxi_HYXNXZkhCwXV0.roa (raw, json)
Hash identifier: EoJAcTVRW2P8xCUIpw0RxlNmZwP3tKibFxXzgLIPEvA=
Subject key identifier: E0:27:10:B9:88:2D:BA:19:F1:8B:F1:D8:5C:D5:D9:92:10:B0:5D:5D
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019232B09F5D70931909AC10EDB31F630125
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4CcQuYgtuhnxi_HYXNXZkhCwXV0.roa
Signing time: Fri 27 Sep 2024 08:54:48 +0000
ROA not before: Fri 27 Sep 2024 08:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 94.232.249.0/24 maxlen: 24
103.74.92.0/24 maxlen: 24
103.74.93.0/24 maxlen: 24
103.74.94.0/24 maxlen: 24
103.74.95.0/24 maxlen: 24
103.88.240.0/24 maxlen: 24
103.88.241.0/24 maxlen: 24
103.88.242.0/24 maxlen: 24
103.88.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:b0:9f:5d:70:93:19:09:ac:10:ed:b3:1f:63:01:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 27 08:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e02710b9882dba19f18bf1d85cd5d99210b05d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:bd:12:00:6f:a3:2b:4c:ef:9a:35:89:07:
5f:cf:0e:1c:52:e7:2b:71:3d:f5:d8:a8:83:6f:68:
0e:5f:bd:d4:cf:92:89:16:ab:a2:09:87:74:94:c6:
20:48:7a:e9:bc:8f:c0:05:ab:ea:4c:e0:45:f8:e6:
ff:f7:33:c9:ad:b0:2e:9c:56:da:35:dd:d4:03:da:
6a:4a:07:d8:a5:e0:5b:4b:5b:ce:80:29:b0:9c:68:
57:3a:d7:9f:6b:e9:b4:6c:4d:82:a3:c0:c4:4c:59:
24:32:76:8d:18:2b:9a:49:2c:62:d8:d2:e2:20:1a:
e5:7c:73:a3:6c:d5:2a:61:bf:9a:53:49:06:f4:fe:
c2:59:6e:9d:5c:5d:2d:5e:8f:67:74:5b:6c:49:39:
13:8a:d1:02:10:1b:cc:58:77:85:ff:6e:eb:80:66:
e4:c6:0d:a9:cd:49:30:12:94:4f:b1:47:7b:59:f4:
23:64:84:41:22:61:74:e4:98:77:59:8a:86:27:b6:
37:3e:90:cd:45:6a:7b:c0:11:d3:b6:64:3e:1f:7e:
02:f1:c8:79:cf:f8:1f:ee:3b:72:53:a0:18:db:f1:
54:52:58:42:19:3b:25:bd:69:48:82:70:45:9c:22:
65:10:3f:a6:cd:dc:3d:5b:9e:59:7c:ec:5a:45:68:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:10:B9:88:2D:BA:19:F1:8B:F1:D8:5C:D5:D9:92:10:B0:5D:5D
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4CcQuYgtuhnxi_HYXNXZkhCwXV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.249.0/24
103.74.92.0/22
103.88.240.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:4c:94:8c:27:0d:ec:c1:ad:aa:7c:17:05:3d:cf:fe:76:a2:
03:06:8e:f8:f7:79:62:26:73:52:89:32:c7:20:55:17:e1:d3:
a0:54:1e:4a:1a:d4:f2:38:84:43:c8:a0:02:3b:5e:91:c9:15:
b6:5e:22:4b:d0:4f:9a:29:22:a3:dc:62:5d:c3:42:28:d0:4e:
09:64:54:4d:50:b9:c8:cd:88:a8:70:b2:b9:18:bd:40:73:0e:
07:02:2b:31:83:d5:bd:c6:4e:6c:9f:f2:e3:e4:80:65:c6:1f:
c7:fc:29:ba:a7:fd:96:5a:67:88:40:c4:c1:53:56:11:df:a4:
4e:a7:5c:50:c2:6e:23:7a:d7:00:52:16:fa:34:21:fb:85:d4:
b1:4c:89:e3:47:17:c4:bb:f4:9c:eb:85:de:99:34:9f:a0:1d:
87:65:75:de:22:d9:9d:f5:f9:b9:3d:96:65:f2:bc:67:ff:6e:
f4:17:de:f6:46:be:c0:2b:73:7a:a2:13:6f:0f:e2:45:bb:30:
0a:09:a5:16:38:3d:bc:67:4c:c2:2d:28:67:e2:28:3c:4f:6e:
ea:e8:97:d2:4a:4e:d8:19:cd:9b:1c:19:e9:87:f7:63:e8:ab:
bf:9c:ad:08:e6:dc:cb:11:16:39:72:8d:a8:bd:df:b0:d2:0b:
db:6a:57:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:32:39 2024 by rpki-client on console-fra.rpki-client.org