Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/EsQqF2We-JlmZuzNMnJ3pLb5R1w.roa
File: EsQqF2We-JlmZuzNMnJ3pLb5R1w.roa (raw, json)
Hash identifier: ZSJbBV934zARHOOqyzZYhZPEkOqCUVBGZGlp3dlyFEg=
Subject key identifier: 12:C4:2A:17:65:9E:F8:99:66:66:EC:CD:32:72:77:A4:B6:F9:47:5C
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018CC726A31C41795291436D3D6FF136B1E1
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/EsQqF2We-JlmZuzNMnJ3pLb5R1w.roa
Signing time: Mon 01 Jan 2024 22:30:47 +0000
ROA not before: Mon 01 Jan 2024 22:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 217.25.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:a3:1c:41:79:52:91:43:6d:3d:6f:f1:36:b1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 1 22:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12c42a17659ef8996666eccd327277a4b6f9475c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8a:cc:15:15:48:28:82:92:fc:ec:bd:fd:e7:
a0:13:16:dd:81:bd:a2:39:1f:5c:65:d6:ff:d5:c2:
bb:4b:13:0d:bf:ec:f9:45:06:77:0f:67:f1:96:91:
a6:f9:33:1f:69:c4:9d:90:92:8a:ac:f0:ec:4a:fb:
5d:43:e5:2d:82:6e:11:48:32:be:00:3e:b7:11:28:
a5:bb:bb:cb:b3:e5:ef:e2:85:7b:1b:25:b0:37:b2:
47:75:b7:c5:ee:c8:d5:3d:77:d5:b1:09:a0:18:6a:
d8:20:f5:91:4d:48:fd:c9:f1:5b:64:c0:5e:87:30:
49:8c:30:91:87:0c:4c:79:41:ba:58:b5:61:a5:69:
84:a7:00:91:b5:a0:39:ff:2b:e0:5a:69:10:39:df:
25:d3:2b:f9:f0:9e:8b:35:0b:c9:e3:33:d2:4d:e2:
00:a4:0a:1b:f5:17:be:d6:5b:2b:f0:93:45:66:70:
5c:bc:68:41:1f:f9:80:70:d3:5b:75:8f:fe:29:e5:
bb:cd:59:74:19:67:b4:60:36:6a:bb:42:77:81:75:
b4:0d:84:27:09:cb:ef:cc:bb:96:4a:da:d2:ff:84:
63:47:cc:bc:37:11:3e:4a:c2:d0:50:66:4e:ce:36:
c7:fc:ea:50:37:5d:9e:f9:57:d6:50:22:2c:1f:5a:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C4:2A:17:65:9E:F8:99:66:66:EC:CD:32:72:77:A4:B6:F9:47:5C
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/EsQqF2We-JlmZuzNMnJ3pLb5R1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.3.0/24
Signature Algorithm: sha256WithRSAEncryption
52:55:09:a8:f9:7f:00:fc:5b:8a:42:2b:89:e5:5e:9f:d5:1b:
f8:cb:55:f3:26:19:78:06:f9:ce:86:44:6d:bc:74:01:ac:08:
4f:f1:15:de:a2:6e:ae:be:9d:b0:4f:02:0b:b4:f9:e4:59:f9:
d7:ac:90:2b:fe:6e:db:28:e1:79:2c:9f:3b:3a:3e:29:1c:9e:
8f:fd:86:44:62:48:27:2d:03:27:8f:0c:e7:4b:55:e8:31:38:
d8:2f:56:c3:b5:67:1d:26:13:51:b1:2f:1b:5c:61:5c:c4:e6:
4a:18:a9:a3:94:b1:48:89:96:f7:c4:7f:ba:20:85:d0:18:c0:
cd:7d:c1:f9:de:15:11:c9:de:5c:c5:9e:2e:51:76:c6:aa:34:
64:37:48:99:36:1f:15:42:d3:50:8f:a7:8b:80:df:dd:82:b8:
75:a3:d5:43:ec:0a:1b:83:f7:e7:b7:2e:75:c7:31:0c:3c:a2:
96:f9:8b:79:09:76:0a:19:8a:b4:27:52:af:9a:51:32:db:6c:
44:43:24:a6:af:fd:aa:5c:db:57:c7:d4:92:d6:1f:e8:55:19:
49:51:31:82:e3:b9:42:0b:a6:19:4e:59:bb:0d:a4:84:88:9d:
9a:21:7f:34:51:7e:fe:29:86:31:f7:ce:6e:6f:ef:68:a8:fc:
1f:23:0f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 12:55:45 2024 by rpki-client on console-ams.rpki-client.org