Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/Sd94T89hO5dphjDfer4lbc9jvw4.roa
File: Sd94T89hO5dphjDfer4lbc9jvw4.roa (raw, json)
Hash identifier: Swy7jNdaiwUyuv5dS5rv9JVRUI4LEy6McZiMCM5YEpA=
Subject key identifier: 49:DF:78:4F:CF:61:3B:97:69:86:30:DF:7A:BE:25:6D:CF:63:BF:0E
Certificate issuer: /CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Certificate serial: 018DF4FB548BC9A163163C026F8FBBCBA3E6
Authority key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/Sd94T89hO5dphjDfer4lbc9jvw4.roa
Signing time: Thu 29 Feb 2024 13:08:48 +0000
ROA not before: Thu 29 Feb 2024 13:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215489
IP address blocks: 170.237.6.0/23 maxlen: 23
170.237.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:fb:54:8b:c9:a1:63:16:3c:02:6f:8f:bb:cb:a3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Validity
Not Before: Feb 29 13:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49df784fcf613b97698630df7abe256dcf63bf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:c2:32:4d:60:3d:c4:6f:81:8e:ea:9d:c2:
c3:b7:48:d2:5f:55:35:78:37:dc:b8:4a:df:bf:00:
1a:c5:68:5e:29:09:b0:e8:73:65:5d:61:39:a9:a2:
4e:8e:a8:3c:85:ee:48:d0:be:91:bc:0f:3a:76:36:
07:52:9a:68:f5:1e:7d:34:fb:a6:cb:22:99:48:0e:
62:55:51:bf:71:b9:71:7a:ce:e6:56:6a:90:6a:72:
d4:99:73:fa:bf:5c:6f:13:bb:31:e7:28:20:fb:c0:
5c:2b:35:f4:bd:ce:d9:b0:61:2b:d7:16:a4:8a:0e:
af:c4:21:0b:a2:6a:0c:05:80:85:15:90:27:1a:0c:
41:1c:3c:7c:77:74:8b:6b:7d:e6:4b:ed:27:81:cc:
25:67:03:81:e3:0a:73:f8:0c:8a:56:f9:d0:0e:91:
9b:bf:30:1b:5a:40:da:01:74:74:6b:d0:7b:d4:93:
51:ed:cc:53:5e:d0:09:c8:f6:c5:f1:eb:c7:3f:1f:
ee:fa:0b:f1:e9:c4:66:a7:de:9b:50:bc:df:a4:25:
92:d1:2b:7e:c7:a7:8b:9a:6b:bd:20:4d:ee:7f:6a:
b3:5f:66:e7:47:4b:38:06:92:cb:c7:8d:f6:bd:1c:
51:65:38:3f:f7:04:8a:86:1e:0d:4f:d4:87:f1:44:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DF:78:4F:CF:61:3B:97:69:86:30:DF:7A:BE:25:6D:CF:63:BF:0E
X509v3 Authority Key Identifier:
keyid:A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/Sd94T89hO5dphjDfer4lbc9jvw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.237.6.0-170.237.9.255
Signature Algorithm: sha256WithRSAEncryption
07:68:2e:a4:7d:d7:9b:6c:bb:aa:2c:aa:0a:08:e3:bf:9c:0f:
85:db:9b:80:dc:59:2c:93:91:d9:cc:fe:31:b7:61:75:28:2d:
6c:f2:43:6a:2a:7b:86:2f:fc:5d:d9:6f:07:31:74:29:30:bd:
d8:ff:7e:99:57:7b:95:c4:05:b6:b5:af:55:27:06:4c:f3:5f:
3c:f7:c8:36:5d:93:a7:0d:d6:da:bd:dc:aa:6d:dd:76:0b:e8:
db:5a:d2:ff:e3:90:a4:8e:96:d5:6f:17:3d:b9:5a:50:e5:fa:
fd:cc:28:3c:41:23:f0:27:c3:ad:94:ad:7b:b4:86:39:c3:f0:
ec:1d:5b:8f:0a:ff:1c:62:b7:be:a5:72:93:7e:22:24:69:b4:
44:98:9d:bb:b4:02:a5:c8:6a:6b:4f:dc:78:aa:22:0f:74:22:
f0:de:e6:41:70:77:f8:f9:00:4f:f5:80:32:07:fc:8c:e6:20:
7b:c1:b0:3e:d8:44:91:1f:e2:e2:b4:91:3b:fd:24:a6:0a:70:
ad:09:b6:28:c5:86:2e:3a:ff:79:6c:8d:55:4e:f9:1f:52:41:
c8:17:89:90:87:67:b7:5f:00:6f:05:88:e8:c2:e1:2f:50:63:
82:11:e9:43:94:05:b3:b0:88:f2:3a:b0:80:10:26:79:65:c3:
9d:5d:c7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:48 2024 by rpki-client on console-fra.rpki-client.org