Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/72w_OeAiJkN-nUg_Hm_IwQdaMkc.roa
File: 72w_OeAiJkN-nUg_Hm_IwQdaMkc.roa (raw, json)
Hash identifier: MVDaz3xgGXLIW8G++ogJzBhjJfRplDtfw7/jNwkXe/4=
Subject key identifier: EF:6C:3F:39:E0:22:26:43:7E:9D:48:3F:1E:6F:C8:C1:07:5A:32:47
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 018CC8701B0A8D519AAA7E205C1F61A183EA
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/72w_OeAiJkN-nUg_Hm_IwQdaMkc.roa
Signing time: Tue 02 Jan 2024 04:30:39 +0000
ROA not before: Tue 02 Jan 2024 04:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51306
IP address blocks: 194.127.244.0/22 maxlen: 24
2a07:cf80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:1b:0a:8d:51:9a:aa:7e:20:5c:1f:61:a1:83:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Jan 2 04:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef6c3f39e02226437e9d483f1e6fc8c1075a3247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:93:9e:b4:a1:39:bd:8a:fe:8a:20:9e:d8:d1:
8f:07:e1:80:30:01:fa:1b:de:d8:6d:ef:81:02:4b:
9b:9d:82:5e:44:ab:88:7d:a0:cf:4b:68:61:ef:b0:
31:55:bd:25:a7:e3:79:82:1c:95:d0:e4:9c:c1:e2:
0c:8e:b2:21:65:4c:91:99:c4:8b:7c:2c:a2:5e:57:
12:a0:3b:37:a9:6e:fc:6d:c7:27:47:00:34:75:99:
93:bf:fa:0d:66:8f:45:2a:98:1c:5f:de:72:dc:a5:
3b:eb:29:a8:61:90:f9:b9:92:db:d7:6d:f5:94:27:
21:8a:ed:25:94:5f:84:f2:8e:e1:e7:32:8c:d2:a5:
5c:5a:6d:53:8f:45:16:fb:b5:a1:b4:4d:3b:58:1d:
83:85:4f:30:c7:17:e2:c7:0c:90:63:aa:33:02:24:
1b:3a:da:80:9d:15:23:42:95:c0:4b:29:d6:53:3d:
fa:15:b1:ce:cd:05:e4:f7:20:43:95:d2:86:6b:c4:
95:b1:08:3e:4a:54:bb:fc:b7:8c:2b:a3:f9:3a:f9:
4d:0e:90:40:29:50:89:84:c3:9c:be:3c:0e:fd:93:
4e:ff:87:9f:bb:2c:74:1c:1a:7b:bf:74:6d:40:24:
2c:21:a6:1c:c9:63:a5:dc:58:0d:20:09:2a:ab:98:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6C:3F:39:E0:22:26:43:7E:9D:48:3F:1E:6F:C8:C1:07:5A:32:47
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/72w_OeAiJkN-nUg_Hm_IwQdaMkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.244.0/22
IPv6:
2a07:cf80::/32
Signature Algorithm: sha256WithRSAEncryption
9e:1c:6c:2a:34:b1:e4:37:42:ac:ad:bf:36:12:95:ac:b6:b2:
00:c4:e2:06:aa:34:32:3f:67:0e:6f:4c:0e:1c:e2:d7:30:87:
a1:d4:aa:1c:48:0f:09:40:ce:93:65:ec:6c:c2:62:eb:6a:b8:
50:87:6f:48:c8:41:68:ba:23:9c:e2:49:38:15:2c:d4:c8:31:
dd:b5:4d:e5:de:dd:5b:22:17:24:86:06:0c:b3:22:04:d8:59:
64:11:01:2f:7f:95:9a:a7:ff:ba:a0:65:3e:07:f2:56:1c:68:
bc:ac:70:da:70:5c:53:18:74:50:24:17:75:e0:66:7f:6b:a2:
d5:30:5c:6e:6b:bb:f9:69:86:f1:1e:ed:2b:e3:44:02:18:43:
07:47:64:de:48:ff:5b:08:07:7a:fc:eb:7a:9c:c6:92:eb:48:
69:bb:c8:5c:cf:49:fd:48:ea:9b:4a:0c:57:2c:0b:26:e0:9d:
78:66:7a:cf:d5:9e:51:f5:73:88:97:f2:8e:cb:6c:29:e7:dc:
d6:53:37:8b:17:1b:69:5f:c6:7c:38:45:f7:da:5a:b8:ec:fd:
71:0a:55:0b:9b:1f:26:0d:cd:0f:2c:f5:3a:e8:87:f5:78:cf:
38:51:6b:7d:fc:ab:f3:76:36:6c:6c:71:36:7d:82:31:92:0f:
71:d6:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:08:30 2024 by rpki-client on console-ams.rpki-client.org