Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/X3mzpMjxPtHap8x0XAKOi0rIbKY.roa
File: X3mzpMjxPtHap8x0XAKOi0rIbKY.roa (raw, json)
Hash identifier: RWSczUTLU3VYFvi3i6gM3dWcVwnFbzPsC+qhhvWy2xw=
Subject key identifier: 5F:79:B3:A4:C8:F1:3E:D1:DA:A7:CC:74:5C:02:8E:8B:4A:C8:6C:A6
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01918EEA91333164D82C3A41117EA6817B7B
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/X3mzpMjxPtHap8x0XAKOi0rIbKY.roa
Signing time: Mon 26 Aug 2024 13:40:22 +0000
ROA not before: Mon 26 Aug 2024 13:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15759
IP address blocks: 213.210.64.0/18 maxlen: 18
213.210.64.0/19 maxlen: 19
213.210.112.0/20 maxlen: 20
217.18.128.0/19 maxlen: 19
217.18.128.0/20 maxlen: 20
217.18.144.0/20 maxlen: 20
217.18.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:ea:91:33:31:64:d8:2c:3a:41:11:7e:a6:81:7b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 26 13:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f79b3a4c8f13ed1daa7cc745c028e8b4ac86ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:76:43:94:5c:80:56:d8:7e:85:a6:ca:04:
f6:99:ba:46:82:7a:ed:b2:1e:7f:fb:6d:08:6e:f3:
24:65:c4:7b:fc:ca:26:d7:ff:7d:99:43:8e:9f:3c:
25:cf:a6:6c:65:c8:b0:17:a4:90:93:fc:8b:cc:ba:
8b:28:01:ee:4d:9a:c9:7e:8d:40:7c:b4:1d:62:d5:
0c:5a:ac:98:e5:46:ef:33:bc:1f:fd:df:63:7e:dd:
a9:54:d8:c7:a3:28:b5:3a:c6:b6:3b:19:07:2a:e9:
42:0b:6c:b0:4e:3c:f0:cd:cf:1b:00:09:f9:00:66:
51:be:8b:d6:55:48:b7:76:cb:40:34:16:ca:f0:07:
34:39:8b:a0:c5:50:94:15:39:17:0a:35:98:5a:d7:
3e:28:c5:0d:a5:18:76:0f:b5:f0:fe:67:8e:17:fa:
f2:1c:40:fb:8f:b5:f1:46:a9:cd:9a:91:97:fe:eb:
80:a6:74:22:7d:74:31:9c:04:01:3d:e8:f8:3f:03:
50:c1:fb:fc:44:46:5f:43:45:63:1e:81:06:ca:d0:
f9:d7:02:09:75:a0:98:90:27:2f:bb:0c:58:d3:1f:
46:82:c7:ff:6e:dd:c7:dd:10:d9:93:0a:cb:3a:ab:
7a:10:7b:a8:81:a8:55:9c:d4:2b:a6:f2:6b:f5:f0:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:79:B3:A4:C8:F1:3E:D1:DA:A7:CC:74:5C:02:8E:8B:4A:C8:6C:A6
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/X3mzpMjxPtHap8x0XAKOi0rIbKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.64.0/18
217.18.128.0/19
Signature Algorithm: sha256WithRSAEncryption
67:13:a2:0d:67:9e:8d:f6:2c:cc:54:fa:3b:42:81:a7:8e:63:
44:9a:c6:b9:96:14:b7:ca:85:bc:84:03:54:d7:26:53:69:2c:
ca:a1:3a:4d:21:03:6b:18:b8:41:4f:ea:88:a0:11:42:a8:86:
53:a7:57:13:d1:1b:77:ea:36:f6:75:df:a0:6c:c8:79:71:d1:
a9:ac:24:ac:70:0f:a0:86:23:d5:e6:f2:fa:06:d0:3a:fa:0e:
bf:4a:52:04:c5:1a:b4:eb:83:66:ab:86:4f:94:51:a5:7b:24:
1d:a8:33:24:50:84:ed:b1:b8:83:1c:54:04:04:87:0c:90:e4:
e0:3c:6b:3f:34:ba:74:54:4c:4f:ca:a2:cb:da:da:52:93:88:
73:9a:65:c4:2b:98:52:fe:58:c0:45:f8:f4:67:09:18:28:7d:
e9:14:ea:db:07:ea:7d:91:3a:b0:9c:2a:51:fb:5f:96:1e:70:
ab:44:f1:31:df:d3:e5:36:3e:57:61:1c:98:53:6f:1b:24:3a:
23:24:e1:02:9f:2c:6a:53:f7:40:f4:81:63:c4:ac:b8:ab:eb:
c8:c7:e9:da:76:ac:3b:9c:ef:c9:02:18:53:15:c0:cd:c2:b8:
5f:0b:b4:4a:1f:3e:cd:65:b6:ea:ff:70:7a:ca:46:16:0d:25:
5b:04:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:26 2024 by rpki-client on console-fra.rpki-client.org