Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/n78O7NIe2Y5OOs-w58fXCLLaTCc.roa
File: n78O7NIe2Y5OOs-w58fXCLLaTCc.roa (raw, json)
Hash identifier: sVgR8lPUv1U2UyWFrGxtOocGIBzHZXtVCwjMQDqz3Ds=
Subject key identifier: 9F:BF:0E:EC:D2:1E:D9:8E:4E:3A:CF:B0:E7:C7:D7:08:B2:DA:4C:27
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EE603A3E02795359D2EA95E0A9A40A767
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/n78O7NIe2Y5OOs-w58fXCLLaTCc.roa
Signing time: Tue 16 Apr 2024 08:26:21 +0000
ROA not before: Tue 16 Apr 2024 08:26:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39407
IP address blocks: 87.103.232.0/24 maxlen: 24
87.103.234.0/24 maxlen: 24
95.189.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:03:a3:e0:27:95:35:9d:2e:a9:5e:0a:9a:40:a7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 16 08:26:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fbf0eecd21ed98e4e3acfb0e7c7d708b2da4c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:89:aa:6d:b6:25:8b:e5:65:b1:8e:46:e6:
4d:02:05:c4:28:93:a0:98:c4:29:ca:6f:f4:eb:46:
f0:ac:8e:45:ef:6b:9d:00:09:7b:2d:a2:96:46:66:
d7:98:de:09:93:05:9f:aa:7a:4e:0f:ed:a5:14:52:
9b:b1:2c:bc:01:35:c9:fb:01:9e:7f:b8:18:d6:dd:
1c:9e:c5:8a:f7:be:f9:f3:cb:36:d4:d4:fd:1d:41:
c4:85:44:eb:99:56:4e:73:78:f8:fe:fa:36:40:c3:
6c:2c:ea:c9:26:86:9b:6f:3c:9a:6e:0f:f7:81:ee:
d4:e1:a9:a2:16:79:92:56:cc:73:86:2f:82:59:c0:
f7:2e:87:91:eb:40:e9:9b:ae:03:02:25:fb:f6:be:
1d:e4:31:5f:b9:e9:84:cc:4c:f5:e7:0c:27:10:c6:
3c:b4:a6:9f:eb:9f:7a:27:5f:40:55:69:64:df:21:
7b:0f:aa:0c:f8:d6:a4:e0:59:0a:d4:cd:d6:9e:03:
50:30:aa:d3:18:30:dc:78:b7:47:b7:98:47:78:3c:
72:ac:1d:12:e0:76:e8:c5:14:1a:2b:98:c7:40:3c:
56:47:b3:0e:26:20:fc:47:9f:00:1c:f0:20:4a:e2:
4f:51:e6:2d:fc:ca:ea:4c:f3:01:b4:27:96:8e:4a:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:0E:EC:D2:1E:D9:8E:4E:3A:CF:B0:E7:C7:D7:08:B2:DA:4C:27
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/n78O7NIe2Y5OOs-w58fXCLLaTCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.103.232.0/24
87.103.234.0/24
95.189.113.0/24
Signature Algorithm: sha256WithRSAEncryption
14:20:ba:b1:ea:b2:7a:00:01:cb:13:04:c0:1c:c4:aa:8f:5b:
b9:58:db:49:d9:37:3a:e4:00:8d:a4:e4:47:b8:47:4f:f1:50:
c0:61:a2:1c:96:7c:23:9c:9b:0a:47:2c:21:e6:8d:8c:68:96:
b8:b8:28:ad:a6:f6:8e:6d:ec:3b:bd:73:12:fc:a0:17:6c:95:
c4:23:31:f5:bc:af:b1:c9:23:a0:1b:e8:a4:dc:ca:18:da:e4:
aa:f3:1b:00:4e:76:8c:11:91:a3:bc:c7:fb:aa:4d:40:4e:d4:
41:a7:57:f6:86:99:2b:69:4f:e2:36:fe:87:2f:48:19:4a:f3:
3e:71:2c:30:dc:6b:c4:54:58:42:b6:78:e7:f9:21:04:f2:26:
3b:e6:b6:c3:01:48:ba:1e:c7:a0:0a:00:33:0d:81:09:a1:6f:
e5:46:66:f0:60:3f:bc:40:c4:b1:5e:27:83:27:8d:77:65:c0:
ab:32:7e:b9:a1:8c:8d:c3:00:e3:2c:fd:58:47:17:16:42:d4:
32:31:d1:3e:5e:1f:e5:45:2a:8e:12:a7:b7:a3:ca:87:01:bb:
27:95:31:4a:0e:58:99:ed:68:4c:08:59:f1:c4:2a:2f:aa:9c:
b3:31:30:80:f5:71:c9:b4:cf:80:00:8f:f0:09:3c:9d:9c:2b:
76:b1:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:35:16 2024 by rpki-client on console-ams.rpki-client.org