Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/xL8fGSJTzJymvlcUdhZ1YiG9A40.roa
File: xL8fGSJTzJymvlcUdhZ1YiG9A40.roa (raw, json)
Hash identifier: kOUYyitJsr3ZsMmEiPy69JC2/9LlwKqLgC54a4JnJDI=
Subject key identifier: C4:BF:1F:19:22:53:CC:9C:A6:BE:57:14:76:16:75:62:21:BD:03:8D
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 018F2F2730FC2A9969FE18F9E8E6649B151F
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/xL8fGSJTzJymvlcUdhZ1YiG9A40.roa
Signing time: Tue 30 Apr 2024 13:17:28 +0000
ROA not before: Tue 30 Apr 2024 13:17:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 192.112.151.0/24 maxlen: 24
192.112.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:27:30:fc:2a:99:69:fe:18:f9:e8:e6:64:9b:15:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Apr 30 13:17:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4bf1f192253cc9ca6be57147616756221bd038d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:de:55:93:bc:cd:ea:88:ec:fb:9f:58:0d:2f:
e4:ab:84:db:27:f5:cf:5f:6d:70:03:d6:04:d0:33:
45:70:ca:0b:7f:41:60:19:9a:e3:4f:7a:a0:bd:b4:
5c:17:56:89:57:bb:a4:ee:ef:84:e6:64:d0:f6:0c:
74:7b:9f:10:86:b8:c9:0f:ae:13:c7:de:d0:ac:5b:
00:59:c9:26:ad:e9:5c:db:b0:b3:4f:1d:74:e3:d7:
ed:7e:c9:c2:99:20:ef:66:59:3c:61:55:36:30:15:
5d:04:ab:a9:25:91:3a:5c:7b:e3:5d:83:31:5c:15:
5d:31:f1:24:e6:2a:5f:40:4d:2a:e3:7f:11:de:70:
90:70:e3:06:f6:1e:b9:31:a4:a1:b2:17:e0:5b:aa:
af:07:f5:87:4e:11:24:ce:17:22:39:73:8f:b3:e5:
f9:3d:ae:ed:98:ef:f8:aa:b6:9d:46:4c:ad:ee:25:
51:e5:4d:d5:cd:f1:cc:82:bd:a2:a4:f7:24:87:17:
98:c0:eb:b4:f5:41:a7:53:29:11:a6:3e:45:45:93:
d7:22:a5:9d:14:cd:56:38:e6:84:b3:12:e8:2a:6d:
59:01:44:6d:1a:e5:bb:3b:71:18:fe:b0:4c:3d:1b:
b5:d3:fe:89:47:24:7b:ea:d8:fa:24:fa:8b:51:c2:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BF:1F:19:22:53:CC:9C:A6:BE:57:14:76:16:75:62:21:BD:03:8D
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/xL8fGSJTzJymvlcUdhZ1YiG9A40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.112.151.0/24
192.112.178.0/24
Signature Algorithm: sha256WithRSAEncryption
53:6c:b7:1b:8e:cd:79:45:e4:d6:70:97:68:0e:ce:b0:8b:c4:
9d:e0:70:b6:fd:6d:3f:3e:df:cc:de:96:7c:f3:fa:31:85:eb:
2b:00:98:1c:26:a0:0a:a2:52:5e:67:60:06:9d:3e:61:db:a4:
1b:46:af:49:73:8a:de:dd:4c:77:f7:fd:18:51:78:3f:5b:04:
ed:bb:be:db:05:32:9e:15:4f:10:78:2c:08:e7:87:31:18:a6:
29:f6:f9:45:04:6a:cc:36:9c:5e:fd:d9:de:aa:4c:56:d1:90:
fb:1a:12:22:fe:ab:46:33:48:a0:a1:05:1b:7b:cf:71:6f:4c:
39:b9:56:7e:d2:70:d6:e7:b2:16:b6:20:11:87:a0:d7:05:b6:
37:f7:6e:21:64:c1:15:4f:d0:bb:50:ff:4a:59:6f:ab:4a:ea:
63:d2:e9:dd:21:83:d4:71:64:96:f0:ad:f7:55:be:f2:a8:58:
2a:30:f2:cb:32:a4:61:f0:f1:ec:47:2e:ab:58:49:8c:d3:7f:
05:b1:ce:b6:12:d6:3f:ab:20:91:c3:3e:25:4b:9f:36:94:ce:
b4:fa:b7:fa:fb:56:c0:65:4a:7f:0d:a0:37:c3:17:8d:84:02:
bd:50:60:08:84:ef:4e:05:90:41:9e:0e:9b:f5:3a:49:e4:b1:
6b:6d:75:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:20 2024 by rpki-client on console-fra.rpki-client.org