Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/pf27Mu5e4KBHk81C6oP5H0R2Hoc.roa
File: pf27Mu5e4KBHk81C6oP5H0R2Hoc.roa (raw, json)
Hash identifier: 0XV2puifxK16/1Sf9d984/c2exDhhXzkmX+Uf0cZGbg=
Subject key identifier: A5:FD:BB:32:EE:5E:E0:A0:47:93:CD:42:EA:83:F9:1F:44:76:1E:87
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 018CC3B69320299E02FC617CC55D6D44E22B
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/pf27Mu5e4KBHk81C6oP5H0R2Hoc.roa
Signing time: Mon 01 Jan 2024 06:29:31 +0000
ROA not before: Mon 01 Jan 2024 06:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8376
IP address blocks: 217.29.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:93:20:29:9e:02:fc:61:7c:c5:5d:6d:44:e2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Jan 1 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5fdbb32ee5ee0a04793cd42ea83f91f44761e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f7:1e:16:b1:89:8e:96:e4:e2:8e:89:a7:d8:
17:d7:45:20:6d:b6:dd:18:4f:28:03:af:c8:02:e7:
99:45:c1:4b:6f:28:08:44:de:b2:fb:60:cf:d7:55:
a0:98:27:04:4d:e0:8c:a8:cc:b4:06:35:4b:2c:1a:
7a:fe:f3:7d:b3:43:b8:53:c2:9d:23:b5:2a:70:a2:
ac:e5:0b:8f:b5:ac:d6:16:54:2d:24:a0:41:8c:dd:
bb:04:d0:d4:d2:44:48:1e:26:ba:cc:ab:40:61:1a:
35:7e:83:64:8d:58:da:b2:d0:37:98:29:94:80:e5:
18:b6:05:de:bf:94:ad:e8:12:97:d8:37:09:ac:bf:
fd:24:27:3a:f5:30:20:3c:05:2a:a9:ca:81:01:16:
9c:32:ec:2a:f2:4f:9e:3e:d6:6b:df:00:35:2d:2f:
9b:1a:8e:97:d4:e2:a3:0d:42:cb:87:9b:5e:7a:e8:
92:d9:61:3a:e0:13:d5:e2:8c:28:ba:23:1b:5c:9b:
ad:d6:fe:53:72:a5:89:ff:5e:97:55:da:fa:df:cf:
c9:26:8e:59:09:64:3f:bc:62:19:56:97:bb:a9:9f:
22:dd:fa:96:09:f9:b5:3f:09:91:56:7f:d5:32:17:
d8:41:c4:cc:8f:a0:ac:1a:82:e0:ef:09:73:40:68:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FD:BB:32:EE:5E:E0:A0:47:93:CD:42:EA:83:F9:1F:44:76:1E:87
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/pf27Mu5e4KBHk81C6oP5H0R2Hoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.29.242.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9a:02:ac:34:ec:80:01:e2:a8:b6:b4:09:58:bf:12:01:20:
28:ab:be:26:31:17:29:14:9d:be:fb:1b:35:00:b6:05:30:5d:
4e:1c:3e:e8:51:99:d5:80:10:c6:1f:41:2a:fb:25:e4:32:e2:
88:ca:e0:d4:6e:32:a2:ac:ce:11:9c:ce:59:8b:47:52:02:79:
c4:aa:11:87:a4:8d:4b:1c:dd:6b:14:cd:b9:7e:55:64:24:d2:
eb:76:44:01:30:de:46:0b:ec:2c:a9:ea:b7:6d:86:5d:bb:f6:
f5:72:bc:16:7d:54:3b:ea:44:5e:e3:0e:31:67:81:05:20:38:
fd:e9:91:9e:7e:e4:12:c7:f6:bd:fe:5f:af:3a:27:5d:df:38:
83:87:3a:6b:49:62:60:3c:a7:d1:da:e3:ed:8a:7c:b6:fe:72:
dc:1c:53:5b:0e:e4:32:fc:24:7d:75:08:12:4d:f5:ef:1e:ae:
a1:5b:1b:ff:24:79:b8:6e:9f:08:74:05:63:fc:0c:33:31:5b:
1b:72:b9:8a:fd:e7:d8:ee:82:58:52:f3:f3:f7:76:10:6b:f3:
21:5f:89:eb:90:b8:d5:97:09:4e:6b:34:9e:77:fc:3f:08:6e:
04:d4:3a:a7:89:2d:d8:31:fd:3f:3d:3a:2f:55:a6:12:e0:cd:
07:61:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:35:31 2024 by rpki-client on console-ams.rpki-client.org