Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/XRyM7GD28LLKMtHsQbm67RsVFM4.roa
File: XRyM7GD28LLKMtHsQbm67RsVFM4.roa (raw, json)
Hash identifier: Byc3iRiw7hHBgsHBukmHWXRfHLNVRDleVR+Av4eIQiM=
Subject key identifier: 5D:1C:8C:EC:60:F6:F0:B2:CA:32:D1:EC:41:B9:BA:ED:1B:15:14:CE
Certificate issuer: /CN=32010f70276e418d58f08c56a79a82b99aca1763
Certificate serial: 018CC493848B792E4B8852F78C2B1EDA6345
Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/XRyM7GD28LLKMtHsQbm67RsVFM4.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57365
IP address blocks: 128.140.200.0/24 maxlen: 24
128.140.200.0/21 maxlen: 21
128.140.202.0/24 maxlen: 24
128.140.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:84:8b:79:2e:4b:88:52:f7:8c:2b:1e:da:63:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d1c8cec60f6f0b2ca32d1ec41b9baed1b1514ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a2:0d:35:14:db:e1:de:a4:3e:f3:30:a4:28:
d2:4d:44:35:6f:1c:9f:a8:dd:4d:3c:cd:a9:1e:ce:
22:f3:68:78:b0:03:8f:8e:d2:0e:e3:e2:b0:05:52:
12:b5:e2:46:23:d5:60:a5:ca:2b:11:8c:24:28:89:
87:dc:63:de:f6:02:06:f1:b6:5c:a3:e8:c9:6c:e0:
c1:80:69:c5:16:8d:26:06:66:21:35:bf:7f:48:26:
03:6b:8c:d5:60:88:16:f7:f5:e2:57:55:ea:bb:dd:
f9:d9:38:c1:85:af:2f:77:be:dd:43:80:d9:7f:87:
1e:f0:fe:76:07:a0:1c:71:00:7d:46:12:66:53:8b:
17:28:13:a6:31:bf:04:ab:c4:74:2e:cf:44:24:ac:
1b:fa:bf:18:23:51:b9:ea:27:43:89:0d:34:91:b7:
43:d4:58:fa:bd:55:95:e4:c4:82:fe:47:a0:f4:1b:
eb:7d:4d:21:77:1a:c6:64:c3:09:59:06:52:54:06:
fd:4c:08:0b:92:0e:63:c8:26:50:55:a7:ea:8e:a9:
3a:6f:43:b3:3e:6f:c5:d5:3a:1e:2d:f0:20:5e:e2:
be:74:d9:b8:83:53:75:96:48:3e:cc:67:99:75:6c:
58:0e:76:28:8d:16:96:ce:95:ec:02:b4:2b:ad:04:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1C:8C:EC:60:F6:F0:B2:CA:32:D1:EC:41:B9:BA:ED:1B:15:14:CE
X509v3 Authority Key Identifier:
keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/XRyM7GD28LLKMtHsQbm67RsVFM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.140.200.0/21
Signature Algorithm: sha256WithRSAEncryption
84:a5:91:b5:f6:1e:7e:d2:d2:32:6d:a2:a0:33:ee:32:b6:20:
81:ad:f1:a2:f2:2e:97:bb:6e:76:b5:e4:ba:96:1c:23:4f:34:
42:3f:60:f3:41:49:bb:d3:1e:ca:8a:be:c6:4a:71:33:46:fd:
e0:c2:6f:f3:c2:23:fb:d0:a1:92:4e:60:10:15:26:7f:1c:ad:
59:78:3b:92:e0:b8:38:94:21:a5:ce:86:10:04:7b:7f:d6:05:
51:f8:0c:d1:30:bd:89:7a:22:08:b2:4f:b6:8f:51:66:4d:f0:
db:5f:22:f8:8d:58:b6:d2:40:a3:87:06:c2:39:8a:64:47:1c:
b2:70:66:58:51:01:a7:0b:f9:6b:fc:cd:1f:7f:21:66:f6:b2:
4b:89:2e:8b:93:c1:fc:8f:cf:be:94:37:6a:59:c7:12:3c:8a:
ac:c4:c0:f5:4a:b1:c6:95:8c:c0:56:48:11:54:76:6b:6d:e4:
b5:19:e5:0c:0a:43:d2:e7:36:10:e8:47:e2:8b:02:82:43:a1:
bf:0d:f7:cf:04:3e:8e:66:b2:20:8e:c0:f7:d3:eb:07:66:5b:
ac:6c:17:0c:8b:f8:cf:fd:0f:54:d9:1f:7f:28:2f:e6:a9:27:
11:93:16:a1:0f:d8:66:21:1a:e3:78:39:cf:65:cb:75:d3:a4:
01:9f:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:09:08 2024 by rpki-client on console-fra.rpki-client.org