Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xQSnqro2xpXpo2UI8DXHwUqf0Gk.roa
File: xQSnqro2xpXpo2UI8DXHwUqf0Gk.roa (raw, json)
Hash identifier: BnQsYcIMqaymXfiJZCmb8X/vCR3DrFIkK7VQ9I3/pP8=
Subject key identifier: C5:04:A7:AA:BA:36:C6:95:E9:A3:65:08:F0:35:C7:C1:4A:9F:D0:69
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC4255464D5BD7F430CF2EBF1AFE57A7B
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xQSnqro2xpXpo2UI8DXHwUqf0Gk.roa
Signing time: Mon 01 Jan 2024 08:30:29 +0000
ROA not before: Mon 01 Jan 2024 08:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13627
IP address blocks: 2.56.164.0/24 maxlen: 24
85.202.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:54:64:d5:bd:7f:43:0c:f2:eb:f1:af:e5:7a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c504a7aaba36c695e9a36508f035c7c14a9fd069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:aa:6c:42:72:22:ac:f5:05:71:74:b8:76:
2b:a7:f1:d5:09:26:f2:5e:24:10:9d:57:04:ff:0b:
95:ff:a0:43:33:a1:60:bd:b0:e5:40:ff:c9:e7:d1:
31:88:65:80:f8:d6:b0:00:29:b9:00:c8:49:52:97:
4d:7b:7d:2b:71:da:c0:5d:2b:dd:cb:7d:9a:a7:21:
fb:85:2f:b0:3f:2e:ff:9b:80:b9:fa:a9:d3:91:ed:
bc:d7:47:d9:d6:5b:09:7d:b2:d2:38:26:65:57:d4:
c4:69:ed:a6:4d:9b:40:28:5b:0b:8c:56:d8:bb:d8:
71:68:85:7c:ef:3b:b9:fa:f0:39:55:00:df:64:6b:
98:d4:03:08:43:f8:89:51:b5:dd:28:df:08:87:ac:
51:4d:54:6f:e1:27:ec:28:b1:d1:22:5e:d3:fc:3c:
71:bf:eb:2b:d1:fa:f6:90:03:0c:f4:6f:2c:8d:15:
ff:50:d0:dd:17:b2:ea:95:09:14:c7:4e:1a:64:67:
90:c8:07:16:ca:bb:e7:65:45:88:1d:f1:c1:24:53:
5b:af:1f:d8:4f:ea:51:46:80:57:e3:cf:5f:3b:c8:
1d:a9:2d:81:fb:bf:86:f7:dc:68:f2:80:37:1b:3f:
38:a7:5d:d0:00:7c:54:87:54:39:f0:45:86:89:e2:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:04:A7:AA:BA:36:C6:95:E9:A3:65:08:F0:35:C7:C1:4A:9F:D0:69
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xQSnqro2xpXpo2UI8DXHwUqf0Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/24
85.202.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:da:60:c2:f8:40:6f:71:02:18:68:ed:1b:41:d5:d2:23:68:
af:5e:09:11:d4:ec:01:9c:81:8b:65:51:ad:10:78:a6:6b:b6:
a0:af:3d:6a:b4:7c:81:dd:b1:56:15:e3:29:44:1e:ce:1f:f4:
25:08:2a:60:e1:cf:cc:36:ae:fb:0f:89:37:f1:f4:f5:12:b5:
94:19:d8:a3:52:03:9a:f0:6e:3b:cb:5e:cc:00:94:b6:0a:10:
f7:16:07:f4:5d:b4:f1:8f:0b:3b:e0:15:ec:c7:dd:d5:5f:d5:
33:71:5f:e5:35:2b:c1:fc:f3:d8:0c:c5:ad:97:51:7a:be:68:
b5:09:63:00:9f:d1:09:22:c0:5a:1c:d0:b0:6c:13:f0:e3:29:
e0:18:22:37:1d:9f:99:49:ca:fc:f3:44:fa:16:ce:72:73:4f:
7e:29:aa:43:eb:52:f7:a2:a5:57:14:d5:98:cc:1c:7f:5f:53:
63:e1:ab:e1:bc:f3:a9:bd:d9:f9:c4:9e:a7:c9:ff:ed:07:3b:
0f:52:e4:22:a2:35:0b:ea:d2:4e:99:3c:f7:40:a4:7c:71:57:
e6:0d:40:2c:3f:c4:a2:00:fe:c5:b5:6d:b4:5a:5b:15:82:f6:
26:52:9a:be:9b:87:b4:66:a5:bc:70:ac:0b:c9:e1:be:eb:fb:
5f:b4:c4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 18:18:48 2024 by rpki-client on console-ams.rpki-client.org