Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/xBN0jtI0CXCpDXka0-yeZBUN41g.roa
File: xBN0jtI0CXCpDXka0-yeZBUN41g.roa (raw, json)
Hash identifier: SnvkpUHLF0jkVJ6iAtCiEgwZ2cFtc9DQUfTb3umIRkE=
Subject key identifier: C4:13:74:8E:D2:34:09:70:A9:0D:79:1A:D3:EC:9E:64:15:0D:E3:58
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018E61AB12919C5A48C891BC62EAC4FC3588
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/xBN0jtI0CXCpDXka0-yeZBUN41g.roa
Signing time: Thu 21 Mar 2024 15:39:44 +0000
ROA not before: Thu 21 Mar 2024 15:39:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 194.179.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:ab:12:91:9c:5a:48:c8:91:bc:62:ea:c4:fc:35:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Mar 21 15:39:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c413748ed2340970a90d791ad3ec9e64150de358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:a1:b3:db:6b:dc:a1:6d:3f:8b:48:e6:e8:
cc:ee:29:10:71:f5:f6:bd:c9:60:74:af:02:ed:e6:
2e:a5:af:d7:75:89:9d:5d:83:55:f7:bb:cf:37:23:
07:1f:f0:12:55:10:a4:48:0c:fb:20:c6:c7:37:7f:
9f:3f:34:9e:bf:4c:86:37:74:49:a6:0a:65:97:2b:
70:63:6c:c7:59:53:fa:7a:84:d4:a9:7e:c0:eb:06:
46:18:61:d0:ce:a8:df:db:84:46:db:99:2f:2e:cc:
07:73:be:82:63:bd:54:85:ee:87:f7:1b:79:1d:f5:
cf:6b:29:c3:91:8e:12:36:49:e2:88:30:32:46:a6:
e0:13:65:94:24:19:86:ab:96:44:39:33:99:f1:b5:
44:c4:aa:1c:e6:9c:9c:b4:72:75:dd:46:ba:b8:06:
07:36:a9:9f:c8:1c:62:10:6f:9d:5c:12:dc:e1:c7:
ed:53:cd:27:94:f4:b9:cc:8b:49:1c:29:b5:c9:1b:
94:c2:62:02:47:32:a6:4a:51:e0:d4:07:94:43:2a:
ad:68:a7:83:df:17:4e:df:a2:37:1f:10:3d:5e:0a:
ec:6c:f2:6b:03:0e:28:10:f1:e0:42:04:01:be:7a:
c6:26:8a:aa:b8:d8:6f:da:80:39:51:b7:74:c6:c6:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:74:8E:D2:34:09:70:A9:0D:79:1A:D3:EC:9E:64:15:0D:E3:58
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/xBN0jtI0CXCpDXka0-yeZBUN41g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.136.0/23
Signature Algorithm: sha256WithRSAEncryption
69:d5:9a:bc:42:40:cc:8c:fa:0a:29:6c:9c:4d:67:d4:52:89:
7e:6c:fc:53:75:44:d0:1b:6d:e9:8e:07:92:cd:82:39:5f:10:
84:2a:0f:51:83:0c:3a:cc:3e:01:3c:d8:b8:c4:db:a2:7c:90:
85:9e:6b:a3:40:89:8a:2d:46:55:ca:bc:ee:79:68:1a:36:1b:
4c:a8:36:a1:3f:e4:ce:f8:3a:79:07:f9:cf:43:81:49:96:3a:
e8:f6:fc:a5:c7:98:c9:d9:cf:75:99:8c:c8:2d:d2:d9:a5:7b:
94:fc:cd:41:de:ad:88:72:c3:f9:d0:a8:17:40:14:06:9d:01:
21:14:0b:f2:12:6b:25:f6:90:7e:30:ca:5e:60:a8:ac:7a:14:
8f:78:4e:28:3e:5f:55:44:d9:fa:ae:70:9f:0e:b7:93:6f:9e:
f3:c9:f8:a3:b7:c0:49:f7:0e:67:2b:55:2b:61:88:df:e5:cc:
d7:4f:f4:1e:1f:6d:e0:ee:ed:74:86:9f:60:15:c1:f7:57:8e:
7a:55:b0:2d:a0:c6:7b:ad:ab:9b:53:0e:4c:b3:92:64:65:01:
3c:67:12:db:7c:b3:cf:d8:07:fb:85:65:dd:84:f8:c7:6b:2d:
a6:1c:55:89:03:cd:c7:58:59:79:f3:0c:c9:56:57:43:e8:b1:
7d:ae:fc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:08:08 2024 by rpki-client on console-ams.rpki-client.org