Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/xXjLe0wAzcszSw6KVojb0DudpRY.roa
File: xXjLe0wAzcszSw6KVojb0DudpRY.roa (raw, json)
Hash identifier: 0+P/nFTkfprOCo3Vl9w03GQ4MicdZXoMnvNe+llr0Mc=
Subject key identifier: C5:78:CB:7B:4C:00:CD:CB:33:4B:0E:8A:56:88:DB:D0:3B:9D:A5:16
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E1EACE1B54BC1FACE09500EF343C2A314
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/xXjLe0wAzcszSw6KVojb0DudpRY.roa
Signing time: Fri 08 Mar 2024 15:27:10 +0000
ROA not before: Fri 08 Mar 2024 15:27:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42240
IP address blocks: 185.46.175.0/24 maxlen: 24
185.161.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1e:ac:e1:b5:4b:c1:fa:ce:09:50:0e:f3:43:c2:a3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 8 15:27:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c578cb7b4c00cdcb334b0e8a5688dbd03b9da516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:d4:54:bc:94:f3:89:0d:a2:02:bc:97:19:
68:b8:83:54:62:e3:55:b3:97:4c:3e:f2:0b:a7:6a:
a3:55:c9:c2:15:af:de:e1:bf:b5:7e:96:50:ef:48:
6c:3e:87:9c:90:d4:ca:c7:2b:6c:04:d9:8e:dd:ef:
d5:63:89:7c:04:5e:25:0e:33:17:81:fd:6e:30:de:
67:72:96:73:db:d5:14:8f:26:94:fb:d2:c5:8f:82:
8a:a1:28:0f:a5:20:c0:ab:24:fe:de:d5:ef:64:de:
20:d4:5c:1a:16:dc:b2:c8:62:cc:80:64:f3:38:6e:
28:b8:f0:98:94:5e:3a:19:34:51:93:90:97:31:98:
53:1d:34:a3:43:5d:e2:22:e3:87:07:11:69:8f:68:
af:0b:62:eb:27:3c:fa:db:60:db:b0:aa:e6:b1:1d:
c3:79:28:de:d8:87:1c:cc:82:3b:26:89:27:a9:ff:
b5:18:ce:04:fa:d7:35:ba:09:0b:5c:69:8a:3d:c4:
90:e0:86:bb:9d:4e:f0:62:c1:41:4f:1e:61:1d:36:
3e:2e:76:ed:8a:f6:a6:95:3e:14:45:fc:41:12:c7:
0d:77:4e:ae:18:ba:1a:7a:7f:db:fa:22:ae:ad:56:
eb:1c:4a:2b:70:6b:a0:e8:e9:b8:73:45:ff:fd:eb:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:78:CB:7B:4C:00:CD:CB:33:4B:0E:8A:56:88:DB:D0:3B:9D:A5:16
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/xXjLe0wAzcszSw6KVojb0DudpRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.175.0/24
185.161.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c3:cc:22:f9:d2:73:0e:94:9a:bf:d5:39:ef:8c:4b:c3:66:
cd:53:c2:23:e0:55:93:9d:70:af:db:07:34:81:20:d9:98:f2:
5e:7d:0b:0e:fd:2a:a3:38:14:b9:6c:4d:30:cb:c1:32:7b:77:
de:5a:fb:44:74:0c:38:0d:ce:c8:16:bb:77:22:22:96:f3:0c:
26:e7:8f:39:68:3f:bb:5c:07:cf:a6:41:a8:59:03:09:6c:a7:
55:69:c1:af:c5:c7:12:fd:75:b8:0c:ef:01:f8:ce:4f:ea:7f:
58:b2:71:c8:04:bd:5c:64:ca:5c:ce:39:86:66:19:3f:d1:0d:
44:3a:f9:7e:4f:ed:d2:ed:aa:f7:0b:af:9d:a4:86:72:f0:d8:
68:67:45:c0:b9:fb:a8:5f:2e:7f:99:3c:97:34:4a:38:35:18:
c3:a1:de:d7:8d:90:19:85:3b:93:fd:d0:f1:71:f6:b1:e0:de:
57:7e:ce:f2:ea:9b:0e:c8:0f:40:84:ca:d2:79:89:13:9b:2c:
e1:1e:86:b9:8a:9c:9c:8c:63:74:6d:f5:b2:81:5e:a5:ab:5a:
e9:8f:9e:6e:b8:4b:c2:d0:57:6b:15:b2:39:ad:60:5f:d8:35:
20:b8:15:47:dd:4c:df:4c:8a:be:7d:4c:c6:bd:be:d8:83:89:
0e:a0:1d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:42:51 2024 by rpki-client on console-ams.rpki-client.org