Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/xkD1SLfNY_XXxLWngVoUAY_iJo8.roa
File: xkD1SLfNY_XXxLWngVoUAY_iJo8.roa (raw, json)
Hash identifier: yR1ZrEDgaBLrYRXNqlvcMSB68mIUxbFSkmgKG+IsrE4=
Subject key identifier: C6:40:F5:48:B7:CD:63:F5:D7:C4:B5:A7:81:5A:14:01:8F:E2:26:8F
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 018CC8DE6C62B21615F6FE59C3102F1D54AC
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/xkD1SLfNY_XXxLWngVoUAY_iJo8.roa
Signing time: Tue 02 Jan 2024 06:31:09 +0000
ROA not before: Tue 02 Jan 2024 06:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60718
IP address blocks: 185.18.171.0/24 maxlen: 24
185.18.168.0/22 maxlen: 24
185.18.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:6c:62:b2:16:15:f6:fe:59:c3:10:2f:1d:54:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Jan 2 06:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c640f548b7cd63f5d7c4b5a7815a14018fe2268f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9a:c9:52:48:ed:92:af:b3:01:a2:12:7f:ce:
bd:cf:fb:6a:19:d2:66:69:26:73:0a:9e:5a:f9:07:
34:15:de:ff:28:5a:23:55:9a:9a:1d:3e:fb:6c:5e:
ad:f5:c6:76:82:56:0d:0e:c0:62:5a:c7:49:4d:3c:
a7:48:3f:a8:c5:4d:a9:04:7d:33:35:9b:37:21:a8:
2e:9c:a4:d4:fd:5b:64:31:68:f8:dc:29:16:10:a1:
9b:20:38:83:b6:aa:6a:0a:90:d5:fe:4d:88:7e:c8:
d5:6d:72:0d:bd:e1:12:59:2e:65:e8:fd:5a:7f:2b:
1e:b0:43:23:08:d8:df:78:1f:32:58:5c:32:44:88:
af:b4:b2:ba:f1:87:6d:73:97:e3:32:65:65:3b:38:
6a:83:4a:e1:1d:1e:77:7c:e1:36:52:2d:3c:f2:6d:
fb:1d:89:21:93:76:8c:fd:c3:d1:d9:7f:d8:91:a7:
78:b3:e9:ca:6e:c2:f5:40:2f:ee:70:4a:33:d4:5b:
80:38:ab:7b:3a:7e:f1:e3:d2:bb:da:39:d3:36:58:
d9:23:a6:7b:87:09:1f:a3:33:85:a7:8e:58:38:c4:
fc:42:b5:b1:3f:41:c0:07:2c:7a:a0:36:13:1a:e5:
a1:af:e4:bc:f9:fe:3b:bb:71:65:a3:88:a1:a3:ef:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:40:F5:48:B7:CD:63:F5:D7:C4:B5:A7:81:5A:14:01:8F:E2:26:8F
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/xkD1SLfNY_XXxLWngVoUAY_iJo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.168.0/22
Signature Algorithm: sha256WithRSAEncryption
40:05:ca:4a:21:40:2b:f5:28:36:07:f3:f7:41:2d:c0:29:03:
1e:c0:38:d5:70:37:09:23:fd:0f:c1:63:5b:0a:96:e1:96:ef:
d0:6c:7c:8e:48:16:2c:2f:c8:5a:25:dc:83:8f:ca:c1:c6:fb:
18:21:72:98:4b:86:b3:b6:0b:6b:44:3b:08:ad:13:89:e8:47:
e1:a8:cb:ab:53:50:95:2b:fc:05:fa:dd:71:fb:f1:80:40:c2:
cf:b1:11:4d:d8:9c:3c:0d:ad:31:9a:44:e8:a3:f8:92:d8:e7:
8a:6b:38:4e:45:54:e2:4f:a4:e5:68:8b:9e:f0:24:7c:06:8c:
aa:32:9c:1e:85:19:63:3d:f5:c1:b0:93:ab:cf:95:55:4f:b8:
25:4a:8d:07:3c:e4:e7:d3:03:f2:a0:39:59:a5:14:a0:71:7a:
3e:21:3c:68:87:b6:a4:98:79:b1:88:3b:60:8b:2e:cf:c6:67:
46:69:b3:7b:87:72:d1:58:ee:6e:86:63:48:6a:4c:a7:72:d9:
bc:3d:c2:2f:01:dc:a1:af:71:e3:b8:08:76:7d:17:1f:6e:72:
68:b7:9d:c4:4e:08:41:e1:29:83:6f:dc:9b:3c:1b:51:59:a5:
e4:5c:a7:68:53:63:13:8b:ca:f9:a3:63:6b:e9:af:63:86:8e:
53:c0:91:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:01:52 2024 by rpki-client on console-fra.rpki-client.org