Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/XWSuYIY-y_Sya5OxmXkQqjup0gc.roa
File: XWSuYIY-y_Sya5OxmXkQqjup0gc.roa (raw, json)
Hash identifier: 9QVWsqoBncVVxPPAkJC0HV52oWAgLzg1gTvmGQ68mTI=
Subject key identifier: 5D:64:AE:60:86:3E:CB:F4:B2:6B:93:B1:99:79:10:AA:3B:A9:D2:07
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 018CC870B2D77BF33EFE0FCF5107CD8A3649
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/XWSuYIY-y_Sya5OxmXkQqjup0gc.roa
Signing time: Tue 02 Jan 2024 04:31:18 +0000
ROA not before: Tue 02 Jan 2024 04:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43151
IP address blocks: 185.122.140.0/24 maxlen: 24
193.93.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:b2:d7:7b:f3:3e:fe:0f:cf:51:07:cd:8a:36:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 2 04:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d64ae60863ecbf4b26b93b1997910aa3ba9d207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:57:31:f4:65:75:40:8c:64:2e:77:c1:e3:d2:
b2:c8:5b:b6:0c:cc:34:3d:48:c4:9e:f3:7d:b4:a3:
0c:46:d8:e3:5b:3c:cf:29:69:01:77:a9:c6:5d:cd:
1f:20:61:68:9f:d5:69:18:0b:fe:f7:41:dc:29:a5:
93:ea:f9:14:35:8b:e0:b7:99:1f:29:32:ee:94:f0:
7a:62:96:55:70:e0:7f:52:a8:81:94:40:c1:72:38:
ce:7f:ad:a4:14:0f:36:db:94:7a:1d:60:ac:8b:06:
65:c8:ed:2c:f7:9b:33:f1:9b:92:49:63:cf:8d:4a:
4c:05:a2:4d:8c:7e:24:f2:ea:10:a5:9f:11:23:c6:
d8:51:d0:26:62:e8:aa:f1:9d:96:77:d5:9b:b6:17:
6e:ef:46:76:d1:e3:e9:3a:da:e9:c0:fd:90:30:5a:
e6:20:0c:7e:f4:a8:d7:09:0c:9d:3a:d9:f3:87:22:
bc:d6:74:98:d3:28:d8:80:3f:b1:07:0a:7c:be:10:
fd:04:f4:22:3f:3e:b8:fd:3a:f4:4a:21:76:22:0c:
02:c4:c0:47:c1:41:95:f1:7b:6a:1f:83:26:43:99:
a5:f8:25:7c:03:26:d3:86:8a:3a:60:4a:f8:d9:f1:
c4:b2:a5:9d:23:b3:3d:ee:1a:5d:9d:47:29:26:b1:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:64:AE:60:86:3E:CB:F4:B2:6B:93:B1:99:79:10:AA:3B:A9:D2:07
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/XWSuYIY-y_Sya5OxmXkQqjup0gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.140.0/24
193.93.63.0/24
Signature Algorithm: sha256WithRSAEncryption
87:fc:a5:93:0b:26:32:9a:74:44:e1:3e:ca:06:38:0a:8c:dc:
1c:45:f5:43:5a:6d:94:81:9c:4a:7e:77:70:76:7f:ff:ba:7d:
c0:60:73:88:38:c2:cf:80:97:49:6b:ba:e1:ee:a9:04:65:50:
41:37:2b:17:12:97:6f:9e:e5:e5:e8:f1:24:25:15:7e:3c:74:
ba:0c:21:7f:ff:03:1f:50:61:d0:b3:3e:a8:c6:2d:39:f1:fa:
e1:6f:b3:42:19:6c:ef:9f:75:0d:67:5a:64:1c:a7:31:01:c8:
96:9f:33:8c:44:ce:92:ed:9c:47:2e:c2:a9:0d:51:a4:cb:74:
6b:ad:e1:d1:28:14:aa:b2:b3:87:bd:da:71:19:9d:6c:21:4a:
4b:e5:3f:93:ce:06:32:f2:35:a1:58:25:aa:e9:83:b2:80:0d:
d6:ad:dd:c2:d9:1f:a8:7d:2b:8c:6a:9f:6c:2c:fc:41:e7:9b:
0a:26:34:2d:ac:dc:5a:5d:6a:cf:e1:74:b1:a3:25:65:ff:14:
28:9e:b1:8d:24:17:4d:97:b7:e6:ca:46:2d:93:08:6a:f3:36:
b1:53:35:50:01:c4:d3:0c:f8:77:5f:95:07:62:e2:d9:62:87:
60:b9:a7:19:79:d6:88:04:fe:32:9c:d9:41:37:6e:55:14:54:
25:5e:ae:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:21:48 2024 by rpki-client on console-ams.rpki-client.org