Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/xjRqY1PE0UpjFF1kLH8erq2zhl8.roa
File: xjRqY1PE0UpjFF1kLH8erq2zhl8.roa (raw, json)
Hash identifier: 52NzW4kOm/zjd/L0Kr+3U2F3S49OgjpiYLNwePdoGD0=
Subject key identifier: C6:34:6A:63:53:C4:D1:4A:63:14:5D:64:2C:7F:1E:AE:AD:B3:86:5F
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 018CC5014BCFA0D4A0A4C839DF1088176D8B
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/xjRqY1PE0UpjFF1kLH8erq2zhl8.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59851
IP address blocks: 185.225.237.0/24 maxlen: 24
2a04:f280::/40 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4b:cf:a0:d4:a0:a4:c8:39:df:10:88:17:6d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6346a6353c4d14a63145d642c7f1eaeadb3865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:64:a9:70:f6:24:d4:ff:5b:f2:2b:5a:ca:5d:
a2:53:54:8b:69:bb:7c:0c:80:d7:ff:da:22:46:90:
ba:9e:0f:d5:65:d7:ff:e0:c7:df:03:56:47:c1:ec:
3e:05:8d:8f:d5:1b:f2:33:1c:d4:a4:13:7c:b5:ba:
11:7d:63:d1:f5:00:3e:74:f8:11:f4:ea:9d:19:c2:
33:18:d5:81:70:fb:14:9d:b6:47:24:0a:8c:3e:66:
22:b0:97:18:ce:ba:b8:70:11:90:8e:c6:e5:d3:92:
23:01:56:b6:b0:39:08:12:c0:25:08:55:d9:b2:f5:
b6:84:24:79:25:86:a8:a6:02:c8:e5:ee:34:fa:35:
58:03:fd:c2:f7:53:de:52:31:1f:44:9b:6d:58:30:
4f:b5:7d:ad:ce:74:11:3c:26:0f:5e:cb:a3:ad:c4:
3a:ae:29:c8:df:34:09:cb:ab:c5:90:37:05:57:1f:
e5:0a:5a:45:28:f3:f8:e8:1c:69:76:25:be:04:a3:
0a:68:9b:76:e8:91:57:c7:4d:ab:9c:fa:ce:1c:dc:
83:9a:32:d1:87:b1:b9:73:4f:dd:28:27:98:91:17:
29:0d:c6:86:a7:88:19:49:f8:aa:ba:89:88:14:59:
8d:5c:11:a7:ff:b4:47:39:31:0d:b7:b6:76:e8:39:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:34:6A:63:53:C4:D1:4A:63:14:5D:64:2C:7F:1E:AE:AD:B3:86:5F
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/xjRqY1PE0UpjFF1kLH8erq2zhl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.237.0/24
IPv6:
2a04:f280::/40
Signature Algorithm: sha256WithRSAEncryption
b0:e7:58:e9:f2:e9:a3:13:52:68:20:d1:91:b8:a2:e3:07:44:
47:e9:1f:ac:f0:d3:34:42:c8:4f:c3:65:46:5c:2f:97:e3:fa:
5d:ba:71:87:5c:6f:2b:ef:d9:ab:a4:72:b5:09:64:ba:2e:62:
8d:ff:d1:47:92:e4:08:02:aa:92:32:69:bd:75:19:b1:2f:9d:
13:01:68:f7:7b:41:69:f9:71:2c:96:d3:55:8c:54:dd:f6:45:
89:67:d0:3b:47:4d:e0:8f:9e:ab:32:4f:98:d3:0c:e4:55:8c:
df:89:ac:4e:ff:5f:23:3f:9c:8c:77:29:37:07:1d:dc:81:5c:
f3:63:94:6e:3a:33:82:92:d8:db:02:99:a8:99:5a:c8:0c:d1:
7f:a5:bd:2d:6b:4c:aa:73:96:ab:db:fa:9c:2b:d6:a9:97:b2:
fe:64:e2:ff:e2:46:de:da:cf:dc:93:95:e9:ec:08:35:8c:c2:
b4:87:26:f7:75:64:30:88:ac:50:25:1a:82:3b:f9:62:06:20:
20:59:b1:f6:cd:cc:5e:a5:21:1e:ae:2a:a9:2c:ca:f7:ec:b7:
73:4f:c4:85:b0:a3:2e:ac:09:41:63:6d:01:31:48:e2:2b:44:
6c:09:a8:a7:02:aa:c2:6d:09:b5:a2:4f:7a:2b:10:48:19:0b:
34:83:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:40:13 2024 by rpki-client on console-fra.rpki-client.org