Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/xFHDl2EFXLlhwJW765m3wGHugoc.roa
File: xFHDl2EFXLlhwJW765m3wGHugoc.roa (raw, json)
Hash identifier: XKiKtBjnxIJjDalqTIJR/kKEV1HUg360dUwEk9ImX4g=
Subject key identifier: C4:51:C3:97:61:05:5C:B9:61:C0:95:BB:EB:99:B7:C0:61:EE:82:87
Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial: 018CC3490D2C68FA6309A672E39887C243AC
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/xFHDl2EFXLlhwJW765m3wGHugoc.roa
Signing time: Mon 01 Jan 2024 04:29:53 +0000
ROA not before: Mon 01 Jan 2024 04:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34893
IP address blocks: 185.112.53.0/24 maxlen: 24
185.112.52.0/24 maxlen: 24
185.112.54.0/24 maxlen: 24
194.30.181.0/24 maxlen: 24
2a06:6540:1003::/48 maxlen: 48
2a06:6541:1002::/48 maxlen: 48
2a06:6541:1003::/48 maxlen: 48
2a06:6541:1000::/48 maxlen: 48
2a06:6540:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0d:2c:68:fa:63:09:a6:72:e3:98:87:c2:43:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c451c39761055cb961c095bbeb99b7c061ee8287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:b2:85:fd:38:78:98:8a:71:97:a8:4f:72:
f6:21:bb:54:80:0b:74:25:29:01:a5:a0:70:ee:79:
35:35:34:49:74:3b:2f:0c:d5:1c:d0:d1:35:59:57:
37:ba:0b:82:c0:de:bb:7b:1e:b4:11:bb:45:b9:ab:
6a:a1:27:1c:83:2c:b6:c8:d8:62:e9:d3:32:de:d2:
d8:47:33:2e:c9:c6:fe:74:8a:37:82:5a:a4:e7:1b:
19:0a:94:9f:bb:6d:a6:c6:f8:8e:66:58:a3:7e:84:
31:8c:d3:df:06:de:4a:8b:32:44:81:b3:a6:7f:6e:
fd:f9:29:d5:6c:12:29:02:fc:50:00:99:51:bc:fe:
e5:bc:9b:f1:ce:ef:ff:67:4d:ab:a3:17:0a:72:69:
ed:d5:bb:ce:5a:53:05:9d:a3:c2:23:36:d9:59:c7:
67:78:4c:a8:6a:8f:34:61:67:a5:dd:89:41:c4:71:
26:70:5a:81:b0:89:2f:5f:75:4f:7b:5b:90:9a:7a:
c6:67:40:33:25:b7:6e:06:f7:07:66:0c:f4:53:6d:
72:c5:92:3b:51:72:2f:49:b5:d5:f6:51:3c:0d:1b:
12:af:a5:21:b9:c4:13:63:fc:e4:d9:90:3a:60:af:
c8:ca:99:7d:a5:19:fd:2e:44:d8:b6:c8:ee:c3:e4:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:51:C3:97:61:05:5C:B9:61:C0:95:BB:EB:99:B7:C0:61:EE:82:87
X509v3 Authority Key Identifier:
keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/xFHDl2EFXLlhwJW765m3wGHugoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.52.0-185.112.54.255
194.30.181.0/24
IPv6:
2a06:6540:1000::/48
2a06:6540:1003::/48
2a06:6541:1000::/48
2a06:6541:1002::/47
Signature Algorithm: sha256WithRSAEncryption
a5:2e:61:66:b6:4c:4a:5f:ab:dd:e2:3d:b5:36:91:aa:ff:65:
4c:8d:e3:08:33:a0:48:14:07:8c:df:14:c5:e9:b9:32:9c:d1:
0a:bc:44:41:da:56:5c:0b:7f:75:22:b7:8e:05:f0:68:76:8c:
31:24:c2:44:49:7b:72:64:be:69:34:c5:c5:09:bc:4d:07:23:
7a:a8:85:72:3b:da:95:fa:4b:e1:00:38:65:9f:1a:94:c2:2d:
90:9b:3c:91:e9:28:98:49:93:8a:d2:dc:0a:bc:25:40:cd:fa:
b0:a8:03:ad:d6:a0:9f:b2:38:1b:e0:31:f3:65:8c:2b:30:ac:
56:b3:5c:66:ba:ce:41:92:78:8b:1d:82:a3:d0:ba:d9:b6:b2:
9f:c7:96:fb:b0:89:a6:f4:c7:bd:4b:40:fe:22:c9:84:c4:c7:
ef:0c:3c:07:4f:70:a3:45:53:da:65:88:c1:9a:6d:16:d8:1f:
43:da:d1:34:34:96:10:f8:a6:92:5d:b5:32:59:10:bd:77:65:
de:c4:95:49:82:4d:f4:68:5f:15:ec:1e:be:f5:e8:cb:0e:86:
64:8d:a6:7e:cf:fa:5f:46:58:c0:43:a7:2b:44:92:4a:05:b7:
7f:2a:35:aa:1f:7a:ca:8f:51:72:db:0b:b8:d9:12:32:b9:16:
f0:c2:ed:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:55:44 2024 by rpki-client on console-ams.rpki-client.org