Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/Xlcf-9Wledgl1z9cCjZ8CUpKYmU.roa
File: Xlcf-9Wledgl1z9cCjZ8CUpKYmU.roa (raw, json)
Hash identifier: tReKZhv1IWlK1n8uwjph5+dBy1lxrpuGLdUfCNZSL0o=
Subject key identifier: 5E:57:1F:FB:D5:A5:79:D8:25:D7:3F:5C:0A:36:7C:09:4A:4A:62:65
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 018CC80153A2E423AEEC421ADB73B1336821
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/Xlcf-9Wledgl1z9cCjZ8CUpKYmU.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8258
IP address blocks: 195.64.224.0/22 maxlen: 22
195.64.227.0/24 maxlen: 24
195.64.228.0/24 maxlen: 24
195.64.254.0/23 maxlen: 23
2a02:2540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:53:a2:e4:23:ae:ec:42:1a:db:73:b1:33:68:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e571ffbd5a579d825d73f5c0a367c094a4a6265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:ca:50:c7:37:28:9d:77:22:14:5c:20:81:
4d:e5:16:05:93:fd:c3:89:ac:ca:5a:9c:5e:0a:d2:
37:a6:0c:79:79:af:3c:c6:b3:c7:c6:47:0e:eb:65:
8d:00:f2:07:2c:d2:e3:de:63:a9:e5:06:14:5e:7e:
03:e9:3c:6c:c9:38:b8:3d:4a:cc:e7:fc:6f:22:5c:
4a:20:d7:ba:77:12:bb:03:0c:25:19:05:85:33:3b:
da:78:e4:18:63:b9:58:9f:04:f3:57:5f:ce:19:95:
c4:79:9d:21:88:b2:9a:ab:d0:65:da:3d:27:e0:70:
1b:21:4e:cd:6f:f1:ad:f9:dd:de:58:e8:76:d8:58:
b1:93:7b:f7:12:c8:82:45:8a:2f:dc:a1:49:07:6a:
14:0d:18:c7:59:40:3e:37:dd:a6:10:83:26:c6:91:
74:72:19:50:04:b5:b7:45:04:45:64:de:a5:6f:7a:
13:f1:d7:33:9f:f9:95:cf:be:a8:d5:98:e1:2f:8e:
64:a0:61:1e:50:42:01:ae:6b:28:ae:c1:da:df:64:
0c:25:8b:23:78:3d:b5:38:db:f1:da:d6:69:e4:99:
7d:e5:94:09:4b:f7:84:bf:e0:88:4a:09:26:b3:28:
fa:09:4b:32:88:a8:7b:e4:17:a9:a0:8f:f9:7a:cd:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:57:1F:FB:D5:A5:79:D8:25:D7:3F:5C:0A:36:7C:09:4A:4A:62:65
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/Xlcf-9Wledgl1z9cCjZ8CUpKYmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.224.0-195.64.228.255
195.64.254.0/23
IPv6:
2a02:2540::/32
Signature Algorithm: sha256WithRSAEncryption
8c:d8:7f:f7:cc:8c:8d:94:8f:2b:6a:71:a1:b2:02:9f:9f:18:
d6:98:ef:91:a0:5f:f9:f5:ab:53:38:ab:df:f3:95:df:e4:a9:
10:50:03:76:e5:87:47:e5:6c:14:9f:72:43:aa:8e:8d:4b:ce:
f5:6c:94:35:61:07:50:3c:27:4c:63:87:a0:d0:8e:b8:2a:06:
d8:d9:a6:55:c1:a5:2e:5b:f2:ee:46:5f:e7:3d:7b:56:de:52:
a3:40:52:c0:a4:dc:c2:3f:c0:20:17:77:59:15:f5:a7:f3:90:
8d:3a:82:a5:0d:73:7d:f2:7b:4b:96:48:75:08:94:90:3e:66:
2e:da:01:9b:44:73:57:1c:71:72:5b:7d:6a:ba:d8:4e:7d:a1:
2b:f7:9b:e9:6d:5b:78:41:ef:0d:4b:11:93:c2:81:00:c9:e1:
9d:e8:d2:af:18:bb:22:8b:9f:90:c1:53:a3:e8:48:95:dd:ea:
c8:06:2e:1e:39:91:c6:c6:e6:ac:29:b4:1f:0d:99:3a:25:1a:
18:27:23:61:28:75:78:2d:4a:f2:81:1c:3a:bb:61:10:82:5d:
c5:97:a8:df:46:39:5b:2d:6d:51:1b:13:89:43:10:52:6d:bf:
b1:24:07:65:28:ca:61:9b:06:c2:ea:5c:94:f2:29:9e:0e:d5:
07:f9:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:39:42 2024 by rpki-client on console-ams.rpki-client.org