Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/xkjx8bJrWUotk9dniKf8YdWmxxE.roa
File: xkjx8bJrWUotk9dniKf8YdWmxxE.roa (raw, json)
Hash identifier: 1YFfBvgjj8gZTM5cJeaOJ1lKeuWcI7tb9PX23K1weLY=
Subject key identifier: C6:48:F1:F1:B2:6B:59:4A:2D:93:D7:67:88:A7:FC:61:D5:A6:C7:11
Certificate issuer: /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial: 018CC86F3DF006036AE25430192022683440
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/xkjx8bJrWUotk9dniKf8YdWmxxE.roa
Signing time: Tue 02 Jan 2024 04:29:42 +0000
ROA not before: Tue 02 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25540
IP address blocks: 185.33.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:3d:f0:06:03:6a:e2:54:30:19:20:22:68:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
Validity
Not Before: Jan 2 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c648f1f1b26b594a2d93d76788a7fc61d5a6c711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:5b:a1:20:e6:65:d1:5c:e7:a5:12:0d:bd:
d8:64:6d:e1:71:e3:7a:e0:c3:38:68:4d:e3:8d:96:
38:ef:7e:f5:5e:86:a0:a9:a8:51:83:35:8f:45:c8:
fd:71:68:27:1f:c9:29:c7:b8:79:34:a7:77:83:54:
2c:db:10:b1:1d:9d:6f:ef:a1:a3:ee:b8:ac:6a:94:
fc:0f:3b:93:59:5e:63:9f:a8:e6:c6:19:9d:b1:b0:
30:a7:03:77:f1:d0:cb:e2:48:83:84:bf:b5:1e:1f:
61:8a:cb:66:ed:fb:8b:02:f6:f8:52:40:f1:67:a2:
04:1f:fc:97:c2:f4:ad:18:ff:3d:95:ad:c7:f6:11:
ad:f9:a2:b2:a5:76:b7:90:4d:e7:18:c8:17:0a:cd:
9b:06:39:d1:82:37:9f:58:dc:c6:84:44:c1:ab:74:
d1:d3:e1:96:1d:33:f5:18:06:43:7d:30:4f:d8:ce:
5c:f3:a9:4a:37:f2:c0:fc:05:3f:4c:c7:1f:56:8e:
cd:dc:d2:0c:17:78:06:bb:c3:42:0d:fb:7a:0d:a4:
c4:6e:f5:ce:44:78:5c:5a:b9:3b:09:65:96:f1:27:
15:34:6f:90:45:41:ee:dc:68:82:3e:bb:b6:57:fc:
fc:98:df:31:33:5d:52:f4:46:0a:d3:74:a7:06:15:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:48:F1:F1:B2:6B:59:4A:2D:93:D7:67:88:A7:FC:61:D5:A6:C7:11
X509v3 Authority Key Identifier:
keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/xkjx8bJrWUotk9dniKf8YdWmxxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a1:79:ac:8c:a1:39:af:71:b4:c7:dd:5f:03:35:76:27:f5:
44:90:05:ba:23:b3:65:59:ae:20:e4:ce:ac:a9:6e:3e:a5:27:
bd:7a:e3:1e:de:05:51:77:a0:b4:56:92:d2:5b:ea:84:dc:9e:
ac:f1:5d:c9:89:f1:14:c7:8c:24:df:42:52:d8:30:ef:55:2e:
03:49:d0:99:0f:e7:b0:6f:6a:4a:93:60:f9:fa:c1:44:a4:1c:
97:fe:05:ee:f9:c1:01:95:9f:0f:0b:2b:51:ce:68:ba:58:38:
5e:02:2d:dc:79:3f:bd:ff:f7:88:f4:63:39:b1:c4:6d:98:93:
86:af:9b:67:f2:92:a7:95:30:90:12:7d:c3:e4:11:b1:ff:c5:
b5:40:76:29:fe:0b:b9:31:68:b4:6d:30:5e:3e:85:c5:15:39:
d7:40:be:5d:b3:21:63:74:28:61:0e:22:37:67:e2:61:ca:69:
07:39:bd:59:29:3c:85:0c:87:9e:9a:3f:21:ff:24:9d:5f:9f:
3b:5d:c1:b5:b5:7c:8e:a7:dc:79:38:75:a1:1d:95:11:07:fd:
c6:f6:31:f4:fe:cf:05:0a:66:b0:e0:ba:ef:17:61:92:b4:6a:
57:e3:88:d1:f4:09:38:94:82:ca:0d:c4:e4:71:41:64:7a:00:
1d:1b:68:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:43:50 2024 by rpki-client on console-ams.rpki-client.org