Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xRhCU6Jm28MoHK55mLk12gcudUg.roa
File: xRhCU6Jm28MoHK55mLk12gcudUg.roa (raw, json)
Hash identifier: tmA8tXEuC0ixA1QYl8DRV5MspeOiyGRuno7z8IdvllM=
Subject key identifier: C5:18:42:53:A2:66:DB:C3:28:1C:AE:79:98:B9:35:DA:07:2E:75:48
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190212BC2B8A8BA168107507AFDC5AEE9E5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xRhCU6Jm28MoHK55mLk12gcudUg.roa
Signing time: Sun 16 Jun 2024 13:10:34 +0000
ROA not before: Sun 16 Jun 2024 13:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:21:2b:c2:b8:a8:ba:16:81:07:50:7a:fd:c5:ae:e9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 16 13:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5184253a266dbc3281cae7998b935da072e7548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:58:6d:7c:f3:54:b7:f9:8c:61:20:2b:2a:13:
78:08:ef:d4:ee:05:86:32:dc:16:aa:8b:b3:d6:f5:
a8:89:7c:da:79:4a:ea:d7:1c:81:08:e9:a3:cb:74:
91:17:e9:50:15:c8:de:f1:7b:66:76:52:31:ac:f8:
6e:bd:8e:54:9d:84:6e:1b:bb:65:de:57:87:2b:71:
40:85:95:c3:30:69:51:3c:25:6a:99:de:1b:46:d0:
d3:7a:68:19:fc:e7:5d:7b:5e:5c:63:f1:ad:eb:aa:
0b:20:95:a1:c0:45:cb:79:b9:5a:6c:c2:d2:1a:09:
a5:d5:2c:86:f1:a8:42:86:51:66:c0:4e:37:0b:30:
48:79:73:30:ab:95:a6:9d:53:f2:a6:45:95:ec:34:
d9:db:a5:7f:79:37:9f:d8:a7:eb:87:ae:3b:ad:98:
74:d3:65:d4:34:da:df:f7:db:0b:7a:30:ce:af:45:
88:70:b5:f1:d4:fa:a2:a3:06:3d:2d:a3:b9:3c:16:
6f:8c:c1:3b:a7:09:24:59:74:f8:9a:b1:8d:4e:0e:
8e:a3:ac:30:cb:f1:f3:b2:06:4f:38:01:77:38:7e:
9e:70:ec:51:24:d7:ee:69:69:72:8b:16:d2:2b:b7:
a6:3f:9b:37:5d:53:dd:c0:0a:14:df:d3:dc:69:d2:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:18:42:53:A2:66:DB:C3:28:1C:AE:79:98:B9:35:DA:07:2E:75:48
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xRhCU6Jm28MoHK55mLk12gcudUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:4a:63:56:84:1d:fa:9e:fe:cb:15:02:d5:48:3e:5e:ac:ee:
ca:af:da:3f:1f:cb:b7:1a:fa:90:45:cd:2a:b3:40:37:36:07:
e2:59:95:2a:c5:d0:f8:a0:3d:c0:94:a7:50:da:40:f2:e4:b8:
75:09:24:b1:e6:8e:78:e5:59:d3:20:7d:34:5c:32:f5:09:2b:
f1:a0:f2:d6:e2:ce:e8:58:11:b4:5b:96:57:4f:34:d1:9f:48:
1d:5f:d5:f4:27:9f:8c:90:7c:34:63:55:08:ab:be:e8:81:36:
cc:27:b0:94:0b:45:cc:10:f2:c0:66:81:0b:cc:ce:06:2b:1b:
2a:fb:7a:ff:18:c3:0f:ba:aa:78:8e:98:3d:ac:c5:a8:4d:46:
da:62:32:0b:b9:c3:45:6c:5a:08:5c:6c:79:3e:3d:47:24:75:
ea:70:c2:c1:c3:ad:ca:8c:98:c3:a8:36:b1:a2:2d:b1:7f:2b:
4e:55:13:49:83:13:be:63:54:3f:d7:e7:7b:b0:74:39:e9:35:
b3:84:84:1a:c3:6d:f9:d8:a0:db:3e:ad:03:9a:a2:5e:33:72:
d4:d9:0c:30:7a:7c:27:45:fe:43:15:07:b8:98:ea:9c:a2:1a:
0b:2d:cc:d2:45:99:69:e0:ed:72:e0:1a:94:2d:a7:ff:fd:f6:
e2:fd:48:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:46:01 2024 by rpki-client on console-ams.rpki-client.org