Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/FXi1vQVx5ubWeAw4ZDMD4VBZ2yc.roa
File: FXi1vQVx5ubWeAw4ZDMD4VBZ2yc.roa (raw, json)
Hash identifier: /xZavsExFDgX790W8KQRVd78IuqSI5reHzufc8rnc8w=
Subject key identifier: 15:78:B5:BD:05:71:E6:E6:D6:78:0C:38:64:33:03:E1:50:59:DB:27
Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Certificate serial: 018CC727009F4516A190242B2BD3D9D1674C
Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/FXi1vQVx5ubWeAw4ZDMD4VBZ2yc.roa
Signing time: Mon 01 Jan 2024 22:31:11 +0000
ROA not before: Mon 01 Jan 2024 22:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211929
IP address blocks: 185.230.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:00:9f:45:16:a1:90:24:2b:2b:d3:d9:d1:67:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Validity
Not Before: Jan 1 22:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1578b5bd0571e6e6d6780c38643303e15059db27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:43:1e:1a:c0:f0:84:f0:10:a9:61:55:ff:
2b:76:19:15:71:f2:fa:ba:63:21:28:09:f0:bd:14:
70:1f:8b:33:13:fd:a6:f3:19:fe:cf:67:80:56:5e:
61:b4:bc:51:09:d5:ef:f5:2f:a5:41:39:e4:ee:70:
17:b1:a6:56:43:b4:38:32:aa:25:45:08:55:53:0b:
03:7f:e4:12:7d:44:3b:1c:30:50:d6:3c:3e:1b:93:
59:56:c9:90:c7:34:2d:8e:8b:43:ae:00:a4:99:67:
f8:8d:e5:f8:e8:d2:03:ad:cd:f3:6a:43:d8:cb:fe:
2b:ce:6d:a9:b8:44:a2:e9:8d:a6:98:8c:e6:3d:12:
8c:c1:0a:49:82:0e:d4:be:59:dc:20:2d:7c:a0:d9:
1d:55:cc:a2:89:59:9a:30:24:66:0a:2a:50:12:a8:
df:42:7f:9b:0c:5c:ed:e7:52:f8:c9:a0:65:0c:b7:
31:de:ea:03:f5:d0:c0:26:17:89:0a:62:02:ae:65:
03:50:fe:80:f3:e3:a8:a9:d9:7a:11:c5:63:af:78:
38:3f:38:9b:f7:1b:04:57:0a:a1:13:a6:e8:34:30:
70:c3:5c:51:ab:7a:02:4c:db:19:45:7a:d2:79:a4:
e4:8f:72:8f:42:75:d7:48:cb:2f:75:a6:a2:ce:e7:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:78:B5:BD:05:71:E6:E6:D6:78:0C:38:64:33:03:E1:50:59:DB:27
X509v3 Authority Key Identifier:
keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/FXi1vQVx5ubWeAw4ZDMD4VBZ2yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b2:c4:41:18:de:09:ea:75:d0:27:9d:4e:3f:df:9a:73:61:
cf:a5:b1:94:09:3d:fa:18:67:66:9a:a2:c2:b8:2b:34:74:6c:
bb:8e:0c:65:3c:fa:33:c9:eb:73:86:fd:58:01:c6:48:76:69:
b6:00:0b:04:aa:a1:4c:79:89:f4:e8:52:20:00:4d:bc:35:4a:
94:77:10:f4:06:a4:f3:a3:59:24:ee:e6:80:90:f1:7c:1a:db:
06:5d:d3:80:4b:50:e2:41:e7:d0:b5:cf:06:0b:ac:96:cc:92:
a4:d1:26:2a:8f:75:42:50:39:b6:7d:73:f5:ce:5d:d8:c4:44:
a6:b9:29:c0:e1:77:79:f6:a1:81:e0:eb:a7:ef:3b:7f:7f:8c:
8d:dd:b6:49:eb:08:e5:b9:1b:00:61:ec:d2:f2:28:41:c2:1c:
34:c2:ba:25:07:7d:33:56:0e:ac:aa:0c:f3:fe:57:11:7b:27:
40:69:c5:4a:31:c1:9b:e2:5f:0b:05:7d:25:f8:0e:cd:7e:ee:
4c:68:8a:98:e0:03:82:5e:a1:fe:59:60:ce:ac:b9:2a:bb:25:
08:ff:76:34:61:ff:43:ca:75:03:69:e2:78:f3:85:b0:ea:25:
ad:f0:88:66:f6:ed:2e:d5:1d:d3:65:b3:78:37:61:4d:fe:74:
ce:75:f4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:07:34 2024 by rpki-client on console-ams.rpki-client.org