Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/xWXTkXappmQCpR1UEOTHCIZ1738.roa
File: xWXTkXappmQCpR1UEOTHCIZ1738.roa (raw, json)
Hash identifier: ghSi+iqivpHR9MUYlDjuWcSZooW+LWixqDhmbI6gCj4=
Subject key identifier: C5:65:D3:91:76:A9:A6:64:02:A5:1D:54:10:E4:C7:08:86:75:EF:7F
Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial: 018CC2DB00A9356B6103F9D15D838E571F2F
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/xWXTkXappmQCpR1UEOTHCIZ1738.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7979
IP address blocks: 87.76.25.0/24 maxlen: 24
87.76.26.0/24 maxlen: 24
165.84.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:00:a9:35:6b:61:03:f9:d1:5d:83:8e:57:1f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c565d39176a9a66402a51d5410e4c7088675ef7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:af:dd:6a:58:9d:60:79:eb:47:25:cd:af:
3d:a8:83:b8:2e:e1:93:de:b8:4d:52:3b:1d:b0:44:
40:98:3e:ee:4c:2f:a7:09:ac:a9:22:e5:64:a7:e5:
77:39:28:27:c9:2d:ee:cb:df:35:18:b7:89:36:f5:
ef:32:69:95:b4:19:d2:fb:e0:d0:98:96:7f:a2:3d:
1a:3e:12:98:df:58:cb:8f:c0:e3:0a:28:df:b8:52:
77:9a:78:e3:72:54:81:f4:7d:a8:a3:33:b1:b2:17:
f7:a1:59:10:5e:a6:ae:27:e2:6a:b2:15:89:df:42:
ef:69:28:82:09:0c:4f:51:ce:62:9c:06:d5:53:b6:
24:d6:20:a3:26:42:9e:91:35:32:6b:fc:fd:be:c3:
93:b9:8f:06:74:3f:66:8a:28:1a:83:8e:58:75:fb:
12:c8:ad:fa:21:45:c9:9a:44:70:c8:02:61:10:15:
39:84:e9:f0:90:29:c9:0f:56:49:cc:4b:99:67:fd:
64:be:73:49:b9:07:e4:b0:ae:d9:93:20:8d:18:39:
c7:4d:bc:4e:38:9a:5c:1e:9d:e7:6c:12:93:73:62:
34:04:b1:15:d6:4c:db:ba:93:dc:cd:84:77:21:8d:
43:cf:f2:ff:64:5c:3b:75:fc:5c:37:d0:5b:38:6a:
2a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:65:D3:91:76:A9:A6:64:02:A5:1D:54:10:E4:C7:08:86:75:EF:7F
X509v3 Authority Key Identifier:
keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/xWXTkXappmQCpR1UEOTHCIZ1738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.25.0-87.76.26.255
165.84.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:82:ed:5c:9c:87:01:fd:2a:dc:06:a8:92:cf:85:ee:17:55:
9c:1a:dc:ba:ac:e0:f0:41:86:61:3e:0f:89:9a:b1:14:c9:bc:
9e:0b:e3:54:8b:af:a5:8c:f4:c7:51:39:37:02:a3:30:47:a1:
28:72:7a:8d:42:ef:f4:f6:2c:e0:68:dd:98:c7:5c:7a:14:d2:
31:05:8c:ce:4b:54:97:1b:56:9a:f1:18:38:36:4a:a8:63:32:
23:f0:21:85:e4:e8:5e:bc:3e:37:98:b2:44:ae:1c:23:39:23:
c8:ab:45:fc:ea:cf:d0:ab:ac:28:12:e3:93:c1:60:c6:8c:2d:
ea:01:22:49:e5:1a:e6:52:75:16:e0:b2:aa:ef:89:d5:ad:7b:
2e:23:4c:5c:98:66:a1:88:b5:5c:85:bb:94:3e:11:e8:5b:fa:
63:35:7a:94:73:d2:55:49:cb:66:5b:65:9a:ae:4b:4b:e3:4f:
22:6a:6c:15:4a:56:4c:b5:20:85:3f:2c:48:c2:3a:58:5a:de:
e5:7a:5f:10:a0:03:ea:32:e0:c9:d1:09:33:80:71:5a:5c:da:
bf:b2:95:77:a5:7e:1d:b3:0b:03:88:e6:ec:6f:8b:0e:ab:12:
93:00:6f:1e:31:a6:8e:7f:93:2b:99:da:aa:41:4f:34:c2:eb:
a6:6e:43:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 23 02:17:20 2024 by rpki-client on console-ams.rpki-client.org