Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/XHgh9VE1piNeT8CiINEjbtJMTi8.roa
File: XHgh9VE1piNeT8CiINEjbtJMTi8.roa (raw, json)
Hash identifier: o5aOjYI20PmZjIr0a7BxYt3d/4CPhgirChXJwLoadbg=
Subject key identifier: 5C:78:21:F5:51:35:A6:23:5E:4F:C0:A2:20:D1:23:6E:D2:4C:4E:2F
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 018CC727407EE734693D4FE95A64D740D2A9
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/XHgh9VE1piNeT8CiINEjbtJMTi8.roa
Signing time: Mon 01 Jan 2024 22:31:27 +0000
ROA not before: Mon 01 Jan 2024 22:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 185.243.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:40:7e:e7:34:69:3d:4f:e9:5a:64:d7:40:d2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Jan 1 22:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c7821f55135a6235e4fc0a220d1236ed24c4e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:75:50:a1:ba:90:9c:35:e9:48:14:2f:19:
d2:c9:fb:57:60:79:25:5e:40:0e:f5:8f:15:84:bf:
c2:ea:af:2d:ec:ab:1b:b0:99:0f:26:7e:19:65:c0:
e7:6d:5d:f0:d1:26:1e:a8:57:8e:70:f0:f9:b5:82:
96:eb:4d:32:60:34:0a:b3:6b:26:a2:5a:ca:25:4a:
14:db:b1:2a:b6:3b:ee:c1:ca:cf:da:61:3c:09:92:
2a:88:2b:2b:2b:92:cc:11:ef:ce:e1:f3:4e:4a:0e:
c0:53:c2:1f:91:f4:15:92:22:30:f8:45:d9:7f:d6:
83:5d:85:ff:7c:a4:66:37:4c:fa:4d:21:0e:6d:2f:
f2:97:3a:c7:b1:4a:0b:8b:7f:e6:b3:82:22:45:74:
65:8d:32:c0:1d:c5:c1:25:43:e4:4e:b9:7a:95:bb:
4b:50:11:ec:9a:56:d3:02:02:b1:34:d8:2e:a1:91:
e2:80:84:f5:80:e0:51:c1:63:a5:b5:8d:1f:d4:f2:
45:95:25:58:2d:f7:c4:78:86:27:b9:00:d3:f4:7b:
ed:7f:20:91:a4:88:07:39:a4:63:e6:75:c8:9d:30:
ef:62:d9:74:99:05:66:2f:df:6f:9b:f6:28:cf:77:
25:b7:fa:d4:e6:b4:9f:6c:a7:a1:6d:7b:1b:59:06:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:78:21:F5:51:35:A6:23:5E:4F:C0:A2:20:D1:23:6E:D2:4C:4E:2F
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/XHgh9VE1piNeT8CiINEjbtJMTi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.24.0/22
Signature Algorithm: sha256WithRSAEncryption
56:14:4f:1d:2a:d4:74:7a:0e:f1:17:dd:1e:38:ad:b1:bd:ad:
23:1e:56:d3:7b:0e:f1:f0:fc:21:44:76:47:db:87:6f:a3:d3:
71:16:25:3e:41:74:09:30:e2:fe:a5:6a:ce:07:19:6a:49:59:
c4:43:b9:f2:d2:bf:f5:01:32:83:4d:e8:2e:ae:6e:3c:e4:41:
08:65:1f:6e:ac:49:57:2b:0b:e6:12:62:9d:1d:95:d1:b7:78:
4c:7b:fe:0d:c9:90:03:f3:b4:c0:d5:b6:cc:f4:f0:93:86:82:
e3:3f:67:14:b4:03:b1:fe:73:cf:c7:f8:42:8a:a0:62:63:75:
05:75:69:d7:8d:dc:f6:c4:ee:e1:8f:9d:8b:d6:11:2b:f2:0e:
b8:cf:c4:84:9d:c4:49:36:a4:c8:fd:e2:ba:6b:ac:b6:59:57:
69:dc:bf:df:57:0b:91:fb:a4:ad:5e:b3:87:a2:ed:aa:90:6d:
a1:b7:83:c8:a5:5e:59:b4:61:e0:e2:14:5f:0d:75:be:78:8e:
4a:75:6d:f6:45:9e:a7:0f:e4:83:37:0b:e8:77:3f:85:55:dd:
24:64:b9:52:77:af:21:88:4e:ba:ce:7b:d0:5b:db:71:42:e1:
1c:5b:6f:8c:c7:4f:0e:5a:95:ee:7a:51:0d:c8:13:3f:b6:a0:
fa:05:16:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 08:59:50 2024 by rpki-client on console-ams.rpki-client.org