Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/XCzXDCVJyGO8GS9ksaDduV3e2IA.roa
File: XCzXDCVJyGO8GS9ksaDduV3e2IA.roa (raw, json)
Hash identifier: xK/EVG8zRWt9rCZhhtLmPA8PVNxGjkB5jq5kl0YkqQw=
Subject key identifier: 5C:2C:D7:0C:25:49:C8:63:BC:19:2F:64:B1:A0:DD:B9:5D:DE:D8:80
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 018CC64A73C5684121A0B93A20F820C08673
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/XCzXDCVJyGO8GS9ksaDduV3e2IA.roa
Signing time: Mon 01 Jan 2024 18:30:17 +0000
ROA not before: Mon 01 Jan 2024 18:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1729
IP address blocks: 131.116.0.0/16 maxlen: 24
81.228.8.0/24 maxlen: 24
81.228.9.0/24 maxlen: 24
81.228.10.0/24 maxlen: 24
81.228.11.0/24 maxlen: 24
192.150.84.0/24 maxlen: 24
131.115.0.0/16 maxlen: 24
192.16.152.0/24 maxlen: 24
192.16.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:73:c5:68:41:21:a0:b9:3a:20:f8:20:c0:86:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 1 18:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c2cd70c2549c863bc192f64b1a0ddb95dded880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:a8:e7:a5:2e:4c:90:2b:3b:18:42:80:e8:
d8:0d:0f:83:27:fe:2e:35:60:77:7e:21:0b:e1:5e:
a9:26:25:3a:21:ab:d4:04:10:7c:0e:37:09:09:cb:
68:7d:71:a8:ca:b4:36:f5:ae:83:96:45:46:0d:90:
56:11:5f:23:b9:30:77:35:05:26:cf:c7:c7:a1:30:
27:08:bf:07:fd:6b:97:4a:b0:3c:df:c7:4d:68:19:
f6:a9:11:1c:01:c0:bb:7d:b9:2b:a8:7c:d9:28:fa:
d7:98:1e:da:98:52:01:4a:30:d9:0b:00:54:34:34:
ef:e9:b3:1a:2d:7f:e7:7a:71:7d:02:56:14:ec:37:
f6:6f:34:dc:da:bf:e7:23:c2:16:a2:62:14:56:82:
86:e0:f0:f4:56:ce:40:fa:ac:7d:f6:e1:d0:9e:d9:
11:48:fb:fa:67:38:ea:98:3f:d2:c0:36:de:6d:f4:
e6:bc:96:82:4f:2a:a4:1e:dc:b9:f2:1d:37:b3:e9:
22:d3:50:e2:f3:5b:d7:fa:2c:d0:6a:42:11:74:a4:
cf:bb:31:21:49:b8:3a:51:7d:8b:c5:fe:2c:9b:6c:
4b:a1:31:33:f0:df:09:33:14:bc:53:67:45:cc:62:
7f:98:11:21:14:3c:73:a4:e7:67:81:c4:68:7f:61:
52:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2C:D7:0C:25:49:C8:63:BC:19:2F:64:B1:A0:DD:B9:5D:DE:D8:80
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/XCzXDCVJyGO8GS9ksaDduV3e2IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.228.8.0/22
131.115.0.0-131.116.255.255
192.16.152.0/24
192.16.154.0/24
192.150.84.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:48:0e:48:c1:87:08:64:e7:ff:fc:3b:41:fd:e2:ee:96:08:
5f:9c:00:15:64:7e:07:da:aa:9c:92:be:bd:f0:bc:5a:50:ff:
5d:b3:20:64:69:b6:9b:cc:ab:e8:a6:7f:65:f2:d5:df:78:55:
d2:7f:a8:41:0b:3f:a3:29:11:8e:75:1e:dd:f6:e1:95:3f:50:
82:b1:48:5a:2e:a3:93:df:a1:1d:97:a9:6a:13:d3:10:87:fb:
b8:23:0e:ee:a4:7a:7b:87:da:ee:20:cf:5b:82:8e:95:a1:25:
0f:e8:31:c0:c2:ea:67:78:69:b2:1f:76:bd:73:b5:ef:a0:b6:
e8:de:b8:45:02:11:89:30:71:26:e6:43:a7:f4:19:4e:f9:67:
b1:d0:d5:d4:aa:26:30:ea:60:b3:f0:3b:9f:c1:d6:7d:32:43:
e9:c7:86:ca:de:1d:33:85:26:07:52:dc:ed:3f:f1:93:e3:88:
98:22:ab:21:15:da:c4:82:e3:b0:5a:21:b6:92:87:c9:2e:c3:
5c:97:4c:bd:e5:27:0a:55:03:1a:e9:ba:96:1c:02:13:1f:28:
c3:3b:e4:26:30:3d:fb:5f:9b:38:f7:cf:4b:5e:30:e9:c6:56:
64:b8:c3:4e:85:0f:df:21:eb:37:aa:3a:ca:ae:b1:cb:d6:a3:
8b:6e:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:44:31 2024 by rpki-client on console-fra.rpki-client.org