Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/X7kMx1kMRS-H2kcOkSFoUc_7enY.roa
File: X7kMx1kMRS-H2kcOkSFoUc_7enY.roa (raw, json)
Hash identifier: U3yCCUszVPVm9LM8wpsO2Pkkyp5Rr9rqKUKakYmvS/Y=
Subject key identifier: 5F:B9:0C:C7:59:0C:45:2F:87:DA:47:0E:91:21:68:51:CF:FB:7A:76
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 018CC56DFA469FDB8340932C1A5CEC44A154
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/X7kMx1kMRS-H2kcOkSFoUc_7enY.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 185.198.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fa:46:9f:db:83:40:93:2c:1a:5c:ec:44:a1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fb90cc7590c452f87da470e91216851cffb7a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:62:dc:f2:d1:4c:6f:86:dc:d5:95:91:29:
7a:d5:e8:6c:9c:ab:ed:41:31:34:0a:39:25:a0:3e:
d7:99:4d:2e:6c:22:7e:cc:f9:e3:ac:46:e1:a3:a0:
e2:ae:42:98:e2:53:74:62:95:62:e3:e0:d4:2e:84:
91:30:5b:67:bb:4e:3e:c8:ea:11:ef:88:d1:94:45:
22:21:30:14:c6:2b:ea:30:4a:5d:81:37:ab:75:fb:
7c:5b:2a:4d:4b:70:00:67:e3:3b:3e:21:9f:c3:33:
1d:e1:16:02:1b:c2:3c:3d:05:3a:a6:54:c2:12:3b:
fd:a8:e1:d4:d1:83:f8:f7:e8:e5:e7:5b:ad:21:3d:
e9:f7:81:20:ee:b7:9b:55:0d:df:b4:ce:31:c9:8d:
f9:39:82:7d:54:dc:ab:19:c0:4e:97:6f:19:3f:87:
bf:b2:ef:f8:f8:df:b9:93:29:61:a4:b1:3b:60:8c:
2c:fc:4c:8a:03:4c:dd:7f:47:60:bc:9f:43:2d:6e:
7e:25:ad:b7:8a:60:0d:db:d0:ac:73:d4:66:da:48:
ee:f5:61:1c:30:48:22:4d:3f:6a:61:f0:d8:82:a8:
ef:ae:d2:0b:4c:d6:54:cb:5a:7c:8a:71:b0:7f:60:
f7:60:01:7a:45:5c:89:26:59:2f:b5:4f:2d:f7:1b:
6a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B9:0C:C7:59:0C:45:2F:87:DA:47:0E:91:21:68:51:CF:FB:7A:76
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/X7kMx1kMRS-H2kcOkSFoUc_7enY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.168.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:78:ee:d3:4d:3b:61:d9:e7:0f:49:a4:1e:21:81:f2:c6:8e:
2f:d4:c2:75:d3:44:e2:17:96:3b:cc:69:2f:f6:3e:1d:bb:e5:
7c:48:7e:df:bf:fe:92:1d:12:4c:f1:97:e7:79:ec:87:a6:91:
3d:87:c8:5e:76:ff:58:4d:b6:1b:79:41:a9:73:5f:5c:3e:2b:
e6:d5:4c:3c:71:ff:fe:61:b8:c0:97:5a:fa:27:fb:d0:4e:9e:
d0:a0:e4:12:73:da:34:0f:19:6d:3b:80:19:1f:71:2d:42:d4:
1e:39:89:93:df:76:b2:dc:c7:e7:91:69:66:04:6f:a4:28:39:
4d:64:46:97:0c:87:9b:17:49:dc:b4:ef:7b:6e:39:5f:86:01:
5a:0a:ba:75:38:51:8f:e8:03:67:97:18:41:8a:94:2d:ed:68:
30:54:7d:03:8f:9a:e5:86:06:5d:af:c5:a9:32:6a:00:0e:e6:
e5:20:9b:f7:1a:a5:de:2d:24:d2:ff:93:5d:f2:d8:0b:e5:2d:
4a:ea:5e:c9:e9:62:6e:0f:d3:4a:28:a8:97:24:4b:85:c4:40:
05:b3:df:57:9d:44:51:61:0d:34:e3:ac:1e:2a:a1:3c:05:88:
d8:f4:85:5c:f1:47:f4:8a:df:c9:5b:7d:88:f1:a3:8e:1d:ab:
32:f2:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:31:31 2024 by rpki-client on console-fra.rpki-client.org