Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/I_XSSklQSlxXcMZ_36-GsiVn2n0.roa
File: I_XSSklQSlxXcMZ_36-GsiVn2n0.roa (raw, json)
Hash identifier: 8D6te/hfQsYg6z1tpeNdtsqmrU1nrTPRYyeeMbfwW0s=
Subject key identifier: 23:F5:D2:4A:49:50:4A:5C:57:70:C6:7F:DF:AF:86:B2:25:67:DA:7D
Certificate issuer: /CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Certificate serial: 018FF8EFFA2555AF304EAA91CE40480D957A
Authority key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/I_XSSklQSlxXcMZ_36-GsiVn2n0.roa
Signing time: Sat 08 Jun 2024 17:40:27 +0000
ROA not before: Sat 08 Jun 2024 17:40:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61427
IP address blocks: 194.88.13.0/24 maxlen: 24
194.104.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f8:ef:fa:25:55:af:30:4e:aa:91:ce:40:48:0d:95:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Validity
Not Before: Jun 8 17:40:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23f5d24a49504a5c5770c67fdfaf86b22567da7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:3a:52:bb:f1:02:98:b9:77:a8:e9:33:cc:
7a:d0:02:ae:ba:ea:6e:38:26:1a:98:8a:b0:75:ff:
88:42:fd:b6:bd:aa:09:11:97:86:2e:ea:87:fe:c9:
80:bd:7a:e1:61:f7:5f:5e:34:3e:25:a3:f9:97:36:
4b:b9:2e:5e:dc:25:a9:0c:10:0a:61:7f:77:09:fa:
dc:35:40:57:cf:79:5f:46:70:4e:d8:0f:8c:9d:c5:
82:92:1a:52:73:34:46:6f:89:c3:71:14:86:44:84:
56:a9:61:cc:14:04:4d:bd:09:b7:0f:f1:4d:2f:68:
68:7b:d9:b0:6e:02:d9:b5:f5:45:32:34:57:cf:db:
89:4d:02:91:68:ef:d9:bc:02:68:13:0f:03:e6:ed:
0f:34:74:8c:12:1b:b2:d0:23:c5:fa:71:dc:0b:ef:
46:f7:05:f5:d2:4c:41:af:a8:5a:3a:ef:39:de:f7:
f5:67:7f:16:58:18:89:b1:b6:11:04:ff:7c:bb:92:
14:30:c8:9f:ab:b7:80:93:6a:78:30:80:57:09:8f:
08:07:12:14:ca:90:31:49:b9:a8:f6:fc:f3:62:15:
34:3d:8b:63:50:de:2f:1d:c0:49:7c:32:92:fc:54:
85:c1:da:3f:8e:8c:aa:69:f2:b3:56:4e:fd:5b:8f:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F5:D2:4A:49:50:4A:5C:57:70:C6:7F:DF:AF:86:B2:25:67:DA:7D
X509v3 Authority Key Identifier:
keyid:5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/I_XSSklQSlxXcMZ_36-GsiVn2n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.13.0/24
194.104.123.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:17:d9:6a:e5:87:ea:58:bd:6f:a0:ba:43:49:c8:a8:9b:23:
55:8d:f6:b9:5e:aa:17:fb:62:c9:90:4d:b8:70:fa:be:9a:81:
2d:e1:97:ce:b3:d0:81:ba:51:f7:4a:bb:97:19:3a:3f:b1:5f:
7f:78:ed:fb:17:89:29:00:3e:64:8d:0f:21:12:88:cc:72:8c:
64:66:b1:ad:aa:52:fe:3c:f7:ea:2d:4c:e6:e0:27:3e:35:af:
f3:31:cf:9d:ec:5b:a9:70:f8:16:8d:20:5e:ba:5f:3d:a7:8a:
66:bd:06:93:4b:4f:43:7f:51:56:27:55:d1:2d:8d:56:22:56:
ec:01:2a:5b:41:12:f6:75:d8:5d:f4:4f:1c:d5:c1:fc:43:94:
68:3d:57:a2:4d:d2:21:bf:10:24:d8:54:a4:3c:bd:5f:88:9f:
73:70:d7:53:a2:fe:42:67:a7:0f:49:5b:d8:5a:cf:c7:52:1b:
d8:bb:94:7b:1f:59:c9:c7:63:50:f7:c1:19:e0:02:72:53:b2:
1a:cf:74:8a:47:3c:09:ee:70:b3:e1:77:34:e6:63:e5:b7:28:
08:75:3d:59:cf:cf:a6:a6:68:10:8b:cd:82:e9:9c:06:4b:3a:
31:26:fc:c3:18:0a:b7:af:c3:60:77:83:c1:12:f1:36:0e:42:
3b:79:52:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:49:35 2024 by rpki-client on console-fra.rpki-client.org