Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/8XyMJSjLy26Zd6KyoNiXNilU9k0.roa
File: 8XyMJSjLy26Zd6KyoNiXNilU9k0.roa (raw, json)
Hash identifier: 10WN/lU72A66P3xzyH+NaRC9K5eCQ7qNfRSyODaq5sk=
Subject key identifier: F1:7C:8C:25:28:CB:CB:6E:99:77:A2:B2:A0:D8:97:36:29:54:F6:4D
Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial: 018CC94AA9D59146ECAC5023FB5B327CE6DB
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/8XyMJSjLy26Zd6KyoNiXNilU9k0.roa
Signing time: Tue 02 Jan 2024 08:29:22 +0000
ROA not before: Tue 02 Jan 2024 08:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199562
IP address blocks: 185.10.224.0/22 maxlen: 24
185.10.227.0/24 maxlen: 24
2a03:6640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:a9:d5:91:46:ec:ac:50:23:fb:5b:32:7c:e6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Validity
Not Before: Jan 2 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f17c8c2528cbcb6e9977a2b2a0d897362954f64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:60:15:87:8f:b4:85:84:87:e1:16:1d:af:
95:f3:8a:d6:bb:dd:e5:db:d0:08:bf:cd:e9:93:7d:
95:e9:49:f6:a2:5f:4c:fd:1c:bc:c5:fb:a6:1a:b3:
58:d3:62:2c:d1:83:b2:30:24:ea:1d:45:a4:d9:d1:
3c:93:6a:72:f8:ac:f9:af:06:25:ec:b1:61:68:0e:
93:c9:74:7d:11:41:a4:f4:63:12:a4:dc:a9:8e:21:
1e:42:b9:72:d1:46:c4:a1:10:3c:d0:65:2f:01:ac:
43:ef:17:cf:a2:d3:33:39:be:6c:67:d3:21:38:4d:
3c:ec:fc:e3:c1:60:d1:30:c7:ab:41:6e:4e:9b:4c:
db:7e:fd:7f:6c:9f:72:88:4f:1e:cc:4c:3c:6e:54:
84:b7:8d:d8:be:e9:26:cb:7d:36:27:b0:10:44:5c:
7a:24:87:2e:35:0f:bd:e7:81:5c:5b:b9:d5:81:e6:
8d:38:d8:92:af:20:b3:07:f9:18:2e:64:8f:91:72:
ab:b0:f0:82:96:e5:b6:c9:b0:2b:29:b9:b3:f9:fc:
74:40:50:2c:17:75:66:7f:31:e8:6a:28:75:17:50:
ac:1d:42:8f:8e:10:6c:a9:fa:44:89:72:24:cf:60:
42:64:e4:59:e3:8a:f0:ab:82:85:3e:d4:80:8d:f6:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:8C:25:28:CB:CB:6E:99:77:A2:B2:A0:D8:97:36:29:54:F6:4D
X509v3 Authority Key Identifier:
keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/8XyMJSjLy26Zd6KyoNiXNilU9k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.224.0/22
IPv6:
2a03:6640::/32
Signature Algorithm: sha256WithRSAEncryption
7e:fa:32:15:3d:2c:01:02:5f:17:08:3e:5f:a2:2a:49:bb:aa:
05:50:e8:e2:5a:b4:9f:b1:dd:da:97:0d:17:a2:5e:fe:b7:87:
8f:52:35:a8:f8:c1:13:7e:09:ab:b1:58:0e:63:1e:28:7d:12:
0d:fa:7d:38:c9:82:9b:2f:1c:8f:00:e4:40:2c:41:12:e0:b6:
ff:88:7d:02:bd:00:8a:0d:1f:68:a8:df:0d:da:b7:6a:dc:b1:
fe:6f:77:1b:a3:ca:f4:74:cf:b7:d7:2a:53:af:97:df:06:79:
53:5d:88:fb:79:3f:36:6e:e2:29:dc:94:61:03:ec:59:04:12:
9c:d3:46:9e:54:9e:6d:70:8a:3b:58:3b:24:3c:2a:64:c9:c2:
99:26:9e:5d:52:1d:9f:3e:9e:c1:97:dc:27:47:7c:c1:6a:f3:
b7:ea:86:e3:d7:c3:c6:50:e0:b0:3c:bf:ad:8e:fd:32:e6:2a:
14:1f:65:76:75:c8:78:9e:f7:4e:9c:85:0b:80:f0:b7:c2:7d:
67:cb:65:d9:b4:c8:b6:46:9f:0a:4e:9a:ab:e2:53:83:a2:0e:
ac:2d:a1:ee:20:bd:2d:70:d2:5b:a3:ef:6f:9b:ec:5a:ab:6b:
f7:37:75:f1:32:de:5b:6b:42:b7:b8:e2:f2:e3:41:dc:3f:9f:
35:8f:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 13:26:52 2024 by rpki-client on console-fra.rpki-client.org