Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/xAnHbN3shZrIkXAxb6MYvXfvhzQ.roa
File: xAnHbN3shZrIkXAxb6MYvXfvhzQ.roa (raw, json)
Hash identifier: TYdh8EJGZI0xxVmWya9gm38v7gk+n7f8ZcwYJoqKzjI=
Subject key identifier: C4:09:C7:6C:DD:EC:85:9A:C8:91:70:31:6F:A3:18:BD:77:EF:87:34
Certificate issuer: /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial: 018CC50052241F712B02C023C8CF16B78BBE
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/xAnHbN3shZrIkXAxb6MYvXfvhzQ.roa
Signing time: Mon 01 Jan 2024 12:29:41 +0000
ROA not before: Mon 01 Jan 2024 12:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201887
IP address blocks: 5.255.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:52:24:1f:71:2b:02:c0:23:c8:cf:16:b7:8b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
Validity
Not Before: Jan 1 12:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c409c76cddec859ac89170316fa318bd77ef8734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:61:73:a1:f1:64:c8:18:a1:24:a8:e4:58:
9e:85:44:25:00:1f:bc:76:43:de:a1:62:41:d2:f5:
22:8d:c9:39:de:02:63:e2:ab:9e:14:3e:ec:85:27:
33:4e:a5:71:5d:46:94:e8:ae:f0:a5:63:c1:5e:80:
5e:0e:d1:ac:5d:12:91:60:a4:0f:e4:36:67:5c:dd:
6a:e4:a6:d9:63:63:14:a8:7a:f3:e6:20:ac:85:a6:
b6:25:41:2e:37:36:04:53:1c:1d:d6:73:a0:da:b3:
07:f0:20:27:25:50:c0:40:9a:77:6d:e2:50:92:db:
5a:35:c9:ea:bb:e1:7b:3c:0f:52:7a:50:4b:84:64:
e8:09:f2:c7:dd:6a:e3:a5:08:5f:c0:c5:34:b6:a2:
92:70:6a:00:ef:dd:3b:1d:9d:05:84:42:73:f1:22:
31:a8:bd:4d:59:72:1c:46:66:54:7c:ab:3a:c4:d8:
cc:fe:27:a8:65:16:9d:d9:53:03:10:23:05:be:53:
2c:2e:c5:b5:13:03:9d:0b:2e:0d:21:87:48:34:50:
34:b9:a2:35:60:52:af:67:d8:68:bc:ee:e7:09:55:
27:5b:38:8e:59:4a:5f:29:48:6a:28:80:6b:86:d4:
6c:55:e2:45:a0:51:fa:4a:6e:56:04:b4:22:f5:6c:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:09:C7:6C:DD:EC:85:9A:C8:91:70:31:6F:A3:18:BD:77:EF:87:34
X509v3 Authority Key Identifier:
keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/xAnHbN3shZrIkXAxb6MYvXfvhzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.128.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:e6:42:a3:d0:17:7b:b4:57:c8:b4:49:5d:9a:32:7b:42:3e:
8b:f2:6f:65:e3:72:d1:54:3e:e7:28:68:a1:71:ab:cc:7a:d6:
86:aa:92:8b:cb:10:a8:8f:78:3c:ac:08:99:f2:ca:2b:1b:37:
2d:0b:e4:bb:41:9f:b0:f8:7a:8b:e1:7d:06:87:ba:f9:fc:10:
e6:9e:b1:c3:ae:15:4b:c3:52:e4:da:22:d0:c5:89:48:48:27:
6d:b4:e5:01:7c:44:74:03:83:51:d7:32:d1:7d:95:d5:32:51:
94:4c:c4:90:30:f5:f2:bf:c3:72:96:aa:d9:ab:92:1b:34:8f:
f9:87:ab:05:73:7b:45:45:00:fc:1c:c0:ac:8e:96:41:ae:19:
b7:73:bc:f1:ed:cc:7d:40:0c:df:10:b8:f8:04:d4:ac:f9:31:
5b:54:72:e1:18:c0:7a:18:3b:c5:2d:71:c4:cb:63:dc:e3:51:
cf:96:de:6d:e6:38:06:42:73:f2:da:af:8b:d5:16:27:04:b6:
7f:10:ff:43:cd:1d:a4:e2:2e:cb:1c:b1:82:b9:fb:75:e7:b3:
19:71:09:3f:df:e4:1b:b1:11:d5:b5:72:35:39:a5:f7:20:22:
a0:8e:1c:b2:18:e7:fd:c2:77:37:b1:00:fe:ba:73:ab:33:34:
95:3e:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:30:56 2024 by rpki-client on console-ams.rpki-client.org