Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XyIiBBshedwh8FEV57Vfd7K3l2s.roa
File: XyIiBBshedwh8FEV57Vfd7K3l2s.roa (raw, json)
Hash identifier: 5yoGZI2bwKShV8KF86RD5O/1IZWZ5Y9r5gHGAreV0HA=
Subject key identifier: 5F:22:22:04:1B:21:79:DC:21:F0:51:15:E7:B5:5F:77:B2:B7:97:6B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A7206164FEFD31E276B0763E48A01
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XyIiBBshedwh8FEV57Vfd7K3l2s.roa
Signing time: Tue 02 Jan 2024 12:33:48 +0000
ROA not before: Tue 02 Jan 2024 12:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 193.124.22.0/24 maxlen: 24
62.76.234.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
192.124.176.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
194.87.189.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:72:06:16:4f:ef:d3:1e:27:6b:07:63:e4:8a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f2222041b2179dc21f05115e7b55f77b2b7976b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0a:2f:c8:73:9d:20:cd:c6:a1:de:12:fb:96:
80:0e:41:07:eb:d6:e5:4e:05:59:b8:d4:87:3e:63:
3d:46:1d:80:e9:b3:ef:53:6e:77:c5:6f:ba:66:66:
be:e3:1f:58:be:9f:32:12:5e:0e:66:d8:d7:73:83:
81:9c:58:02:c3:d8:0c:be:cd:ed:a7:ba:e8:d1:2b:
d7:d0:92:33:31:6f:2b:87:71:5f:24:14:12:38:9d:
c2:45:99:94:05:8e:3c:9c:9f:c0:26:8b:3d:0c:99:
62:5a:57:f7:36:c0:84:82:a5:1d:1c:8b:28:ed:4e:
ab:b4:5b:a9:5d:3d:6d:78:ed:a1:7c:70:43:1b:d8:
6e:d9:4d:c8:70:e8:80:a1:7c:17:ed:37:c1:36:e7:
64:69:21:ec:c8:2e:5e:57:c8:c3:15:ec:46:0c:78:
fc:75:74:52:16:c1:33:bd:78:2f:84:be:f6:5b:c3:
4b:1f:49:aa:f4:fb:36:60:b9:40:41:fc:07:c8:e3:
03:3d:a5:32:d2:0e:3e:32:74:26:44:40:db:1a:75:
16:19:35:0c:91:5a:02:bd:d0:db:78:20:e3:86:09:
14:cc:57:02:30:a2:a2:1a:19:44:8a:09:3e:a0:93:
c9:da:00:14:c2:6e:a2:15:b1:92:12:cb:c7:56:6b:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:22:22:04:1B:21:79:DC:21:F0:51:15:E7:B5:5F:77:B2:B7:97:6B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XyIiBBshedwh8FEV57Vfd7K3l2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.234.0/24
185.72.8.0/24
192.124.176.0/24
193.124.22.0/24
193.124.41.0/24
193.124.46.0/24
194.58.34.0/24
194.58.68.0/24
194.87.39.0/24
194.87.47.0/24
194.87.189.0/24
194.87.227.0/24
212.192.12.0/23
212.192.15.0/24
212.193.2.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ff:67:c1:78:c2:93:a1:9d:7d:72:25:b0:57:0c:af:f1:5e:
e1:f7:74:c4:b7:a4:ea:60:e6:30:7b:22:3a:00:b0:bb:1b:4c:
a9:53:5c:35:96:a5:c5:79:43:8e:14:ff:74:24:f4:d9:08:df:
df:9c:cb:b0:ad:3b:3e:13:80:3c:04:4c:be:be:4c:ff:94:13:
6f:cd:43:1e:0d:d0:b8:e5:ff:8f:71:97:13:cd:fc:11:26:a7:
b0:03:f9:11:9d:40:a9:f8:31:74:eb:a6:5d:7b:8b:4f:44:a6:
d9:f4:c2:9f:99:5b:92:c4:b0:09:fb:8b:b5:d5:54:d2:d3:8f:
43:39:3f:89:7a:f0:3e:64:76:a0:a7:4f:04:d9:85:30:97:77:
30:e0:1f:f7:a9:a7:54:bf:42:5d:aa:9a:b0:58:de:84:e2:c8:
9a:87:f7:fe:62:37:00:4d:27:de:ce:20:cb:78:06:90:4d:e9:
71:9b:64:70:98:12:13:d7:17:d6:75:a8:32:a1:70:2f:55:bf:
6e:18:73:db:0e:02:0c:33:8c:e9:2d:5f:5b:1e:d2:00:83:e2:
e1:08:9d:64:ec:27:45:3d:30:17:92:0f:43:8d:24:eb:eb:77:
c3:66:3f:f2:27:26:24:c2:65:40:cd:3b:eb:fc:5b:2a:bd:c1:
c1:f4:3a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:05 2024 by rpki-client on console-ams.rpki-client.org