Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xcYha7TJT0T1k3YakGqOyPdIj88.roa
File: xcYha7TJT0T1k3YakGqOyPdIj88.roa (raw, json)
Hash identifier: jg3KqhdU7z7qiVOi3TpxoZJf5F/eRLWEZgDRD86krhM=
Subject key identifier: C5:C6:21:6B:B4:C9:4F:44:F5:93:76:1A:90:6A:8E:C8:F7:48:8F:CF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A93877353E9F1D56966447BB65281
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xcYha7TJT0T1k3YakGqOyPdIj88.roa
Signing time: Tue 02 Jan 2024 12:33:57 +0000
ROA not before: Tue 02 Jan 2024 12:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213035
IP address blocks: 212.193.29.0/24 maxlen: 24
194.87.132.0/24 maxlen: 24
195.133.16.0/24 maxlen: 24
212.192.218.0/24 maxlen: 24
212.192.216.0/24 maxlen: 24
195.133.17.0/24 maxlen: 24
212.192.219.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
212.192.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 12:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:93:87:73:53:e9:f1:d5:69:66:44:7b:b6:52:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5c6216bb4c94f44f593761a906a8ec8f7488fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:29:1d:9a:50:97:6d:82:5c:f1:88:14:c8:9e:
0d:2e:82:66:f3:56:b6:90:f8:fc:0d:cd:3f:8f:2c:
83:ae:33:7d:57:b5:da:87:f2:4a:a4:84:18:83:0a:
7b:91:b5:cf:27:f3:84:d9:c9:ee:48:f7:5e:2c:07:
fb:0e:f0:65:01:d1:de:96:9e:df:80:39:54:84:2b:
55:09:b7:d5:68:4f:5c:da:90:e9:e0:1d:40:37:fd:
09:eb:4c:60:47:e2:82:18:ea:ec:6b:1d:a3:4c:aa:
45:cd:be:13:b7:8f:de:36:48:fe:12:1f:67:e2:5c:
f3:08:aa:f0:98:d9:ef:ca:de:3c:92:21:d7:ff:d8:
17:fe:bb:65:98:de:22:ac:3a:7e:5f:13:59:a0:c2:
b2:79:50:e1:df:d2:f6:e8:84:08:f9:23:f8:c7:02:
b6:03:41:a2:1c:15:48:af:a6:9b:5b:30:92:0c:49:
aa:68:ed:56:85:7e:58:1b:8a:74:35:a4:20:31:e7:
42:7a:49:90:1b:71:b6:15:b9:d5:0e:da:75:d4:58:
8e:45:71:20:e0:11:3f:2c:23:5a:9e:1d:8b:23:b6:
f6:58:50:24:d2:f9:ad:4c:6a:bd:24:86:ae:90:8f:
7c:66:fc:df:07:18:11:0e:01:1e:4d:a6:60:7d:9e:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C6:21:6B:B4:C9:4F:44:F5:93:76:1A:90:6A:8E:C8:F7:48:8F:CF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xcYha7TJT0T1k3YakGqOyPdIj88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.132.0/24
195.133.16.0/23
212.192.216.0/24
212.192.218.0/23
212.192.240.0/24
212.192.243.0/24
212.193.29.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f1:7d:06:58:3b:d7:c4:85:cb:fa:a0:98:00:9d:fc:fe:12:
72:d1:6a:8d:44:70:9c:f3:df:fb:b2:f3:02:a5:54:2d:9f:9f:
e4:68:61:75:72:cb:18:6d:f8:4a:7a:4f:ce:9a:8e:d2:13:f1:
e0:55:ca:34:d7:f2:30:b5:c7:f4:e7:16:5d:ca:d7:30:a8:4b:
8c:f7:f5:f9:e6:a5:82:4c:5e:f0:ba:f8:6d:b6:f4:67:02:cf:
f2:bd:99:e8:20:f1:69:50:32:8d:0b:79:6a:24:3c:3e:a1:cd:
90:36:f4:7c:3c:55:42:08:6f:de:97:6e:55:ba:0a:2c:57:57:
47:98:cb:94:b5:f1:04:50:cb:83:15:51:3d:f0:5c:42:89:a1:
79:54:e8:d7:24:63:bc:2e:f9:fc:ca:9d:52:3e:8d:1a:db:59:
35:4b:e2:ab:2e:05:99:b5:fe:2c:bc:00:6f:fb:ce:25:ba:70:
cc:75:2d:5a:ba:05:7c:76:4f:ce:1b:d5:5e:9e:0c:41:8e:76:
9c:ad:31:f6:71:c4:0d:e0:3f:b1:79:48:4d:70:19:a2:b4:d2:
07:97:68:92:12:1c:ae:e3:89:67:bd:c3:91:07:18:4d:70:ef:
94:cf:bd:4b:7c:24:a0:95:37:a7:8a:60:fe:4e:0d:6d:d9:11:
20:d8:02:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:13:01 2024 by rpki-client on console-ams.rpki-client.org