Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XFTNZ1P5Zu8UtOzeTrr_f2Z1038.roa
File: XFTNZ1P5Zu8UtOzeTrr_f2Z1038.roa (raw, json)
Hash identifier: ch0UXAwX32JW+xqbaSAVHLBBm2Rjgj2cUJ2aL1P7kPA=
Subject key identifier: 5C:54:CD:67:53:F9:66:EF:14:B4:EC:DE:4E:BA:FF:7F:66:75:D3:7F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F10914D26115270990C2B73B2CC577F9B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XFTNZ1P5Zu8UtOzeTrr_f2Z1038.roa
Signing time: Wed 24 Apr 2024 14:45:08 +0000
ROA not before: Wed 24 Apr 2024 14:45:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399486
IP address blocks: 45.88.91.0/24 maxlen: 24
80.76.49.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:10:91:4d:26:11:52:70:99:0c:2b:73:b2:cc:57:7f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 24 14:45:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c54cd6753f966ef14b4ecde4ebaff7f6675d37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:f8:cc:c0:40:e0:7c:38:f1:10:42:76:77:
8d:ab:6d:e1:22:7f:0b:eb:23:a7:be:db:9b:70:ee:
c3:d8:f1:94:22:56:0e:c7:89:00:af:34:18:e5:52:
89:dd:25:71:8e:bd:8a:1c:e1:59:90:a9:d3:f7:6a:
89:02:be:66:44:e2:38:ed:e6:2f:e2:17:dc:ed:b7:
db:d9:98:d6:f9:f5:80:bd:71:c6:7c:c6:1a:78:2f:
79:64:4d:90:c6:bb:34:ed:fd:96:f6:48:46:9c:f0:
5e:d1:92:88:19:a8:6d:d5:d0:55:ad:7f:37:b6:22:
4b:a9:8b:38:f9:90:b2:64:65:e6:f8:2b:cf:d4:60:
65:6a:3d:aa:7d:7d:a4:8a:99:f8:f2:3d:c7:79:b7:
27:88:7f:22:03:93:ce:f3:24:50:38:ed:40:48:b3:
76:26:f5:aa:cf:a7:36:b0:c4:f6:f8:3a:2b:b3:ef:
25:45:0a:d4:f6:bd:bd:d7:3c:89:b1:c7:c5:7f:b6:
c6:cf:55:a6:97:53:c2:c7:98:b6:b3:26:33:21:86:
41:00:84:89:f4:41:b1:94:e9:b1:2e:21:2b:a3:9b:
bf:0f:90:a3:bb:93:e0:66:42:0c:fa:6f:f8:fd:be:
7f:03:2d:44:1b:cb:c6:d5:ba:d8:f3:68:f6:fc:39:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:54:CD:67:53:F9:66:EF:14:B4:EC:DE:4E:BA:FF:7F:66:75:D3:7F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XFTNZ1P5Zu8UtOzeTrr_f2Z1038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.91.0/24
80.76.49.0/24
85.209.133.0/24
Signature Algorithm: sha256WithRSAEncryption
35:62:1f:cf:00:10:ff:67:33:de:05:de:69:25:1b:6a:b9:f2:
5c:b1:c9:24:21:9c:07:0b:35:2b:c9:0c:20:c2:2d:b8:4c:b4:
44:75:d9:94:72:4f:4f:1f:67:4b:c5:4d:6c:e5:7a:9e:2d:07:
5b:e6:b9:be:4d:ed:7e:18:02:8d:cf:09:0b:5f:e3:60:ad:b4:
7f:c6:03:f3:1b:11:30:04:5d:ed:00:75:c8:e9:3a:a6:ed:2d:
f3:80:f2:58:ee:d3:37:9f:40:b8:5e:a6:93:47:ff:45:6b:64:
b8:66:13:17:27:85:65:53:5f:ea:70:a5:4e:c3:46:28:d1:e3:
72:22:89:f7:15:d4:f7:20:04:61:6f:33:fe:0b:a7:74:3b:05:
8b:70:bd:04:55:8d:9f:9e:f0:df:9a:18:3f:4c:c2:29:a3:3d:
8f:fb:15:9c:d4:8b:db:a5:37:07:76:07:64:7d:d1:93:5c:0e:
38:5f:b9:60:ba:5a:a4:b6:1d:72:88:1a:1e:90:cb:25:e4:d6:
55:e1:22:e2:c2:d0:44:b1:36:50:5c:03:7a:36:a2:ac:82:53:
ce:c6:af:2e:20:c0:1f:bc:d6:8f:ca:bd:41:10:f2:21:93:63:
97:30:65:e3:d2:b6:e9:a4:be:08:1a:34:9f:0f:37:70:b2:89:
5b:79:72:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:47:47 2024 by rpki-client on console-fra.rpki-client.org