Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/XZRYnjLPDh9oBzzAvr5iAWqpMpI.roa
File: XZRYnjLPDh9oBzzAvr5iAWqpMpI.roa (raw, json)
Hash identifier: bO9lpFIoHW16eS3uroI5K1tqHU+MOslSVzC5D2GSQsU=
Subject key identifier: 5D:94:58:9E:32:CF:0E:1F:68:07:3C:C0:BE:BE:62:01:6A:A9:32:92
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018E13E6431E38996C9E7CC6549D297B7C52
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/XZRYnjLPDh9oBzzAvr5iAWqpMpI.roa
Signing time: Wed 06 Mar 2024 13:14:01 +0000
ROA not before: Wed 06 Mar 2024 13:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200024
IP address blocks: 85.196.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:e6:43:1e:38:99:6c:9e:7c:c6:54:9d:29:7b:7c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Mar 6 13:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d94589e32cf0e1f68073cc0bebe62016aa93292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:1e:a8:3a:9e:1f:35:c0:91:3b:b7:6d:f2:
b1:43:3b:86:8e:1d:2d:dc:9e:27:f7:7e:9d:20:5d:
cd:46:48:c0:40:50:88:d3:e3:8c:a5:09:45:d4:45:
e1:cd:5b:5c:64:0a:07:c3:e4:53:33:cf:41:2b:f4:
6c:18:08:a6:c2:22:17:81:56:73:c3:2c:4b:11:c6:
66:fa:87:6f:a0:9d:1f:8b:d7:fc:a3:03:4b:41:07:
cc:36:1f:3c:f7:9b:73:2a:fa:7d:94:96:34:d4:47:
50:8c:91:d8:c3:5f:cf:62:aa:cc:d7:b5:9e:ae:22:
18:4e:e3:b9:96:f6:df:01:ae:44:fe:17:f7:2b:87:
ac:4c:03:b6:43:de:bc:ec:b9:b1:3d:7e:7b:fd:4e:
3c:58:f0:d5:ef:82:8f:b5:b1:30:be:f5:bc:06:90:
28:cf:b8:71:b8:d2:02:5d:86:52:a4:b7:33:be:f1:
b4:a9:8f:89:d6:22:0c:2e:cf:13:0f:2d:57:ec:19:
14:2c:d6:47:fb:c9:dd:e4:cd:7a:0a:e0:a9:13:98:
ab:36:62:6a:1c:ef:7b:e1:a6:a6:0d:aa:e3:eb:ca:
18:d3:7b:27:a6:0b:6e:d2:d6:83:da:26:d6:f6:d0:
f1:32:be:6b:0d:ef:45:2e:19:a5:c1:2a:46:cc:23:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:94:58:9E:32:CF:0E:1F:68:07:3C:C0:BE:BE:62:01:6A:A9:32:92
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/XZRYnjLPDh9oBzzAvr5iAWqpMpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.196.136.0/24
Signature Algorithm: sha256WithRSAEncryption
91:67:a4:15:39:36:be:5f:29:88:58:54:c3:e7:c8:a8:76:2a:
e4:f1:33:e3:43:d6:4d:78:f0:a2:88:00:9d:4a:97:c0:a4:1d:
cf:6e:02:44:6c:10:7a:94:01:28:c8:58:c2:0c:10:72:dc:03:
7f:ab:7b:a1:43:6c:ee:fb:d7:96:ea:12:a4:03:6c:c5:2e:f1:
98:e7:51:81:c5:d2:6b:b0:aa:9e:d7:78:8f:0e:d4:72:ec:6e:
dd:be:4f:57:8d:8e:8d:49:da:ae:57:28:77:0c:db:2f:62:e1:
13:3d:61:0e:ae:8a:21:19:0e:a9:9f:39:18:27:19:1b:0c:24:
fb:83:22:db:d5:df:b9:36:e1:b9:ed:00:31:9d:85:b5:37:92:
4c:a4:74:6e:79:7f:36:d3:51:62:b8:a1:47:d4:8d:4c:c2:72:
bd:cb:1c:76:59:a4:bc:e0:9e:60:85:ac:83:57:a3:e8:cb:94:
14:2c:6c:3b:1b:f2:33:3b:7c:41:c0:e0:7e:45:17:53:33:e0:
38:bc:9e:18:85:9c:b4:2a:8e:83:82:3e:f4:a4:b2:7b:a9:ec:
2a:63:5d:2f:c7:8a:36:e5:c4:1c:a1:e9:02:99:59:c3:39:ca:
a5:80:be:7f:8b:40:a7:17:94:b6:15:0d:51:73:c9:37:e1:8c:
a1:75:d4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:59:05 2024 by rpki-client on console-fra.rpki-client.org