Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/XKCJvf4kTh9xsHwJiq7vNwLoXKA.roa
File: XKCJvf4kTh9xsHwJiq7vNwLoXKA.roa (raw, json)
Hash identifier: n/4a49dkb1eFhW2HpdQ52B/DbmKm4XGNtGLIiPBrv7w=
Subject key identifier: 5C:A0:89:BD:FE:24:4E:1F:71:B0:7C:09:8A:AE:EF:37:02:E8:5C:A0
Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial: 018CC64B506C6CBDB808E4C76DE07CB12BFC
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/XKCJvf4kTh9xsHwJiq7vNwLoXKA.roa
Signing time: Mon 01 Jan 2024 18:31:13 +0000
ROA not before: Mon 01 Jan 2024 18:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 83.118.224.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:50:6c:6c:bd:b8:08:e4:c7:6d:e0:7c:b1:2b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
Validity
Not Before: Jan 1 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ca089bdfe244e1f71b07c098aaeef3702e85ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cd:9d:c5:d8:47:4d:c8:7a:be:56:08:5b:47:
cf:79:6b:95:08:4e:6c:52:25:54:4b:9e:7f:3b:c1:
69:17:70:87:d7:69:d1:f4:0d:fb:4a:60:47:b7:21:
8d:40:23:c5:ed:b0:34:8d:ad:5d:be:69:b8:b6:22:
97:f3:66:d2:fb:fd:37:2b:23:6e:72:45:7a:9f:72:
1f:a7:7a:ed:38:a3:ab:01:84:71:c2:e5:46:55:04:
8b:3a:0a:9a:16:cd:8e:12:e6:16:3b:7b:83:35:40:
08:2c:6c:d7:4b:fc:95:04:5a:d5:10:cc:73:77:a2:
23:7e:16:ff:d8:bb:1e:59:6d:44:6c:db:be:44:76:
86:e5:ab:a8:4d:7f:c2:33:c1:5c:a8:34:18:1b:e8:
32:6c:2d:7d:11:fb:7c:b2:8c:ec:b2:3c:74:0c:22:
10:9e:71:02:d5:59:6f:5b:f8:f2:d0:08:29:cd:04:
0f:cf:47:a7:e8:e5:4d:62:a8:44:52:a2:f5:4c:7b:
c0:37:bf:a0:73:18:24:7a:c4:89:5b:d4:11:a0:ff:
b0:22:c3:00:55:78:61:9d:b3:2d:30:1c:74:dc:ed:
df:9a:be:25:a1:39:c8:28:7c:db:13:24:7c:f6:27:
55:79:ba:73:01:8e:ee:72:08:f0:a0:2d:39:78:30:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:89:BD:FE:24:4E:1F:71:B0:7C:09:8A:AE:EF:37:02:E8:5C:A0
X509v3 Authority Key Identifier:
keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/XKCJvf4kTh9xsHwJiq7vNwLoXKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:92:5b:69:55:84:3e:d7:b1:a0:6e:a1:7e:5b:bc:7b:60:ab:
af:dd:ff:12:de:fb:8b:ad:dd:11:9d:ae:46:bc:e5:e9:0c:e8:
2f:94:f6:22:83:33:85:ca:75:ad:cd:40:be:65:99:c6:b4:70:
3a:41:14:aa:c1:fc:a7:50:5a:25:50:93:5a:b3:2e:2d:8c:99:
1c:a0:60:e0:cf:20:46:cb:2c:1d:c3:2d:bb:61:68:92:00:d7:
c3:6d:22:2a:66:bf:3a:f3:25:b9:09:21:97:4d:8b:63:a8:df:
e6:14:2e:ea:fa:00:ac:18:70:e1:ce:61:30:40:03:86:09:b8:
85:df:c6:15:5f:59:5a:4e:39:8f:38:c7:69:bd:a7:a5:90:00:
14:be:29:20:07:a1:a9:c1:3c:4f:45:d5:cc:97:34:94:87:4b:
aa:5d:cf:c9:39:cc:38:2d:54:19:89:72:e6:de:00:e9:3b:71:
a2:3c:c7:14:62:71:41:28:51:28:83:b7:9d:dd:87:5f:76:c8:
e6:88:32:b4:8d:3c:95:37:90:a4:8a:80:85:59:0d:7d:35:0d:
dd:f6:2a:6b:e2:83:99:3b:69:b1:cf:2b:76:15:a5:20:35:19:
04:ed:3a:70:79:fa:3c:fa:f3:84:4b:9b:2f:46:48:e9:4c:3e:
5e:13:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:24:42 2024 by rpki-client on console-ams.rpki-client.org