Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/xjr6g57DU0JYDJPX7g9yK22jCsw.roa
File: xjr6g57DU0JYDJPX7g9yK22jCsw.roa (raw, json)
Hash identifier: 3q8zSEHV40wIQLiKChhML8e8rxwOIQPeQ4Tr19vgQu4=
Subject key identifier: C6:3A:FA:83:9E:C3:53:42:58:0C:93:D7:EE:0F:72:2B:6D:A3:0A:CC
Certificate issuer: /CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Certificate serial: 018CC56EE417E743FC8783CBF93A5535211E
Authority key identifier: 1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/xjr6g57DU0JYDJPX7g9yK22jCsw.roa
Signing time: Mon 01 Jan 2024 14:30:28 +0000
ROA not before: Mon 01 Jan 2024 14:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6805
IP address blocks: 194.15.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e4:17:e7:43:fc:87:83:cb:f9:3a:55:35:21:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Validity
Not Before: Jan 1 14:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c63afa839ec35342580c93d7ee0f722b6da30acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:43:fa:64:eb:cc:04:8a:e3:d2:b7:cb:0f:
cc:57:4c:5a:70:39:9d:74:e9:b6:1b:65:52:94:5e:
ea:77:8c:fd:1f:ae:09:05:e9:2c:84:42:a5:b3:f0:
2b:24:78:3f:5c:bf:52:30:6a:25:9b:70:50:a7:50:
ad:8b:a2:b7:80:81:1f:1b:82:b1:97:03:d9:15:48:
d3:b5:cd:c7:12:15:a0:92:86:8b:ab:b1:87:35:7e:
7f:9b:9d:7e:f5:fe:bb:24:62:aa:fd:fe:f8:c8:64:
6b:ea:82:80:44:b8:94:32:75:41:eb:8b:7e:ca:85:
36:89:fa:60:b2:ad:4a:ba:f0:a2:1e:04:ee:55:2b:
6e:e2:bc:fc:ce:1a:36:43:3e:2a:14:ff:cf:ea:7b:
5d:8e:a2:a6:e5:89:7b:e6:27:45:20:d6:82:36:89:
45:c2:d5:32:42:82:06:9b:d5:86:be:b4:ed:2e:67:
79:77:1d:81:8e:73:b8:13:ab:46:4c:13:51:63:6a:
eb:62:81:f6:b6:8f:77:94:6e:ea:ef:3b:0b:f9:f7:
a1:64:51:04:a0:d2:65:9d:ef:d7:dd:d1:fb:4e:97:
4a:49:a2:2e:93:bf:ee:5f:13:5c:d6:09:05:78:b3:
bc:40:37:57:3e:68:ed:5a:cc:ab:f3:74:87:5d:54:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3A:FA:83:9E:C3:53:42:58:0C:93:D7:EE:0F:72:2B:6D:A3:0A:CC
X509v3 Authority Key Identifier:
keyid:1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/xjr6g57DU0JYDJPX7g9yK22jCsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.237.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ed:ed:61:fa:b7:05:07:30:d9:5a:74:54:f7:cf:8d:24:40:
ff:63:0d:8d:4f:6a:b4:7a:9b:c5:eb:59:cd:98:99:15:65:92:
c6:f0:3a:14:40:4e:57:56:2b:5f:9e:11:02:63:c8:be:81:ed:
cd:6a:fe:24:f2:0f:d4:97:64:18:b9:a8:96:4b:70:0c:09:d5:
e3:f6:91:ec:7e:a0:04:93:c1:1b:e7:dc:fd:b9:4c:d3:5b:71:
b0:d3:6a:fc:21:1f:09:40:fd:74:7c:97:85:36:77:8e:85:c6:
5b:d3:85:4d:d0:c8:43:d1:34:b1:fb:2b:e0:5d:dd:4a:0d:36:
b7:2f:43:20:3c:67:70:23:5c:8d:f5:a6:d4:ba:f8:85:ad:78:
7a:db:f9:c5:fc:30:8b:8d:f2:eb:c8:8a:7b:96:68:20:1d:f9:
51:4d:74:1e:ab:57:e1:c4:26:e9:6e:6b:0d:54:ce:18:13:b3:
2e:ba:a6:60:30:37:5a:ec:fb:ea:be:17:e9:64:58:4c:1d:b3:
34:3e:0b:ff:70:c3:80:f7:5f:9f:06:ac:9d:52:43:e4:bb:27:
cd:a8:72:c3:ab:4f:d6:7e:36:c2:3f:4f:5a:8d:38:69:5c:f2:
28:70:9b:61:38:c1:bb:f3:e6:ec:19:06:5b:17:2a:42:99:6c:
de:74:5c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:18:53 2024 by rpki-client on console-ams.rpki-client.org