Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/xgSrRa9TmW7b8y0QcSeyvR0j8Ow.roa
File: xgSrRa9TmW7b8y0QcSeyvR0j8Ow.roa (raw, json)
Hash identifier: 9JG3pPvPBYygnYLbTnPf/f+OLozmpzod6814l5/AJuw=
Subject key identifier: C6:04:AB:45:AF:53:99:6E:DB:F3:2D:10:71:27:B2:BD:1D:23:F0:EC
Certificate issuer: /CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Certificate serial: 018CC34963A040FE603DD94CE9AA3C71C2D4
Authority key identifier: 9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/xgSrRa9TmW7b8y0QcSeyvR0j8Ow.roa
Signing time: Mon 01 Jan 2024 04:30:15 +0000
ROA not before: Mon 01 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211079
IP address blocks: 185.83.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:63:a0:40:fe:60:3d:d9:4c:e9:aa:3c:71:c2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c604ab45af53996edbf32d107127b2bd1d23f0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:05:c1:57:69:64:7f:ea:aa:6a:e0:9e:b6:
81:75:22:21:35:7b:36:3c:eb:0a:2b:89:f3:29:c4:
48:34:59:14:df:16:3e:d4:c3:56:f1:17:22:ba:4f:
7e:93:c3:be:50:a0:86:a0:7c:af:f1:da:46:4d:b0:
ee:22:a4:3c:ae:11:03:06:1a:fc:96:63:87:c7:aa:
7a:89:c1:8b:22:7a:68:ea:f4:49:c3:3c:f7:7d:cf:
1b:87:50:71:96:47:75:84:27:09:93:f8:03:bb:49:
35:8c:98:6e:46:df:29:e7:22:4d:9c:ed:6b:b5:a8:
77:79:ff:43:20:f1:e8:f6:6f:fd:86:17:54:eb:af:
55:3d:86:6d:c4:19:7a:73:bb:94:87:40:c3:e1:36:
c0:36:5c:4e:c7:57:14:ad:55:93:54:19:11:17:72:
21:a8:16:0d:4e:82:0e:9b:ef:45:5c:db:c4:8e:da:
87:a8:2c:db:d4:1c:51:eb:6e:a8:34:47:52:72:82:
78:a6:40:fc:24:c2:d3:74:ff:89:ac:bd:e6:b5:f9:
59:da:ce:84:a2:8b:f0:96:86:c9:01:16:1c:d6:6c:
9f:04:10:71:04:d7:f5:9c:02:52:d0:35:ab:d4:0b:
de:a8:47:b4:1d:92:c3:88:97:02:0f:19:3b:e8:a7:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:04:AB:45:AF:53:99:6E:DB:F3:2D:10:71:27:B2:BD:1D:23:F0:EC
X509v3 Authority Key Identifier:
keyid:9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/xgSrRa9TmW7b8y0QcSeyvR0j8Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.228.0/24
Signature Algorithm: sha256WithRSAEncryption
67:7e:8a:3e:32:b8:d1:40:fc:12:d8:83:a6:d8:33:5b:ce:49:
b9:8d:ad:64:42:97:c5:aa:0e:1f:30:30:df:b7:5a:65:54:60:
b1:99:f5:77:c8:1f:aa:d0:8d:a8:03:21:26:4c:6b:55:ed:6f:
65:99:ab:1d:a7:08:0d:3f:b7:98:92:b4:0a:71:5e:eb:b7:70:
6f:93:fd:df:9d:83:20:44:eb:fc:4c:fa:f3:b2:90:82:6b:4f:
e2:fb:e5:00:7e:6f:03:73:33:db:38:cc:30:79:94:14:7d:45:
41:50:a4:40:d3:4d:35:ce:7d:34:3e:db:4a:bf:61:9b:8c:aa:
c2:08:f3:92:a0:b6:0f:15:b7:2b:ff:13:35:35:6c:37:99:4f:
54:76:d0:92:84:c3:2c:37:91:cd:b9:3b:d8:dd:64:98:98:66:
f1:30:be:5e:9b:e5:ba:17:98:4f:30:d2:a7:a4:7a:05:02:f8:
8f:f3:bc:71:21:37:54:f0:79:07:b6:fb:64:73:57:e7:3c:8c:
be:bd:85:92:68:68:6b:76:04:aa:e5:39:8d:ad:92:5a:d4:05:
7c:1e:42:da:de:4a:b5:96:62:fe:fb:c9:1b:0d:59:b5:77:92:
0d:f7:b9:df:f3:f0:b9:f3:3e:6b:0a:d2:e8:ac:02:91:aa:01:
e8:a5:65:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:32:02 2024 by rpki-client on console-ams.rpki-client.org