Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/XyC5baECjxaJuespC6uKCaTdNDI.roa
File: XyC5baECjxaJuespC6uKCaTdNDI.roa (raw, json)
Hash identifier: Cjquao5O5v/yThEb7jzLRD3EdbIueWOiBcYSRDhgMZ0=
Subject key identifier: 5F:20:B9:6D:A1:02:8F:16:89:B9:EB:29:0B:AB:8A:09:A4:DD:34:32
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 018DFE7DB842AE6B70249C19F9EDA346D8D8
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/XyC5baECjxaJuespC6uKCaTdNDI.roa
Signing time: Sat 02 Mar 2024 09:27:48 +0000
ROA not before: Sat 02 Mar 2024 09:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215480
IP address blocks: 46.36.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fe:7d:b8:42:ae:6b:70:24:9c:19:f9:ed:a3:46:d8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Mar 2 09:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f20b96da1028f1689b9eb290bab8a09a4dd3432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:38:50:8f:b6:3c:62:8a:49:95:8e:46:69:
67:98:4c:e0:38:d3:85:87:25:ee:c7:4e:a1:b1:35:
2c:eb:38:b9:bd:81:8a:46:74:07:22:39:65:1e:18:
94:f7:38:50:74:e0:a5:fd:e0:63:5e:ee:b7:73:f9:
b3:9f:55:22:2c:78:08:49:63:08:e5:93:76:1c:c1:
52:a7:47:58:b6:e6:a5:b4:4c:b0:68:e9:f4:9e:39:
80:c1:57:02:0a:0e:21:a4:17:c5:bd:80:43:1b:3a:
0e:1b:f2:2c:9c:94:d9:ef:40:69:e9:72:24:94:5a:
47:bd:80:dc:1a:4b:28:72:63:99:7a:18:53:56:51:
c7:af:92:44:92:d4:5b:b3:75:f2:26:ef:33:61:61:
c2:df:cf:86:e0:6c:92:61:11:b7:43:47:51:d2:01:
12:ef:f6:79:59:71:fd:65:6b:83:3b:32:aa:c8:42:
e6:02:a3:95:bd:cd:f1:8c:19:45:63:d3:a2:1b:fc:
ab:7d:94:c9:7f:c4:b6:dd:3d:9d:74:29:b4:65:66:
8e:b4:02:79:5c:a3:72:c2:39:3b:7c:b4:ad:f8:0c:
09:17:f3:db:b8:3e:c0:d8:29:27:3e:54:17:f5:67:
67:35:0c:05:fd:70:02:85:98:1f:9c:2a:62:27:19:
96:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:B9:6D:A1:02:8F:16:89:B9:EB:29:0B:AB:8A:09:A4:DD:34:32
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/XyC5baECjxaJuespC6uKCaTdNDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.101.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5d:5b:ac:12:c7:d0:16:84:2d:c7:15:60:7f:50:da:b8:0c:
60:4b:eb:36:21:c1:33:98:f8:37:58:bd:62:83:9b:13:f7:9e:
92:76:3e:25:d2:f9:47:66:05:d4:9a:96:f1:8e:6c:78:46:aa:
7d:02:02:4e:1e:14:c7:83:d4:41:bd:55:42:a0:5f:dd:fb:07:
fa:5c:9b:c6:b8:a1:78:ad:c9:74:7c:bf:23:d3:66:bd:94:b5:
b6:f1:1e:ee:21:c5:42:61:74:e8:02:51:8d:e0:cd:3a:54:f7:
ab:33:7d:a4:98:56:56:33:56:80:db:5a:64:da:19:43:eb:b1:
9e:1e:88:5d:f2:dd:cb:0e:35:ce:29:99:51:5d:e0:8c:55:a4:
12:31:9c:c4:58:4a:f3:ae:14:9c:98:0f:23:ee:ad:8c:0b:26:
06:5f:cc:dc:9e:eb:18:39:95:88:8a:a3:3f:d8:3a:c4:07:0f:
0d:ce:32:fe:5e:31:49:9f:39:9f:0c:6e:53:c1:e9:32:2e:25:
bb:8e:f3:db:cd:87:64:b6:e1:f8:e9:7b:fe:ce:a0:bf:df:f0:
d5:9b:14:4d:72:54:4c:a2:ec:f4:94:75:53:27:c3:a7:ea:db:
fb:ea:74:47:a0:9a:65:af:4e:4c:00:53:ae:1b:ae:4f:34:93:
ad:e4:e2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 10:38:45 2024 by rpki-client on console-fra.rpki-client.org