Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/XtiPSXLxQ-OGxhA3tmu2mp77mJU.roa
File: XtiPSXLxQ-OGxhA3tmu2mp77mJU.roa (raw, json)
Hash identifier: rlaayHMUP07BQ125STSvcaUjx8+TTBiRTb5TCFXziWI=
Subject key identifier: 5E:D8:8F:49:72:F1:43:E3:86:C6:10:37:B6:6B:B6:9A:9E:FB:98:95
Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Certificate serial: 018CC5DC0F92CF47CE060D7D99D1E7E25448
Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/XtiPSXLxQ-OGxhA3tmu2mp77mJU.roa
Signing time: Mon 01 Jan 2024 16:29:42 +0000
ROA not before: Mon 01 Jan 2024 16:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51768
IP address blocks: 185.176.236.0/22 maxlen: 22
91.220.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:0f:92:cf:47:ce:06:0d:7d:99:d1:e7:e2:54:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Validity
Not Before: Jan 1 16:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ed88f4972f143e386c61037b66bb69a9efb9895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:53:33:02:a6:b4:83:64:a2:69:cc:04:3b:
1c:28:b2:dd:76:7d:1d:1d:c5:fb:d0:ee:fa:a4:7a:
1e:2a:c8:81:2e:60:ed:bf:75:75:0d:18:60:2b:d7:
c5:0b:14:a3:c6:0f:8a:ad:a9:e5:ed:be:fe:b6:31:
24:04:4c:ed:43:86:01:c0:9f:e0:de:b5:61:68:8f:
9c:d9:dd:a8:1d:21:21:55:03:e0:13:49:95:41:02:
19:75:60:cf:d8:38:f7:5c:6d:ee:33:7a:6b:1e:ab:
8f:a9:db:a5:cf:7b:e2:ee:89:ba:8d:eb:48:dc:3b:
c9:fe:fc:63:d9:56:b2:5b:a2:9a:a4:87:6b:18:74:
27:a7:84:9b:82:75:79:f4:bd:0d:78:43:cf:6a:af:
b0:8f:32:6d:fc:ea:53:bd:ee:35:ac:32:7c:bc:c5:
13:ce:14:e5:a9:df:36:51:96:b7:93:f9:28:4e:9d:
f9:94:61:bf:57:ad:54:07:6d:2a:7f:c8:42:38:c3:
16:87:56:8b:11:1c:d6:bf:d7:c9:80:3b:05:3d:a4:
28:36:17:36:2d:8d:98:29:7d:fb:96:72:54:d3:4a:
ff:1d:25:81:81:d7:3d:50:56:9c:f2:ed:3b:00:22:
ed:5a:b3:1c:eb:a5:48:bd:88:1f:cd:b9:9f:cd:9c:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D8:8F:49:72:F1:43:E3:86:C6:10:37:B6:6B:B6:9A:9E:FB:98:95
X509v3 Authority Key Identifier:
keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/XtiPSXLxQ-OGxhA3tmu2mp77mJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.99.0/24
185.176.236.0/22
Signature Algorithm: sha256WithRSAEncryption
42:03:39:81:5c:e1:54:53:6a:0f:13:b0:27:ad:4c:7c:9f:cc:
e2:c1:17:e5:24:ee:0f:4c:52:8d:ef:88:1b:3d:60:03:df:ea:
58:8d:e4:d2:ec:5f:c1:d4:5b:57:39:17:33:9c:1c:52:12:c8:
29:18:ff:06:7f:22:a4:38:21:d9:60:ae:db:1d:ee:0d:d9:36:
13:b6:05:ad:84:40:71:7f:c0:9a:d7:01:10:73:44:a4:03:bb:
a9:9e:d6:c3:ec:bc:32:b2:28:a7:d2:f9:9d:96:be:0e:04:97:
df:0d:b3:d1:f0:81:f4:c1:04:3d:57:fc:e1:35:ae:ff:f5:86:
4c:90:57:fd:eb:23:d6:aa:06:77:8a:a2:ad:63:96:29:07:14:
20:94:23:c8:91:2a:90:bd:1f:01:bd:ed:f9:95:1b:52:19:46:
ad:71:15:ea:08:1e:aa:3b:63:42:9c:1a:8c:b9:72:eb:b1:bf:
3b:79:c3:75:1e:1d:4b:08:26:78:0f:82:30:e2:c5:83:e8:5c:
18:ce:57:06:da:5c:3a:34:09:cf:3f:3a:b3:54:37:85:e7:62:
5d:60:8d:14:50:74:f2:45:ec:9f:59:c3:c7:95:d9:c4:6f:c3:
56:13:11:51:df:25:81:58:e9:3f:60:be:f8:6b:d4:a4:7f:22:
d2:2a:99:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:28:31 2024 by rpki-client on console-fra.rpki-client.org