Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/xDBiXACMT82UTlxGLvs9fU65jDg.roa
File: xDBiXACMT82UTlxGLvs9fU65jDg.roa (raw, json)
Hash identifier: Iev9kr3yjO3MnfQ7mlRykLGCcR5dIO5USx6z6FLf4u8=
Subject key identifier: C4:30:62:5C:00:8C:4F:CD:94:4E:5C:46:2E:FB:3D:7D:4E:B9:8C:38
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 018CC5012C086F0B8A6B6A0632FAFA5163C3
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/xDBiXACMT82UTlxGLvs9fU65jDg.roa
Signing time: Mon 01 Jan 2024 12:30:37 +0000
ROA not before: Mon 01 Jan 2024 12:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13043
IP address blocks: 164.60.0.0/16 maxlen: 24
212.64.225.0/24 maxlen: 24
164.59.128.0/23 maxlen: 24
164.59.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2c:08:6f:0b:8a:6b:6a:06:32:fa:fa:51:63:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Jan 1 12:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c430625c008c4fcd944e5c462efb3d7d4eb98c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:c9:b9:3c:95:62:bf:ae:d7:c6:39:8a:7a:
ee:f6:79:b2:b9:06:6a:0c:79:73:e9:2d:d4:e4:ab:
c0:43:34:e7:28:cc:22:e7:78:62:6a:cf:30:77:d2:
8f:e5:36:01:2d:ab:3a:b2:7e:9e:7d:0b:f2:5e:05:
92:1d:e5:89:0c:ab:ce:3b:ad:29:c2:8a:39:f6:4b:
0c:ca:d7:14:18:68:c5:df:80:71:f6:01:32:a8:11:
9d:92:01:91:58:13:c8:14:72:82:4c:d6:34:2c:83:
62:4d:bc:2c:48:be:ce:c8:77:c9:3d:72:0c:eb:6e:
ba:f8:31:92:39:60:34:14:82:7c:8b:3a:f7:2d:db:
09:f6:fb:a5:98:b8:0b:e5:5c:bc:21:b5:23:f3:d9:
dc:da:7f:4b:8d:d7:65:c0:12:fb:b7:26:b4:d7:9d:
e1:cc:85:fa:f8:48:ec:a9:ce:4e:8c:83:5f:ca:d0:
93:a5:03:c8:49:46:63:55:b4:b4:cb:8c:46:46:42:
a4:8d:e5:51:7f:09:81:cd:a1:3b:9c:2c:c4:36:50:
c1:3c:74:85:70:71:d7:1b:ab:0c:76:ab:35:9a:a6:
46:05:5d:79:58:f5:7a:8a:92:34:7c:b2:bb:5e:63:
de:d1:62:93:5e:81:19:7a:cf:40:80:e1:2c:d4:68:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:30:62:5C:00:8C:4F:CD:94:4E:5C:46:2E:FB:3D:7D:4E:B9:8C:38
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/xDBiXACMT82UTlxGLvs9fU65jDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.59.128.0-164.59.130.255
164.60.0.0/16
212.64.225.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ed:ef:2f:96:1b:30:f8:ed:f3:ff:d6:96:aa:05:10:e5:a4:
83:4c:95:55:37:e5:98:91:24:b6:20:74:e1:4b:fa:41:00:2e:
f3:a1:12:b8:4f:1d:1a:4e:6f:63:2c:38:16:80:b8:5c:d1:7e:
fe:10:8c:91:53:69:53:cc:57:01:84:94:f5:9e:1c:9d:83:1f:
6e:e6:92:90:5e:e6:10:cd:45:0b:fc:4b:52:2b:f8:58:9f:cf:
0e:40:fc:e7:6c:a7:c2:ec:98:b1:ce:b2:c4:09:9a:3a:32:7a:
13:27:5f:66:b1:3e:3d:f0:37:81:97:ca:ce:91:18:54:29:b6:
e8:1f:3a:d7:ba:4a:3a:96:1f:68:93:1d:23:b2:2f:8b:34:fb:
ec:9f:3a:3d:f3:49:e4:d3:01:ad:59:3d:3d:cc:1b:93:c6:1c:
18:e8:fb:eb:63:b9:c1:0a:85:b3:05:06:5e:35:5c:7e:7b:48:
47:33:b2:d9:d4:e6:06:c7:b1:29:3b:ff:b0:4d:f0:e9:c7:b7:
0f:74:61:fc:96:08:6d:90:80:47:be:6a:71:22:5f:cb:d6:96:
59:15:84:92:bb:6d:ba:db:35:f7:db:54:8a:f9:e3:c3:de:35:
d1:ce:ba:d1:53:c7:76:ed:0b:1d:f8:69:ef:7c:5c:4c:69:ea:
32:31:f3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:53:35 2024 by rpki-client on console-fra.rpki-client.org