Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/xcHNitLb9aO9KKFeoLbAhjawNbk.roa
File: xcHNitLb9aO9KKFeoLbAhjawNbk.roa (raw, json)
Hash identifier: x5fFdrDyNY+rQ0+Uhn+sSfPeEHDm8RE7R9gBjffHymo=
Subject key identifier: C5:C1:CD:8A:D2:DB:F5:A3:BD:28:A1:5E:A0:B6:C0:86:36:B0:35:B9
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 018CC56E14FCC506E4104537407A87E3EE6A
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/xcHNitLb9aO9KKFeoLbAhjawNbk.roa
Signing time: Mon 01 Jan 2024 14:29:35 +0000
ROA not before: Mon 01 Jan 2024 14:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 195.210.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:14:fc:c5:06:e4:10:45:37:40:7a:87:e3:ee:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5c1cd8ad2dbf5a3bd28a15ea0b6c08636b035b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:24:6c:2c:23:ab:b3:41:51:88:ed:3d:36:
71:57:57:b8:a3:9d:61:99:0b:a6:43:19:01:21:03:
0d:45:37:e4:38:01:1e:c9:56:64:01:f6:be:3d:38:
f5:40:94:fe:56:44:13:03:99:65:18:61:72:67:0f:
bf:13:de:7e:1f:91:e6:22:cb:f7:80:20:65:67:b1:
10:2f:48:cc:a3:3f:73:6b:49:24:7d:f5:f1:5d:9c:
e1:78:4e:70:45:75:8d:99:db:e7:d8:16:00:82:93:
81:3e:f8:4c:ae:fd:af:71:4d:1e:cc:75:87:6f:f0:
d5:26:f2:f7:2e:25:2c:99:bf:6c:30:10:34:fe:03:
b0:70:2b:f5:24:5f:a7:a0:52:85:ac:c1:41:b7:de:
e1:83:13:ca:74:10:bc:f6:54:51:9d:66:b4:c0:38:
1e:0b:67:eb:83:e5:45:ca:8d:b0:1a:b1:62:e8:26:
51:8b:3a:4a:77:ed:71:76:15:3a:18:97:4c:fa:bb:
bf:43:ee:eb:b8:f2:36:2e:28:7b:92:3d:d0:b5:bd:
d2:aa:94:e3:47:71:fe:8f:56:48:ec:14:08:8c:7a:
26:60:22:93:0b:b7:77:03:22:0d:b4:34:8d:3d:6b:
0b:ad:bb:c1:ae:9c:8c:d9:74:42:71:02:3b:b9:a2:
4b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C1:CD:8A:D2:DB:F5:A3:BD:28:A1:5E:A0:B6:C0:86:36:B0:35:B9
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/xcHNitLb9aO9KKFeoLbAhjawNbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:61:b7:8e:b6:a9:c4:1a:eb:8e:75:57:e2:ec:0a:1b:8b:b6:
93:20:a3:67:df:ec:8d:5e:ae:de:18:8b:fb:e2:59:68:40:54:
db:02:15:9d:5e:9b:67:9a:8b:92:88:68:84:7d:c1:89:66:db:
8a:47:b6:01:9c:c4:d0:de:08:3b:6d:4d:b6:27:25:a3:31:2c:
38:cd:af:12:34:2d:b8:b7:f1:ba:cb:53:78:ce:e0:42:4e:19:
8e:12:03:9e:09:70:07:80:cc:30:e2:a3:c4:18:2b:1d:58:4d:
ca:72:d9:60:8f:49:2b:9c:88:3b:13:88:f8:64:44:4e:cc:9c:
89:35:75:04:b8:8d:5d:32:b4:81:66:0f:b1:91:76:f6:c5:e9:
59:79:5e:cd:e5:de:cb:44:0e:c4:25:a2:c5:15:71:1e:20:42:
0e:ba:a6:41:07:dd:df:69:39:ff:5d:05:23:50:5a:46:e3:98:
cb:cc:bf:1b:20:f2:cf:8e:31:51:12:39:04:57:db:52:8e:25:
4f:58:c8:2c:0f:8a:3e:82:50:ad:b4:d0:a5:e0:6c:45:ad:a4:
29:37:4b:fd:a9:73:1f:2d:1c:94:2f:97:c0:0a:81:b7:85:5e:
5d:57:08:14:ac:69:23:d9:fd:9a:15:11:dc:23:69:13:1c:fc:
2d:84:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 17:53:40 2024 by rpki-client on console-ams.rpki-client.org