Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/XkNFwMB84ciJNCXyuWGgYNR5Yuo.roa
File: XkNFwMB84ciJNCXyuWGgYNR5Yuo.roa (raw, json)
Hash identifier: qnWTO6emGL6jzH3+oVmBJg1WzJnEnaRygEzOvUgeKWQ=
Subject key identifier: 5E:43:45:C0:C0:7C:E1:C8:89:34:25:F2:B9:61:A0:60:D4:79:62:EA
Certificate issuer: /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial: 018CC425342DD2A493DBD4AF5CBF1C108B8B
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/XkNFwMB84ciJNCXyuWGgYNR5Yuo.roa
Signing time: Mon 01 Jan 2024 08:30:21 +0000
ROA not before: Mon 01 Jan 2024 08:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 194.147.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:34:2d:d2:a4:93:db:d4:af:5c:bf:1c:10:8b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Validity
Not Before: Jan 1 08:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e4345c0c07ce1c8893425f2b961a060d47962ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d3:1b:5c:98:c3:13:12:42:cc:b0:0a:7e:13:
8a:60:18:74:72:90:1a:5e:dc:90:33:86:34:87:a7:
11:76:4b:85:a9:4f:a4:d8:8d:06:b2:9b:67:f9:4d:
35:cb:51:7d:1a:f0:5c:82:d8:68:37:aa:8f:b0:ec:
01:96:ba:cf:b1:0a:d8:73:6b:43:57:f1:80:3e:02:
da:f2:df:d1:59:c5:86:34:23:40:d2:19:be:9b:c0:
bb:52:f0:e2:53:42:40:cd:5b:ed:53:0c:00:af:50:
9b:36:bc:62:eb:86:56:af:fa:0e:0e:d8:8a:83:f8:
99:f8:79:77:32:7b:71:0a:21:bc:a9:01:ee:97:3f:
a3:9e:a7:39:21:b0:9d:be:62:35:00:7a:de:78:dd:
c8:dc:7c:6a:cc:27:74:6b:6e:27:1a:c7:6a:ef:dc:
54:9c:a4:81:39:3e:25:89:1b:30:c0:d7:11:23:ff:
1a:cb:c5:7b:ca:69:46:73:83:71:c4:cf:51:25:be:
c3:38:eb:64:1f:be:9f:3b:34:ab:ee:64:a4:d7:33:
e2:fe:34:33:76:a5:b9:12:fa:5c:f8:4a:7d:52:b7:
11:39:91:8f:bb:bb:64:ed:12:bf:45:e6:f3:c6:14:
9b:49:73:9b:27:ec:37:70:c2:b5:ae:33:19:a2:d4:
df:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:43:45:C0:C0:7C:E1:C8:89:34:25:F2:B9:61:A0:60:D4:79:62:EA
X509v3 Authority Key Identifier:
keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/XkNFwMB84ciJNCXyuWGgYNR5Yuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.134.0/23
Signature Algorithm: sha256WithRSAEncryption
71:19:20:c9:76:ca:0a:d2:5c:4d:1b:48:0e:e6:b8:f9:fb:e4:
06:89:70:57:9e:2a:25:8a:99:a0:55:c8:1f:95:b1:4a:f9:b5:
d6:6e:26:e2:bd:19:3b:b9:7d:f7:6e:32:18:c3:a5:77:47:66:
13:44:4b:d3:e8:45:f1:48:13:54:a1:1c:06:67:f3:1b:46:73:
79:57:c3:85:97:86:2e:5d:4c:84:8c:64:47:74:63:9b:d0:cf:
0c:77:b7:29:81:98:6d:9e:05:81:33:c1:35:05:38:90:25:57:
8a:26:80:04:fe:c3:27:9d:aa:8d:7c:f1:3f:5e:71:76:bc:1c:
84:77:c9:89:2b:f6:c6:d0:bc:f7:99:f4:ee:e0:66:d9:9a:fd:
73:67:f1:18:34:cd:95:38:d3:5c:33:ae:42:4e:ec:f8:e8:82:
3e:ac:47:c9:02:1f:55:56:f3:36:72:48:6a:b4:5b:e9:9e:ca:
67:72:67:94:b0:2a:17:a6:a2:be:89:c5:ad:2b:1e:67:bf:e2:
27:17:35:fc:f6:2d:69:5a:b9:d1:a3:3f:63:5e:df:f5:63:99:
99:e2:06:53:28:60:16:32:55:03:a4:16:1d:cd:43:e2:26:bc:
a1:2e:15:a5:f1:1c:e7:56:4f:56:cc:29:40:c0:d8:ba:dc:46:
9c:17:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:03:43 2024 by rpki-client on console-fra.rpki-client.org