Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XDZy_melK3mX3SVa8YcqOub7_dE.roa
File: XDZy_melK3mX3SVa8YcqOub7_dE.roa (raw, json)
Hash identifier: pwdC5stK6TWlJfRD0uZ0ECFI1MzajplXO/CkfPOQfg4=
Subject key identifier: 5C:36:72:FE:67:A5:2B:79:97:DD:25:5A:F1:87:2A:3A:E6:FB:FD:D1
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348E3BEC537D1D57511D5F04AD14C8A
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XDZy_melK3mX3SVa8YcqOub7_dE.roa
Signing time: Mon 01 Jan 2024 04:29:43 +0000
ROA not before: Mon 01 Jan 2024 04:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205815
IP address blocks: 194.209.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e3:be:c5:37:d1:d5:75:11:d5:f0:4a:d1:4c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c3672fe67a52b7997dd255af1872a3ae6fbfdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:9c:b8:e1:7b:04:e1:b0:aa:ac:0b:a4:69:
6b:f2:e9:e7:50:4b:d5:9e:d4:5c:31:88:a6:ee:21:
36:0f:db:41:99:9f:fd:ac:58:ac:79:fd:86:9a:2f:
2f:76:ff:e4:e2:de:49:ba:84:b9:c0:0f:05:04:ea:
28:9a:b9:ad:1c:fa:c6:ce:fa:99:5a:77:ff:b2:3c:
da:0d:87:0b:41:e2:61:01:ce:de:7d:0e:37:b6:a9:
29:68:67:d7:f7:5d:b6:f1:6c:a1:6b:b5:68:19:f7:
46:4d:57:f5:7f:78:7f:d6:76:9c:31:e3:09:93:82:
18:92:68:d1:cc:64:48:07:00:41:be:31:26:e3:66:
aa:2a:5d:e2:9e:98:a2:6f:6a:19:48:da:86:d5:50:
ce:67:9e:c5:67:18:42:43:4f:23:87:87:d8:60:92:
f0:5b:62:bc:59:e7:9d:02:7a:85:f5:e5:d0:eb:c6:
9f:08:36:b2:59:7c:e2:bc:69:ac:55:f2:17:4d:a4:
8c:41:43:b9:8f:39:a2:48:e3:b3:41:46:6d:02:4a:
97:e3:8c:6e:6f:41:f0:cb:ed:fd:72:01:3b:f8:60:
83:88:d0:b8:b7:41:8f:9a:49:88:2a:ca:2e:72:cc:
47:f0:31:b4:d0:04:dc:69:fd:a0:7f:3a:93:09:9a:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:36:72:FE:67:A5:2B:79:97:DD:25:5A:F1:87:2A:3A:E6:FB:FD:D1
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XDZy_melK3mX3SVa8YcqOub7_dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.121.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f9:46:06:99:a8:5d:a7:db:b9:5d:2d:73:fc:99:42:7d:03:
b2:4a:51:18:53:21:10:5a:66:94:3c:4d:26:82:1b:0f:a7:e6:
a7:16:a4:4e:36:60:3d:54:85:96:9e:d0:bf:7b:3b:e2:48:08:
39:a1:25:22:7f:d7:ef:05:d1:2b:f2:8b:62:f8:2b:71:68:10:
07:b5:c7:d2:56:6a:03:9c:74:db:f3:8a:1c:ce:3a:e7:36:e1:
4d:8d:e0:6f:1d:0b:61:ba:62:8f:2b:60:54:92:e2:3b:4c:3e:
ff:5a:1f:7e:0c:72:43:19:55:c5:63:45:71:47:89:03:b1:7c:
0f:21:07:e5:96:e9:89:d8:1d:47:f4:24:56:ce:1d:b3:42:cf:
2c:b8:de:fa:66:6f:60:b7:cc:a2:9e:63:ce:3a:12:db:cd:dc:
87:0c:93:c4:54:ed:b9:51:08:04:d0:d7:fd:16:8b:52:b6:cc:
5b:28:f9:1d:87:9f:51:97:52:37:a9:d5:f6:ba:16:71:4f:34:
36:ff:c2:61:c5:2b:e7:3f:d1:ae:9f:63:58:f6:e0:c8:20:91:
a2:44:03:43:2d:76:99:30:e3:61:0b:d0:54:0e:c8:4d:bf:ef:
79:b6:c8:12:52:59:52:3c:e0:5b:30:58:d8:45:5d:c7:a9:62:
61:b6:10:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSOO+xTfR1XUR1fBK0UyKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjQwMTAxMDQyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzM2NzJmZTY3YTUyYjc5OTdkZDI1NWFmMTg3MmEzYWU2ZmJmZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbmcuOF7BOGwqqwLpGlr8unnUEvV
ntRcMYim7iE2D9tBmZ/9rFisef2Gmi8vdv/k4t5JuoS5wA8FBOoomrmtHPrGzvqZ
Wnf/sjzaDYcLQeJhAc7efQ43tqkpaGfX91228Wyha7VoGfdGTVf1f3h/1nacMeMJ
k4IYkmjRzGRIBwBBvjEm42aqKl3inpiib2oZSNqG1VDOZ57FZxhCQ08jh4fYYJLw
W2K8WeedAnqF9eXQ68afCDayWXzivGmsVfIXTaSMQUO5jzmiSOOzQUZtAkqX44xu
b0Hwy+39cgE7+GCDiNC4t0GPmkmIKsoucsxH8DG00ATcaf2gfzqTCZroNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFw2cv5npSt5l90lWvGHKjrm+/3RMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvWERaeV9tZWxLM21YM1NWYThZY3FPdWI3X2RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtF5MA0G
CSqGSIb3DQEBCwUAA4IBAQAQ+UYGmahdp9u5XS1z/JlCfQOySlEYUyEQWmaUPE0m
ghsPp+anFqRONmA9VIWWntC/ezviSAg5oSUif9fvBdEr8oti+CtxaBAHtcfSVmoD
nHTb84oczjrnNuFNjeBvHQthumKPK2BUkuI7TD7/Wh9+DHJDGVXFY0VxR4kDsXwP
IQfllumJ2B1H9CRWzh2zQs8suN76Zm9gt8yinmPOOhLbzdyHDJPEVO25UQgE0Nf9
FotStsxbKPkdh59Rl1I3qdX2uhZxTzQ2/8JhxSvnP9Gun2NY9uDIIJGiRANDLXaZ
MONhC9BUDshNv+95tsgSUllSPOBbMFjYRV3HqWJhthAt
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:37:36 2024 by rpki-client on console-ams.rpki-client.org