Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/xU5MczumYTk24Bkp0m-V2QFIzZA.roa
File: xU5MczumYTk24Bkp0m-V2QFIzZA.roa (raw, json)
Hash identifier: MrPzhzQMyVixmwcIZRnc2hZtiekh97VlfgV19/LAbWk=
Subject key identifier: C5:4E:4C:73:3B:A6:61:39:36:E0:19:29:D2:6F:95:D9:01:48:CD:90
Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial: 018F815ECBA589BD032B376F168D58D297A3
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/xU5MczumYTk24Bkp0m-V2QFIzZA.roa
Signing time: Thu 16 May 2024 12:27:04 +0000
ROA not before: Thu 16 May 2024 12:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 89.19.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:5e:cb:a5:89:bd:03:2b:37:6f:16:8d:58:d2:97:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Validity
Not Before: May 16 12:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c54e4c733ba6613936e01929d26f95d90148cd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:05:35:05:14:d3:10:38:c5:0b:6a:be:49:
62:8c:27:f2:51:af:5a:ac:f6:0f:d8:27:d1:11:bb:
7f:f3:34:64:ab:dd:11:bf:e3:ee:8d:5a:66:72:76:
0d:a3:97:6b:65:81:d5:29:9f:32:81:84:f1:83:c6:
0b:7a:92:d1:3a:4e:a7:bb:14:7a:62:09:3e:42:78:
38:22:5b:77:0a:63:15:a0:2c:b2:47:aa:55:92:88:
d7:e3:01:a1:1f:81:96:32:1c:7f:ec:22:73:87:60:
64:19:63:6c:16:66:6c:2a:a7:ff:3d:ce:67:27:57:
fa:8b:8c:db:3c:d0:29:2c:61:48:d3:50:21:e9:4f:
56:15:b4:75:ee:0f:f6:73:00:2c:56:0b:0f:0f:90:
9d:81:11:1d:b8:0e:21:8b:19:52:44:d3:0e:48:ec:
49:7b:39:d3:5b:17:fe:57:24:1c:71:fe:e4:d7:25:
9b:c9:ed:73:83:89:16:14:f7:9f:57:c0:f7:91:a4:
62:41:b6:e5:d3:6c:de:0b:c6:40:9b:ec:9e:64:42:
59:52:25:0f:21:03:05:5d:3a:6e:44:5a:b1:cd:ef:
5a:9e:f8:15:bf:ae:57:f8:b0:a8:95:c6:ac:3b:c1:
bc:a7:e8:5a:2f:e6:e1:07:01:ed:e3:5e:77:fd:43:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4E:4C:73:3B:A6:61:39:36:E0:19:29:D2:6F:95:D9:01:48:CD:90
X509v3 Authority Key Identifier:
keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/xU5MczumYTk24Bkp0m-V2QFIzZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.220.0/22
Signature Algorithm: sha256WithRSAEncryption
10:53:17:d2:cd:a9:5a:36:6d:d3:1d:13:fd:a4:38:51:91:b6:
6f:99:e7:66:ea:99:f4:ce:95:e1:a6:91:e8:0a:cf:c5:34:44:
e6:0d:42:49:99:92:d8:0e:12:74:54:38:24:11:e1:54:ae:53:
e2:86:21:c5:70:5c:38:48:0d:54:5d:81:66:57:22:18:20:95:
10:4b:a7:d6:8d:0f:45:88:64:be:78:40:5e:4b:22:d3:54:21:
6e:f5:38:17:13:53:17:c2:98:6e:96:27:53:71:f1:43:50:18:
c6:67:43:ce:8c:cb:fb:c5:c3:e4:b4:dd:0f:7e:69:61:c4:d4:
68:14:e4:22:e5:bb:d7:cc:93:56:01:53:99:70:f2:1a:5f:25:
fd:bb:00:cc:78:61:51:6b:ee:a8:9e:c7:bf:3a:e7:86:80:e7:
55:77:37:55:64:e2:f5:d7:c6:37:9a:13:65:55:81:b4:db:75:
1f:fc:ca:5b:55:b7:e8:ba:8e:4f:d8:83:dd:8f:5c:ea:e9:da:
9e:da:c3:1d:99:20:11:4a:f2:61:5b:91:9c:c6:e4:0f:99:ef:
5f:09:f1:10:2c:d3:1e:ce:65:31:e2:93:5b:8c:2f:b9:f7:e2:
1b:15:d7:24:b9:14:de:46:bd:fa:1c:dc:ce:a0:c0:0e:e4:84:
e3:61:09:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:03:07 2024 by rpki-client on console-fra.rpki-client.org