Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XsjCkdtBzJYGQS8mIXyWtDqnlIw.roa
File: XsjCkdtBzJYGQS8mIXyWtDqnlIw.roa (raw, json)
Hash identifier: s4PeGCSmPFXiKm3Izyx/LHqhpvEy/AeZMtLUYoZMHo0=
Subject key identifier: 5E:C8:C2:91:DB:41:CC:96:06:41:2F:26:21:7C:96:B4:3A:A7:94:8C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DCCC17A2F103639813C04EF58CD72A23E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XsjCkdtBzJYGQS8mIXyWtDqnlIw.roa
Signing time: Wed 21 Feb 2024 17:40:48 +0000
ROA not before: Wed 21 Feb 2024 17:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 193.31.12.0/24 maxlen: 24
193.31.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cc:c1:7a:2f:10:36:39:81:3c:04:ef:58:cd:72:a2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 21 17:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ec8c291db41cc9606412f26217c96b43aa7948c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:46:ad:31:5a:e7:9b:b5:4d:8d:6a:7a:21:
80:33:44:19:54:4c:f7:6e:13:11:e5:62:81:f3:e9:
a4:88:b9:23:5a:8e:06:ae:0a:9d:06:e8:2d:e1:32:
20:d3:43:0d:57:88:1c:82:3e:f7:83:28:91:61:42:
44:7d:de:22:29:58:67:a1:be:46:19:d8:b2:0c:2b:
59:41:ea:08:40:ba:c1:17:3d:d2:aa:5d:3d:5d:11:
50:86:9d:f8:1b:c6:09:9a:83:a7:28:5b:f3:52:7a:
a7:d2:ac:f6:9c:03:f5:a7:e3:c5:29:d6:2d:a2:f3:
24:0e:82:47:95:5b:d0:80:f1:94:6e:bf:9c:9f:ad:
d4:7f:de:e0:df:e7:5d:a3:ca:d6:30:31:86:44:92:
d8:f4:97:eb:c4:69:e0:fa:d5:6f:6b:35:13:32:f8:
ac:3f:a9:2d:b1:1e:07:5d:eb:41:46:c2:ed:14:32:
b5:3d:e3:c3:c9:ce:69:12:70:29:51:f8:9d:e7:46:
18:52:c5:5c:1d:1f:ab:ea:03:73:60:f9:fe:eb:75:
c8:cc:d5:86:50:98:52:e7:08:0b:dc:09:c1:aa:e3:
27:45:4c:95:89:83:32:73:b8:8e:a4:a5:90:d4:23:
4c:0c:98:d9:50:7e:e9:58:7a:b1:62:b4:71:a5:39:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C8:C2:91:DB:41:CC:96:06:41:2F:26:21:7C:96:B4:3A:A7:94:8C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XsjCkdtBzJYGQS8mIXyWtDqnlIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.12.0/23
Signature Algorithm: sha256WithRSAEncryption
16:4f:ec:2e:2b:69:b5:0e:a9:4a:ff:6f:ef:3f:5f:90:ed:77:
37:f3:be:79:8b:fc:3b:75:65:a0:20:6b:90:f3:b0:0b:b6:df:
47:bb:c1:dc:1a:69:0c:11:4f:e3:cb:ba:32:40:04:bb:ef:2c:
9c:0f:2e:cf:81:83:85:40:05:cb:7d:9f:1d:bc:2a:0d:06:d1:
22:b4:af:96:ff:95:e4:e3:2a:bd:5f:20:1e:02:56:6f:6e:4f:
d3:55:4c:c1:7a:db:2f:98:63:1e:5c:75:56:00:72:09:b7:c0:
01:52:d2:a8:71:a6:b0:79:a2:49:ab:84:8d:37:bf:b2:ee:7e:
16:f7:0e:59:5c:0e:48:18:18:04:e4:33:cd:c9:8a:3c:b5:e5:
d4:10:c4:fb:79:9b:3e:10:91:38:2a:d6:a5:17:8c:e8:db:92:
dd:b2:9e:36:30:b5:1b:99:49:81:b5:13:f0:01:34:20:33:9a:
ef:48:31:df:b6:f6:1e:a7:9f:e6:9c:ab:69:10:22:41:1a:35:
15:0c:c2:6d:83:ad:64:7f:df:79:a1:58:86:9e:16:40:1d:b6:
8c:98:3b:b1:29:b4:87:3c:a8:d6:1b:b3:97:04:c1:50:f3:b3:
c9:a5:36:f1:72:c1:9f:cd:03:68:e4:7d:d6:a4:92:57:b7:40:
86:4e:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 01:01:28 2024 by rpki-client on console-fra.rpki-client.org