Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/xizIN8l_W1AvfwvOVfPupP8mEfs.roa
File: xizIN8l_W1AvfwvOVfPupP8mEfs.roa (raw, json)
Hash identifier: sq/ZfDmTUb1f9ruZZZnjlvKEehcHWSGK771r38I26m4=
Subject key identifier: C6:2C:C8:37:C9:7F:5B:50:2F:7F:0B:CE:55:F3:EE:A4:FF:26:11:FB
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018CC6B819C49FB61E62B1CDB418606DF9A8
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/xizIN8l_W1AvfwvOVfPupP8mEfs.roa
Signing time: Mon 01 Jan 2024 20:30:03 +0000
ROA not before: Mon 01 Jan 2024 20:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49154
IP address blocks: 212.188.64.0/23 maxlen: 23
212.188.64.0/22 maxlen: 22
212.188.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:19:c4:9f:b6:1e:62:b1:cd:b4:18:60:6d:f9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 1 20:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c62cc837c97f5b502f7f0bce55f3eea4ff2611fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a6:10:42:cc:8f:ca:08:57:ab:34:ab:6d:17:
d9:b6:c0:3b:03:b6:39:0e:28:ae:40:26:ed:0c:47:
3d:77:2b:77:f2:7e:7c:ad:28:4c:d7:17:1b:e2:dc:
9d:77:1e:c2:b3:b5:12:1a:ba:7f:37:15:28:70:f0:
f2:c7:0c:5d:82:e1:18:b9:4b:85:b9:f9:09:90:d9:
78:2f:b9:b0:b2:ee:f7:9f:57:bb:be:d1:4c:d2:45:
25:9b:dd:22:72:79:e7:06:ed:cf:d4:e1:a4:f6:1e:
b8:4d:cc:6d:0d:cc:95:78:16:77:5e:35:38:4d:72:
e1:f1:0f:99:ce:81:e5:88:84:96:3e:a9:6e:59:4c:
9e:39:52:ec:98:9b:66:ce:c1:bd:50:30:6b:69:32:
0a:01:0e:6f:72:bf:ad:1c:32:50:1a:b2:54:47:86:
32:40:20:11:fa:19:3d:6f:8f:36:4c:df:b0:dd:e9:
2c:8d:52:b7:9f:8c:eb:de:10:37:70:97:f8:ac:15:
d3:d0:4e:26:2d:f8:a8:8a:17:ef:2c:74:b7:1f:7c:
1f:9d:d4:59:0a:25:57:57:a9:6e:04:23:b9:42:fa:
2e:18:9a:d7:26:42:97:5c:08:2f:35:1b:80:de:60:
5c:d4:0d:49:df:b0:79:2c:18:64:02:6f:6d:64:a8:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2C:C8:37:C9:7F:5B:50:2F:7F:0B:CE:55:F3:EE:A4:FF:26:11:FB
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/xizIN8l_W1AvfwvOVfPupP8mEfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.188.64.0/22
Signature Algorithm: sha256WithRSAEncryption
50:99:47:0a:ef:e8:63:0a:39:cd:88:bd:ad:e3:f3:57:65:91:
dd:3d:c5:37:0b:16:37:ac:13:26:c5:50:ba:c5:fb:b6:fd:84:
27:ab:f0:fd:6c:d9:13:f0:90:c5:4d:52:17:27:cf:b3:04:89:
9f:9a:93:c9:4a:a0:39:e4:ea:db:5d:bb:1b:26:55:80:a3:83:
39:42:b8:18:46:98:c8:ac:85:47:a1:88:ac:cd:c7:da:09:35:
0b:54:fe:04:b7:64:4c:97:e5:85:18:5f:c2:0a:1f:58:92:70:
16:56:56:67:f3:bf:51:74:da:51:67:2d:7d:a9:c4:96:95:23:
f2:b9:b6:a2:b6:a9:b1:95:10:c3:ab:be:6c:05:09:09:58:91:
aa:45:f1:e6:2d:02:1a:c1:2c:aa:50:da:db:23:5a:8f:50:f9:
c1:40:7b:7b:90:fd:24:f2:f0:a8:d7:d3:ae:51:73:eb:6b:a3:
8a:5c:69:dc:f9:34:f1:97:0d:4d:9e:81:60:6f:45:5c:9c:e7:
40:0f:8c:8a:ed:3e:e8:d6:95:ad:6a:d8:aa:7a:49:e0:b1:71:
db:4a:20:3b:31:8b:68:c1:47:06:68:0b:1f:5e:da:7e:40:10:
ee:08:f9:63:3a:73:25:a2:a0:35:d8:ab:3f:a3:7a:24:a5:b4:
a3:b5:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:53 2024 by rpki-client on console-fra.rpki-client.org