Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/XqTEAkwIvipnIwMmH3yn8a6fa1w.roa
File: XqTEAkwIvipnIwMmH3yn8a6fa1w.roa (raw, json)
Hash identifier: rM9pKVIxt7Zf0WICeookI8LyElZwcRRJvd4VzgvrLdA=
Subject key identifier: 5E:A4:C4:02:4C:08:BE:2A:67:23:03:26:1F:7C:A7:F1:AE:9F:6B:5C
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 018CC72647C23DA4017C4194B83637981BE5
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/XqTEAkwIvipnIwMmH3yn8a6fa1w.roa
Signing time: Mon 01 Jan 2024 22:30:23 +0000
ROA not before: Mon 01 Jan 2024 22:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 91.204.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:47:c2:3d:a4:01:7c:41:94:b8:36:37:98:1b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Jan 1 22:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ea4c4024c08be2a672303261f7ca7f1ae9f6b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:65:bc:cb:76:b5:6d:5e:d8:32:16:b0:80:da:
17:96:92:0b:12:14:07:82:25:dd:75:f0:8c:31:2a:
24:44:13:75:40:66:3a:ad:59:6d:cb:1b:17:90:04:
98:c5:7b:f5:1e:cc:76:f8:14:fe:e4:10:dc:c2:fc:
45:58:5e:ef:b8:d8:32:cc:af:5d:a7:a5:ae:62:18:
e5:01:b1:cc:b9:28:c5:51:8d:f8:59:1d:c3:7b:ee:
fb:19:24:eb:5d:38:25:cc:7f:a9:24:d5:b7:fb:7b:
79:c4:86:08:77:cc:ed:c7:eb:83:0a:e5:18:bb:e3:
85:4c:00:06:fe:17:a9:96:62:de:7c:d1:ee:18:07:
f9:c3:d3:82:d4:b8:26:9f:1b:ba:26:fc:40:92:b5:
15:27:9c:9d:78:71:81:64:8a:52:0e:eb:bc:7e:00:
8c:20:76:3c:59:6d:f0:ad:45:ab:ef:95:94:31:f2:
05:d0:28:2d:db:81:12:a7:0d:2c:42:15:49:91:44:
45:1d:a0:0b:dd:f2:93:47:23:95:b0:4b:18:c2:e0:
44:62:83:d3:10:8e:9c:9d:36:a1:b7:9b:b3:49:21:
d5:1d:98:a5:52:14:0a:d0:e8:4a:9a:9e:87:a7:d7:
2f:4b:bd:a4:20:a3:69:30:78:81:7f:42:67:c0:8c:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A4:C4:02:4C:08:BE:2A:67:23:03:26:1F:7C:A7:F1:AE:9F:6B:5C
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/XqTEAkwIvipnIwMmH3yn8a6fa1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.83.0/24
Signature Algorithm: sha256WithRSAEncryption
64:35:bc:fb:f4:7e:7a:8f:3b:ec:b7:95:03:8f:fd:09:65:0c:
49:90:2e:63:ee:c5:0e:92:00:4e:3a:78:6f:65:97:28:16:54:
a3:7c:27:fa:79:69:de:70:b5:cc:ff:16:f6:d5:38:2b:35:e0:
da:11:1e:64:04:6d:a4:bd:56:0e:85:5e:1e:e5:a1:7b:24:1a:
45:61:53:9a:1b:73:24:62:ca:84:64:6b:4b:33:58:e0:71:ee:
dd:ee:ec:88:5f:df:00:1f:ca:33:e3:bf:85:80:83:da:d4:3f:
6a:32:a9:5c:44:5b:73:91:c3:5c:04:d6:14:49:46:44:5d:bc:
dd:8a:49:0e:ef:be:cf:d9:9c:0f:3d:5c:f2:0e:38:68:df:aa:
05:1c:61:32:d3:3c:d1:38:b5:5c:b8:90:48:11:be:1d:b1:d2:
c6:e1:ea:78:33:67:eb:7d:06:6a:8d:ee:a4:85:e8:c6:c2:46:
dc:47:4a:ca:be:bc:93:79:f8:94:c4:09:da:9e:9e:17:fc:14:
fe:8b:1b:45:59:6c:36:3e:dd:a0:5e:59:09:2a:32:07:19:25:
f4:61:fa:e8:64:9e:b0:05:9e:6b:9d:e7:33:f3:f0:8d:5d:49:
a0:10:e5:6c:4a:67:0c:20:0e:5f:e2:1b:a6:5d:0e:53:5c:b2:
b4:50:a8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:30:59 2024 by rpki-client on console-ams.rpki-client.org