Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/XAXhQztW6_EnvoHe8nZu8VO1O1s.roa
File: XAXhQztW6_EnvoHe8nZu8VO1O1s.roa (raw, json)
Hash identifier: zAw2ydbUwcMZXNy3kGJwuMgsmSkyPgLiK3FgRgEDin8=
Subject key identifier: 5C:05:E1:43:3B:56:EB:F1:27:BE:81:DE:F2:76:6E:F1:53:B5:3B:5B
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 018CC94C0D617C635FE1EFCCDD0B0FE3D5F4
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/XAXhQztW6_EnvoHe8nZu8VO1O1s.roa
Signing time: Tue 02 Jan 2024 08:30:53 +0000
ROA not before: Tue 02 Jan 2024 08:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24971
IP address blocks: 91.226.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:0d:61:7c:63:5f:e1:ef:cc:dd:0b:0f:e3:d5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Jan 2 08:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c05e1433b56ebf127be81def2766ef153b53b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:b5:07:82:68:e7:aa:75:c2:d2:4a:27:e2:
b0:0a:6a:66:9c:a8:91:2e:cc:dd:18:9c:71:17:5b:
d1:6f:05:b3:73:c2:ce:79:bb:94:db:ba:49:bf:1c:
be:0a:17:8a:44:31:57:03:fb:f3:ea:28:ae:9a:32:
de:8e:ba:7d:82:8b:11:c1:8c:a3:11:76:48:65:2f:
0c:1f:ad:cf:53:5e:76:76:b4:da:37:78:ad:bd:e5:
cd:95:7c:4b:46:c7:e5:52:93:b3:96:a3:77:f0:99:
28:89:b4:bd:7c:29:fa:10:6b:5e:9a:ca:ba:61:3a:
fd:0f:36:5b:b9:2a:ca:19:c9:a0:31:a3:42:0f:5f:
82:27:b2:89:ef:25:0d:d5:d6:b9:70:a5:ad:07:eb:
d7:4d:2b:53:cd:41:64:14:34:b4:eb:38:7b:42:74:
ed:cb:50:53:e0:b1:87:d9:16:06:7b:fd:69:8d:26:
2d:81:29:8f:ac:b0:e5:39:f4:3f:3a:7b:f2:38:d1:
4e:56:04:9a:27:b4:62:d7:26:07:d1:03:a9:9f:f1:
ec:49:63:36:1c:1b:4a:ba:c7:da:48:d6:c2:09:1d:
53:b2:e1:b8:02:bb:0c:12:a7:fd:5a:4c:2e:ec:59:
3d:8e:ef:ba:cd:ee:29:37:8d:2a:e0:ea:af:b8:c3:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:05:E1:43:3B:56:EB:F1:27:BE:81:DE:F2:76:6E:F1:53:B5:3B:5B
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/XAXhQztW6_EnvoHe8nZu8VO1O1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.216.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:9c:88:e5:31:e2:20:63:06:91:c4:bb:da:4d:30:70:12:98:
12:27:ff:d6:12:37:22:f7:9b:53:b9:55:1c:ee:6f:ed:72:6e:
e4:bb:7a:ba:fa:ad:b5:8f:9f:96:0e:6b:3e:d4:12:8f:0b:2a:
87:1f:95:48:d1:d6:72:0a:db:4a:0f:f5:1f:54:30:65:20:f0:
b6:9d:e7:66:81:8b:d6:e5:a8:91:48:8e:5e:0f:15:3f:bb:44:
5d:f9:87:b1:81:e2:b0:08:45:10:b5:7a:f1:fc:16:b5:50:07:
7f:68:71:b7:32:87:9b:c4:62:2c:42:81:40:03:af:31:cf:a5:
29:bf:6c:42:ce:da:8a:cf:ec:2a:4a:32:0d:e4:62:bd:ea:9e:
27:9b:1d:ad:24:be:c8:d8:e3:80:bc:4b:fa:11:3d:ad:1d:6e:
41:3b:1a:a4:09:84:96:b8:4f:f7:5a:76:d2:76:ed:0d:92:79:
7b:bd:d3:8d:bb:f1:79:93:29:b4:aa:59:a7:a5:a8:2f:09:b9:
40:f4:aa:1e:34:04:18:4e:12:79:97:74:7a:69:2d:b4:52:57:
99:ae:a8:c6:37:3a:a9:60:69:7c:5f:72:d5:61:53:f7:89:24:
a7:53:29:c9:06:bf:1c:5d:43:6e:de:6e:b9:e4:bb:69:d0:bd:
0e:ba:0e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:49 2024 by rpki-client on console-ams.rpki-client.org