Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/xi6JHjDekG0twJgIyGkPNco3djE.roa
File: xi6JHjDekG0twJgIyGkPNco3djE.roa (raw, json)
Hash identifier: Hh4BVZoYjg5MyBv08R7H3gv7tWA0r0E9JiYJrTTaq8g=
Subject key identifier: C6:2E:89:1E:30:DE:90:6D:2D:C0:98:08:C8:69:0F:35:CA:37:76:31
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: 018CC64AA3E6D74D3BA78EAD971232E5CFBC
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/xi6JHjDekG0twJgIyGkPNco3djE.roa
Signing time: Mon 01 Jan 2024 18:30:29 +0000
ROA not before: Mon 01 Jan 2024 18:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15169
IP address blocks: 66.22.228.0/24 maxlen: 24
66.22.228.0/23 maxlen: 24
66.22.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:a3:e6:d7:4d:3b:a7:8e:ad:97:12:32:e5:cf:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: Jan 1 18:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c62e891e30de906d2dc09808c8690f35ca377631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bc:07:2f:1a:8e:55:b9:d4:7e:f5:7c:94:44:
6f:0c:35:e6:d0:42:5b:60:de:14:49:25:07:80:8d:
85:1d:f9:76:38:1c:e1:90:d8:40:a6:92:0a:bf:41:
e9:20:3e:b2:60:a3:da:25:22:d0:51:29:ec:6f:9e:
5e:5a:f0:d5:26:45:dd:80:02:4a:28:f4:b6:55:de:
c9:a5:59:d4:c7:4b:b3:28:e3:cc:1f:8e:f9:c9:81:
75:72:4a:64:07:0a:7f:63:c8:a7:94:75:c3:41:64:
19:4e:3a:b1:c5:a5:7a:bb:3a:56:ee:00:e2:82:b8:
77:eb:79:4d:a2:80:f8:74:bf:cd:96:ee:6c:27:90:
93:44:11:2d:a1:16:82:89:85:67:95:85:76:bf:f4:
4a:8b:85:f4:0e:55:ed:75:bc:93:c8:06:4b:1d:74:
d4:82:62:35:63:55:59:63:b7:d1:41:74:ae:09:da:
06:6a:5d:37:4f:5b:d8:1a:c9:f8:f5:cd:69:8d:ec:
0d:69:7b:39:27:de:a1:f8:56:44:2c:66:6c:48:79:
8e:36:17:55:6a:67:96:40:eb:d5:75:39:83:aa:5e:
b9:47:c3:8c:73:01:41:c8:20:2e:a4:c5:1e:84:90:
09:8b:d7:9c:07:03:69:30:f9:cd:24:c8:1e:f8:a8:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2E:89:1E:30:DE:90:6D:2D:C0:98:08:C8:69:0F:35:CA:37:76:31
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/xi6JHjDekG0twJgIyGkPNco3djE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.22.228.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:27:17:32:94:83:cd:54:ee:ce:75:93:c5:d4:a1:8a:2a:1c:
b0:d1:72:2e:98:70:19:15:46:ab:62:85:c4:b4:38:bb:7e:19:
d8:ea:8f:27:53:0b:8b:84:3e:d9:92:57:6a:8f:6f:1d:44:c4:
87:5b:bf:5b:3a:0f:12:b2:37:b2:39:68:4c:19:95:65:e3:fb:
6b:96:c3:e8:f8:81:fd:18:f9:a6:5d:25:75:86:e2:b0:a8:3c:
cf:12:37:de:4a:92:9c:0f:ae:3f:0c:6d:88:b7:02:b7:e6:cf:
51:12:c1:98:a4:63:7f:e2:22:04:7d:09:de:9c:99:08:dd:cf:
3d:c1:43:1a:20:31:1e:73:2f:42:c0:9e:37:4b:40:08:a8:e1:
5c:00:f0:b4:40:2c:8e:46:20:72:0a:bd:87:b7:20:b8:34:fe:
86:86:9e:7c:80:e2:92:c8:33:e5:95:b6:97:87:17:0c:44:98:
85:1e:68:f3:60:0f:30:3e:e8:18:73:9a:91:28:e5:73:dc:59:
40:09:4a:79:f7:46:d3:1d:08:c3:d1:bf:ec:39:d1:98:98:2d:
da:47:0b:d9:bd:71:f5:8d:38:77:20:32:1a:61:5e:9e:c6:85:
ba:fa:02:02:48:18:ec:1e:eb:32:50:a5:8b:f6:76:9b:18:93:
ae:d2:12:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:31:39 2024 by rpki-client on console-fra.rpki-client.org