Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/XFs96z2YDgce9cCX0VaIS0lQt1Q.roa
File: XFs96z2YDgce9cCX0VaIS0lQt1Q.roa (raw, json)
Hash identifier: bnr+9jFkk2vbuUc4Nrx3SpQJFQ4GmibzvKflBXU//lU=
Subject key identifier: 5C:5B:3D:EB:3D:98:0E:07:1E:F5:C0:97:D1:56:88:4B:49:50:B7:54
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 018CC794CD9694F2375211B30FD690A366EC
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/XFs96z2YDgce9cCX0VaIS0lQt1Q.roa
Signing time: Tue 02 Jan 2024 00:31:07 +0000
ROA not before: Tue 02 Jan 2024 00:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26506
IP address blocks: 86.51.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:cd:96:94:f2:37:52:11:b3:0f:d6:90:a3:66:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Jan 2 00:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c5b3deb3d980e071ef5c097d156884b4950b754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d2:2c:ba:5b:ef:40:50:8c:70:c4:41:5b:78:
f6:40:92:c4:5e:68:3f:b6:0a:f9:d1:28:26:ae:2c:
21:0a:64:1f:a9:35:a3:ec:07:6b:9d:ea:dd:72:58:
84:62:61:b9:09:ce:01:e5:1a:2d:40:af:66:22:d9:
92:71:69:d7:13:b3:58:00:0c:26:43:1b:ad:a8:92:
27:35:49:af:76:5f:e4:36:18:61:c3:a8:92:ae:f4:
a6:fc:2d:ae:d9:9d:d0:d8:39:8a:40:f7:20:d6:47:
2f:68:d6:3a:3f:5e:64:89:bc:c6:6f:d9:85:a6:85:
10:9d:69:af:4f:d4:43:9b:6a:75:6f:d1:6f:75:7d:
fc:f3:2f:75:bc:82:d3:58:3a:2d:5f:4e:2f:97:67:
06:1c:eb:9b:56:14:b4:f9:71:40:c9:df:40:45:1b:
45:f1:58:8b:1d:00:8f:e3:73:df:b9:ff:44:26:16:
3e:ab:6b:82:ea:93:c8:68:9e:fe:e8:5d:ab:6a:b4:
29:bc:23:3b:cb:91:95:e1:98:78:3d:2f:83:62:d9:
3c:7f:5e:05:99:8c:d5:37:36:dd:51:57:7d:27:19:
79:4e:7d:df:fd:4a:45:03:97:46:bb:03:a1:cf:bf:
40:e6:91:0c:22:bf:3d:53:29:77:74:94:c3:38:cf:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:3D:EB:3D:98:0E:07:1E:F5:C0:97:D1:56:88:4B:49:50:B7:54
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/XFs96z2YDgce9cCX0VaIS0lQt1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.51.91.0/24
Signature Algorithm: sha256WithRSAEncryption
09:17:1b:05:14:e9:fd:41:22:57:8c:ce:62:ee:77:74:cb:51:
aa:18:3e:aa:8a:cb:01:9b:47:71:96:ff:4a:f4:bd:79:dd:a3:
df:22:ce:4b:ae:a9:4b:9f:8d:ef:6a:35:9e:f0:b4:46:7d:3c:
4d:8f:0c:8b:f6:42:df:a6:36:1d:cd:53:80:88:95:e6:3d:db:
46:f4:6a:ea:db:03:8b:15:62:10:d2:ec:ed:3f:7f:40:50:02:
28:9e:c5:54:71:58:54:9e:cd:25:35:8f:69:a4:34:31:12:0f:
a8:fd:ba:ea:00:2e:b5:7a:d4:7d:97:4d:5c:9d:94:34:aa:18:
b1:c4:32:01:e2:07:04:fb:66:33:ad:02:0b:79:23:3b:4e:a3:
54:86:ff:24:46:ed:47:a6:1c:79:71:d4:5c:b2:51:a7:77:6c:
fb:23:91:0f:29:71:e5:f7:a7:44:ad:dd:f3:71:c4:a6:5e:62:
de:b9:b2:b9:9c:75:31:e6:7e:f8:85:52:95:76:92:54:44:3b:
35:87:46:a0:dd:3b:54:67:37:44:1e:7d:ab:4a:11:3d:db:90:
f5:c6:51:cc:db:36:39:9e:e6:ee:57:39:18:d8:09:84:4e:84:
da:0f:23:1e:19:79:49:46:12:94:5f:35:78:35:de:21:31:7c:
e8:c2:7e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 20:39:56 2024 by rpki-client on console-ams.rpki-client.org