Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XCy7feW8XqZlfPwwSoVvfEKDZ2s.roa
File: XCy7feW8XqZlfPwwSoVvfEKDZ2s.roa (raw, json)
Hash identifier: WE5EpYq4l5SCmqJAKRKCM8k8CAgO7/qNdKFtehowKqk=
Subject key identifier: 5C:2C:BB:7D:E5:BC:5E:A6:65:7C:FC:30:4A:85:6F:7C:42:83:67:6B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01928B6AE86FE6BDAADC3A5EE94C38D40AF8
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XCy7feW8XqZlfPwwSoVvfEKDZ2s.roa
Signing time: Mon 14 Oct 2024 14:24:52 +0000
ROA not before: Mon 14 Oct 2024 14:24:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 84.32.223.0/24 maxlen: 24
84.32.236.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8b:6a:e8:6f:e6:bd:aa:dc:3a:5e:e9:4c:38:d4:0a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 14 14:24:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c2cbb7de5bc5ea6657cfc304a856f7c4283676b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:bb:5c:b7:9c:2d:ef:eb:bf:df:5b:8a:93:
e2:72:0c:21:e4:1d:a4:ce:cb:04:7c:29:60:90:05:
2c:dd:af:f2:4e:64:c1:83:f2:a4:1b:cd:91:b1:c4:
e3:82:4d:a5:b3:0b:0b:1f:78:16:dc:48:8b:29:89:
d9:48:98:04:8a:40:ca:ec:ad:a0:f3:07:94:6c:c5:
65:0e:d6:3b:f8:50:4c:56:ba:6b:a3:c7:bd:7a:a8:
72:81:f1:a3:5b:00:a3:35:ee:09:60:cb:99:af:4e:
78:c4:75:a1:c4:cd:a9:32:1a:28:60:77:bb:f2:e1:
5d:76:14:4d:39:23:87:56:0f:d5:1e:19:ba:ca:af:
ac:2b:ea:47:78:6c:32:75:0a:6f:a5:15:25:10:74:
b1:4a:b9:b6:6c:d0:7c:4c:c8:3e:a4:f8:95:18:4f:
38:e5:87:de:72:11:85:b0:18:2b:18:5f:e1:3e:ea:
9e:ba:04:56:d8:36:a0:54:38:bf:12:74:31:a4:10:
6a:99:10:97:e9:60:c4:3e:1c:2a:4e:df:d1:21:4b:
f8:0c:ad:5d:8d:29:b3:4b:c5:e6:7a:4d:2d:d6:43:
54:42:62:35:2a:4e:92:c4:d4:27:e4:66:d5:93:65:
3f:b1:d1:b3:d0:24:48:7d:af:ce:b2:b1:28:fb:b4:
5d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2C:BB:7D:E5:BC:5E:A6:65:7C:FC:30:4A:85:6F:7C:42:83:67:6B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XCy7feW8XqZlfPwwSoVvfEKDZ2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.223.0/24
84.32.236.0/24
88.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:17:96:38:c8:aa:f2:ca:3f:48:cd:fd:9d:3a:69:cc:09:56:
7f:d5:92:ba:d1:13:55:54:07:20:a2:1f:b3:54:22:5b:27:f1:
96:43:ae:fd:99:bc:93:33:c8:2d:79:20:8e:da:43:45:26:b0:
fe:46:2a:48:3f:98:15:d4:e7:d7:6c:40:d5:10:60:44:f3:cd:
1c:65:5e:4a:2c:ae:58:d3:ad:8d:1b:a9:94:e8:bd:25:7b:85:
45:e3:29:8f:84:61:2d:a4:98:16:4a:a2:cd:3f:87:95:b1:33:
bf:41:10:2d:1d:4d:84:a3:d0:30:47:7a:d7:3f:12:2f:bf:62:
92:4c:a3:02:ce:12:a5:70:0f:4d:53:f5:02:d3:f8:82:45:87:
92:a6:27:72:82:49:83:3a:86:6f:88:74:d1:a5:b6:e6:ff:4f:
63:94:9d:f3:37:6c:7c:67:de:8b:45:dc:ab:3b:6e:6b:92:e2:
68:66:69:9c:3f:d2:53:25:ea:27:04:e7:db:a6:11:8f:76:f1:
ef:65:1d:f0:de:9a:9b:2b:33:13:f5:d7:1a:7c:a6:d6:87:5f:
39:85:c0:ee:03:ab:c9:09:c7:2b:b8:a0:2e:9b:57:a8:b2:52:
be:c0:d8:ec:30:1c:0e:7f:0f:9b:a2:e8:e3:d0:fc:e3:6c:dd:
90:b4:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:01 2024 by rpki-client on console-fra.rpki-client.org