Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xKCe5uZ0sEk184E567w46vtcy5g.roa
File: xKCe5uZ0sEk184E567w46vtcy5g.roa (raw, json)
Hash identifier: uA68Ut7xJiCt3jTl5rdLH08XOc43GggJ+Ybqe6XkZPQ=
Subject key identifier: C4:A0:9E:E6:E6:74:B0:49:35:F3:81:39:EB:BC:38:EA:FB:5C:CB:98
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC5014614BB87AD0840F6FB27BC3CC941
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xKCe5uZ0sEk184E567w46vtcy5g.roa
Signing time: Mon 01 Jan 2024 12:30:44 +0000
ROA not before: Mon 01 Jan 2024 12:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61112
IP address blocks: 88.216.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:46:14:bb:87:ad:08:40:f6:fb:27:bc:3c:c9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4a09ee6e674b04935f38139ebbc38eafb5ccb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:e6:6e:dc:f3:3d:93:7a:01:8e:2e:dd:82:
c0:02:e4:58:9c:ec:54:bc:4b:e1:f8:2f:cd:71:f9:
8a:63:fa:48:c0:1f:a1:53:4a:f6:00:17:3b:c1:6e:
b2:c4:37:fd:1d:a0:1b:c3:3e:bc:a9:00:ae:ef:eb:
35:89:47:9b:5f:0d:4b:24:b0:4e:d8:31:c9:ac:11:
cd:c8:ed:b5:40:09:83:a8:ea:41:b3:e8:e6:73:dd:
75:07:fe:39:c2:b8:7e:70:fd:d7:7f:7c:00:b6:a7:
52:45:27:55:61:a7:76:69:bd:64:bf:91:d6:03:ef:
57:6c:9e:39:57:a8:fb:d2:61:75:42:a5:7b:4b:98:
29:df:45:75:45:b8:91:b6:e5:a1:f9:71:6e:d3:f5:
ca:e4:47:18:f0:90:3d:e9:26:e8:92:1a:df:3d:e9:
84:fe:10:63:5e:6a:28:a7:04:69:4e:6b:62:c2:a9:
da:67:3a:84:66:96:1b:13:52:8f:4d:62:c8:36:de:
9c:09:c5:af:5b:1f:3a:fb:74:d7:e3:2e:3b:e8:29:
4d:11:52:47:81:da:c9:f1:3a:f9:ab:53:19:fc:0f:
99:04:2a:52:8d:51:d1:08:fa:9b:7e:c4:02:b8:7f:
75:83:a8:cd:27:3e:70:61:a3:f5:6a:ba:8e:d5:a1:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A0:9E:E6:E6:74:B0:49:35:F3:81:39:EB:BC:38:EA:FB:5C:CB:98
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xKCe5uZ0sEk184E567w46vtcy5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.100.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:56:44:27:b5:d4:5b:b9:a3:60:5e:00:b3:9e:3f:e3:12:c7:
2e:41:32:96:2f:7e:a1:80:b2:44:cb:7d:00:85:ff:97:44:68:
8b:df:b7:51:9b:ca:b7:41:70:ca:33:59:48:6b:ce:bf:3c:6c:
da:2e:72:3e:58:2f:1d:c4:e9:e9:34:85:79:6d:cb:45:9b:59:
87:35:74:6d:54:cb:ce:c4:91:91:6b:5b:e0:48:be:b1:7c:02:
54:bd:0d:ee:43:1c:22:a8:c9:98:20:3f:e6:38:ed:ad:97:51:
56:19:28:77:c9:8a:ed:29:4d:ff:23:42:17:6e:83:15:5c:e8:
77:9b:0c:f1:29:11:cb:09:1c:97:f5:55:54:6b:0d:6e:3f:2d:
33:55:0a:cd:5b:e1:b2:2a:c2:18:06:6d:2a:70:92:62:c9:43:
c6:3e:79:23:e9:15:38:af:1d:63:10:fd:78:b7:ad:ee:0a:33:
22:25:7d:42:8a:42:bb:2d:f6:f1:ea:6b:50:7f:ad:ae:48:93:
44:77:8a:e1:5c:1f:d9:7b:fe:b1:92:16:9c:01:e1:5e:a9:70:
d9:1f:ac:a7:d0:15:6b:31:f6:9e:62:bb:0f:f3:57:a6:f6:fb:
c6:f1:46:08:df:d4:e7:92:d4:71:41:fa:3b:b1:4c:9f:03:e2:
99:24:2e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:27:34 2024 by rpki-client on console-fra.rpki-client.org