Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xP7v5J9WhUyrc8acd2-KeGievxI.roa
File: xP7v5J9WhUyrc8acd2-KeGievxI.roa (raw, json)
Hash identifier: OczjmIPlBRiwk7l2LfLKqCZhsDG1DJXX+7/mJRxlXYI=
Subject key identifier: C4:FE:EF:E4:9F:56:85:4C:AB:73:C6:9C:77:6F:8A:78:68:9E:BF:12
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF883C3B5C07ADD63D3589B39FE04F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xP7v5J9WhUyrc8acd2-KeGievxI.roa
Signing time: Tue 02 Jan 2024 06:32:21 +0000
ROA not before: Tue 02 Jan 2024 06:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205953
IP address blocks: 188.132.154.0/24 maxlen: 24
188.132.161.0/24 maxlen: 24
78.135.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:88:3c:3b:5c:07:ad:d6:3d:35:89:b3:9f:e0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4feefe49f56854cab73c69c776f8a78689ebf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:b5:ec:eb:79:ca:b9:c1:aa:c5:03:09:05:
7f:23:e8:14:9f:40:7d:bc:56:37:de:0a:9e:fe:59:
58:41:64:0d:53:30:cf:83:69:08:ec:0e:a1:2f:62:
d6:ce:91:a6:4b:25:7d:cc:94:37:a2:3f:0a:87:0f:
35:32:0b:d5:9d:a9:fd:67:ad:3d:87:3e:1c:2f:55:
0d:87:e3:e3:00:89:e0:f1:04:70:54:5f:fe:2a:c3:
03:52:f0:80:c7:ed:52:4e:a4:5a:a1:8e:2a:bd:74:
be:b0:2f:79:c2:71:67:d5:99:ec:05:f5:1c:46:05:
6d:f8:ea:63:5a:83:63:e6:33:a5:0f:fc:82:c8:b8:
da:de:91:34:df:17:e8:6e:f4:ba:d6:f3:84:30:5c:
8d:9f:01:c1:8d:56:69:d4:47:fd:8d:8a:3f:31:df:
62:13:53:b2:57:d2:52:45:78:3c:36:8e:5d:ce:de:
36:c5:eb:b6:06:cc:9c:ea:a9:49:8c:f9:bd:46:34:
aa:09:45:fb:5d:65:0b:d9:e5:83:b2:9a:f9:71:3c:
63:34:f6:ab:64:15:6c:79:e6:d9:b7:46:18:32:49:
f0:e6:74:2e:96:0b:33:fc:ef:71:a9:09:77:4e:4a:
e5:c6:9e:6c:14:23:12:68:34:72:c3:d0:4b:da:68:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FE:EF:E4:9F:56:85:4C:AB:73:C6:9C:77:6F:8A:78:68:9E:BF:12
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xP7v5J9WhUyrc8acd2-KeGievxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.69.0/24
188.132.154.0/24
188.132.161.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b5:f1:d1:09:8f:b7:3e:64:25:a3:ac:52:83:4a:d3:6d:fe:
04:40:b1:8b:20:57:5e:96:f1:d8:d3:9d:4c:81:89:92:7c:47:
79:c4:8f:d3:87:e6:86:f5:e3:c1:95:07:96:26:11:3c:f6:98:
dc:fd:51:a8:93:78:09:00:83:73:1c:9c:f4:51:c0:55:1c:e4:
1e:60:89:cf:de:62:6f:0c:d3:60:9e:ee:cf:86:d8:9c:2e:dc:
db:b8:e8:1c:8c:bd:80:fd:40:d1:26:30:b8:ca:c3:4e:c8:66:
97:86:92:49:7c:2c:bc:90:75:93:27:28:0d:e7:62:2d:d2:cd:
2b:49:c9:3c:1a:f8:8f:c2:d0:54:de:2b:fd:32:ec:e1:8a:ce:
b6:8f:ba:b8:50:a3:b3:e2:17:9a:c0:38:ac:13:f2:51:f2:ac:
5b:d2:97:2d:ac:a5:23:20:ec:9b:67:45:8b:2e:2b:ab:dd:9d:
5e:cd:6d:d8:0d:af:d4:dd:d4:ec:2b:d5:01:2a:cf:88:50:d9:
9b:99:f0:71:08:b9:23:82:9e:2c:83:61:f0:4f:3e:7c:4f:b1:
f5:c9:e4:84:8f:8a:73:93:09:9c:8f:fc:cc:25:b4:96:90:84:
74:10:75:ab:fc:45:42:f7:f1:bc:09:d5:fa:5c:12:9c:de:f0:
dd:82:9b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 10:29:43 2024 by rpki-client on console-ams.rpki-client.org