Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/xtLm5rbULJcdm-e_AghF9JrFZms.roa
File: xtLm5rbULJcdm-e_AghF9JrFZms.roa (raw, json)
Hash identifier: Faa1Sfmd3Ay/Yex5qhnA9EDD/YEm9U7TAKvep+8C5Sk=
Subject key identifier: C6:D2:E6:E6:B6:D4:2C:97:1D:9B:E7:BF:02:08:45:F4:9A:C5:66:6B
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 018D548466B7B13C3AAF3105A9360DB852CF
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/xtLm5rbULJcdm-e_AghF9JrFZms.roa
Signing time: Mon 29 Jan 2024 09:19:39 +0000
ROA not before: Mon 29 Jan 2024 09:19:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209358
IP address blocks: 152.89.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:54:84:66:b7:b1:3c:3a:af:31:05:a9:36:0d:b8:52:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Jan 29 09:19:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6d2e6e6b6d42c971d9be7bf020845f49ac5666b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:fa:c5:01:af:00:0c:f4:43:3f:16:57:c9:
e5:4e:a6:26:06:84:27:0c:47:37:6d:5b:1e:53:94:
5e:93:7c:31:02:45:98:1c:a8:9f:bd:5b:ea:27:4e:
d8:31:1b:0d:27:23:f1:1e:ac:17:dc:03:84:b0:2b:
69:76:6c:48:e3:f8:e4:d3:0a:b3:9f:a5:4b:0b:92:
37:0f:56:8d:ab:e0:f9:e9:30:5f:5a:eb:6d:0c:26:
62:d6:2a:8e:6a:01:2d:6d:c4:bb:09:b1:c2:17:7b:
5b:84:da:c0:49:74:ff:14:ae:1e:62:f6:8c:81:a4:
86:8a:42:cd:f5:66:0e:6d:79:33:9b:77:ca:cc:4f:
c5:29:5a:eb:e9:61:e1:bd:77:87:af:74:06:e4:40:
cc:c6:d7:61:39:65:1b:a9:33:a7:02:8f:5e:a1:10:
ae:fb:e0:a0:e8:e9:f3:c2:30:34:10:44:99:8e:cb:
87:22:0c:8c:a3:7a:ef:45:ce:c8:3d:3a:fa:10:2a:
ab:e6:c8:6d:c3:4b:33:d2:c2:eb:e3:63:88:a9:67:
9c:39:b0:8e:dc:f6:ed:48:e9:c2:5e:44:9d:bc:69:
35:66:03:ed:cf:97:99:fe:d9:af:d7:aa:b4:e3:0f:
5b:e9:a7:bb:f9:19:7d:a1:e9:5f:7d:a2:c8:5c:5e:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D2:E6:E6:B6:D4:2C:97:1D:9B:E7:BF:02:08:45:F4:9A:C5:66:6B
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/xtLm5rbULJcdm-e_AghF9JrFZms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.68.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:a9:d2:85:cf:38:b9:85:a1:f6:35:ce:2e:50:72:29:79:3a:
94:f2:83:09:76:2c:e8:23:aa:4c:fd:f0:f0:09:5f:67:a1:20:
97:12:4e:f6:3e:38:30:93:27:35:fb:96:3b:a2:bf:ae:fd:c6:
84:96:14:d6:25:0b:3b:88:26:95:e1:ef:8e:dc:b6:85:fd:f6:
12:34:6c:ae:2f:7f:20:38:91:3e:9b:87:b0:d4:f0:f7:39:64:
45:3d:7d:61:04:8d:8d:78:22:fb:60:33:ea:84:fb:d3:58:3e:
26:96:19:25:5d:21:ce:8f:09:db:c0:b0:c8:1a:f9:f7:d0:11:
b1:55:f7:b1:e6:4b:1d:a5:64:01:dd:7e:9c:f6:8b:a0:0b:5a:
70:95:db:63:dd:e0:9a:6d:28:79:be:d0:c6:a8:42:e5:b4:9b:
21:1a:15:db:9a:3b:6f:e2:20:0c:ca:b7:8f:e8:ab:62:a8:aa:
ae:ea:51:8b:49:15:ba:1b:4a:48:62:1a:07:5e:3e:e2:49:d3:
b7:01:0c:fc:7b:43:15:63:33:80:2b:82:23:12:2b:f2:71:55:
96:db:22:ff:54:85:b0:c6:bc:27:6a:73:d6:6e:59:6f:52:73:
a8:84:01:10:91:8d:e2:fc:cd:e5:3d:b3:1a:ac:bc:75:ee:b4:
30:0b:c0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 14:41:17 2024 by rpki-client on console-fra.rpki-client.org