Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/XjgLWl7FOORCTrV_-s9YA_JqUOM.roa
File: XjgLWl7FOORCTrV_-s9YA_JqUOM.roa (raw, json)
Hash identifier: wqRdhnI/e97vKj3dJFocAUUR2knaGbqEbjTsKELLcyY=
Subject key identifier: 5E:38:0B:5A:5E:C5:38:E4:42:4E:B5:7F:FA:CF:58:03:F2:6A:50:E3
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018CC94E1430F9E46E794CBC010179E44BB9
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/XjgLWl7FOORCTrV_-s9YA_JqUOM.roa
Signing time: Tue 02 Jan 2024 08:33:06 +0000
ROA not before: Tue 02 Jan 2024 08:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62454
IP address blocks: 176.100.38.0/24 maxlen: 24
176.100.39.0/24 maxlen: 24
185.14.93.0/24 maxlen: 24
185.14.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:14:30:f9:e4:6e:79:4c:bc:01:01:79:e4:4b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 2 08:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e380b5a5ec538e4424eb57ffacf5803f26a50e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:3a:8d:14:72:25:75:f7:ab:51:4f:7e:33:
39:17:02:59:9d:41:5f:ee:a1:c0:d2:59:6c:35:8a:
ce:40:f8:7f:51:63:db:80:27:e1:51:b5:12:6b:3d:
4d:5b:0a:91:3b:3e:b8:f1:ec:13:ab:4a:43:16:c4:
33:d4:9a:99:4d:f8:0c:d1:81:86:dd:f9:6a:62:79:
eb:8c:2a:94:d3:a4:e9:3d:03:f4:c6:12:d7:95:4e:
5a:af:c7:e9:ea:26:72:9f:97:e8:7e:f5:73:c5:d0:
21:62:ce:e1:a4:13:18:3d:bf:ff:6d:35:2b:17:99:
07:2c:4d:97:da:e2:20:62:99:bc:de:8b:96:20:14:
da:c3:2e:8c:7e:a0:29:4a:32:8f:96:16:38:bc:a6:
f4:bb:1c:9c:42:69:26:43:2c:df:ed:5d:3a:06:a3:
ce:67:08:9b:af:d0:1c:eb:55:e8:f1:7e:ef:10:3d:
42:d5:04:6c:1c:12:a2:e2:f3:78:e3:59:2f:a0:50:
02:64:01:b9:88:3c:ec:fc:16:8d:9a:88:5f:f3:ce:
f3:6d:0d:97:96:f7:ab:52:99:76:74:49:4a:3b:80:
b6:71:93:dc:d2:92:db:bd:10:42:60:d1:9d:18:a9:
d2:32:cd:27:b3:4a:77:6e:1a:af:0e:31:0f:28:af:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:38:0B:5A:5E:C5:38:E4:42:4E:B5:7F:FA:CF:58:03:F2:6A:50:E3
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/XjgLWl7FOORCTrV_-s9YA_JqUOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.38.0/23
185.14.92.0/23
Signature Algorithm: sha256WithRSAEncryption
46:19:93:a2:9b:7c:8a:73:52:69:4a:57:a3:d5:1a:3d:89:34:
d1:51:e0:d2:82:7b:07:a2:90:05:1c:14:87:09:1a:9a:d2:df:
8d:1a:11:d1:2f:2d:2e:26:10:3d:a3:b4:01:87:2a:cd:57:0d:
3a:08:2f:a1:b9:88:7c:78:b2:d7:9f:74:2b:0b:3b:95:2e:bb:
49:8a:ef:ef:95:bc:cd:9d:09:99:d6:f4:c3:5d:e9:8e:8a:5d:
bd:22:87:ea:6f:80:ce:29:6a:08:83:9f:4d:91:ed:6f:90:9f:
16:71:53:76:b7:f0:f0:22:88:0a:e7:35:36:64:36:ef:54:c9:
06:ae:02:bb:f3:36:4d:80:02:f8:52:c7:22:98:40:9a:5e:82:
e7:24:59:7e:7d:c6:cd:25:c3:9b:c9:81:aa:7d:93:02:8f:dc:
71:86:93:6d:97:c0:fa:ba:20:b6:d7:58:2b:a6:72:9b:07:4c:
b5:be:28:35:5e:35:4d:a8:81:eb:3e:96:44:81:14:39:8b:5d:
6b:59:f5:8e:20:41:e0:ec:f5:c0:77:df:ea:9c:32:ea:c9:67:
86:77:6b:9b:3e:cf:9c:9d:af:0a:70:d3:d0:9c:b1:fe:9b:e1:
a0:97:a4:57:87:e8:ad:41:77:11:b9:0f:7d:aa:da:30:c6:b5:
95:4f:78:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:39:22 2024 by rpki-client on console-ams.rpki-client.org