Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/xkgLzuAplRpWBPufE9ozfJppoVA.roa
File: xkgLzuAplRpWBPufE9ozfJppoVA.roa (raw, json)
Hash identifier: 3+eAo9L9AfTx67AOC6aZzIu6n0gLLxbL5Al3yK6KtSI=
Subject key identifier: C6:48:0B:CE:E0:29:95:1A:56:04:FB:9F:13:DA:33:7C:9A:69:A1:50
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 01914C3C3518AF7FCD64D3A5304BF32D54EE
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/xkgLzuAplRpWBPufE9ozfJppoVA.roa
Signing time: Tue 13 Aug 2024 14:54:59 +0000
ROA not before: Tue 13 Aug 2024 14:54:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 193.33.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:3c:35:18:af:7f:cd:64:d3:a5:30:4b:f3:2d:54:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Aug 13 14:54:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6480bcee029951a5604fb9f13da337c9a69a150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:ec:12:d0:41:81:02:14:96:92:f9:74:5b:
39:dc:67:3f:63:37:16:50:39:19:b0:f9:2f:07:04:
73:31:cb:c9:35:7b:8e:49:90:de:c1:3d:47:f3:1c:
96:fb:8e:37:16:5f:c2:fe:3f:eb:2a:68:bc:a5:2e:
bd:8c:b4:e3:0d:17:51:e7:d4:50:b7:02:3b:56:64:
0a:56:1e:1e:97:85:98:90:0c:a0:81:9e:c3:99:db:
26:5f:fd:89:63:5c:95:f8:17:48:e3:51:a3:44:c1:
54:f0:0b:46:a8:bc:54:b0:0a:6b:a9:ea:58:e9:2e:
8e:77:ae:f2:37:19:4b:fa:a9:e1:ba:4b:c8:66:6d:
aa:eb:f5:9e:03:c5:8c:f5:67:aa:95:ce:dc:18:18:
d8:d0:49:59:92:51:f0:54:ad:c9:23:47:53:4f:25:
bd:74:87:71:78:11:e2:48:61:7b:ac:ce:22:65:61:
37:df:af:2f:c7:52:0a:e1:e7:a8:64:40:f6:6b:d6:
a5:8c:08:7a:70:a8:b5:cf:47:93:d1:f1:01:e7:f9:
f2:fa:57:d6:00:bb:8b:e2:2d:ec:24:71:e0:b2:1c:
b0:eb:91:53:4f:da:3d:99:0b:9f:38:bc:fc:f2:0e:
42:91:20:89:aa:d3:75:a4:27:0d:c3:63:76:25:66:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:48:0B:CE:E0:29:95:1A:56:04:FB:9F:13:DA:33:7C:9A:69:A1:50
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/xkgLzuAplRpWBPufE9ozfJppoVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.153.0/24
Signature Algorithm: sha256WithRSAEncryption
28:47:98:82:fe:f9:50:47:f0:55:36:af:5e:3e:f8:01:61:78:
a6:4e:d7:2a:f5:48:f8:6f:ce:42:dd:73:d4:c2:27:c3:02:51:
cc:a5:7b:b7:23:f6:c0:9f:fb:73:57:dc:ca:3e:e1:a2:4f:7b:
88:42:4a:36:fb:c7:2a:d7:d7:61:c2:1b:bc:91:c7:b7:90:bb:
7c:0e:dc:ba:8e:1f:10:a3:b8:8a:be:c8:24:95:ce:db:e8:0f:
bd:5f:84:5b:0e:54:e3:9e:fb:9e:50:5e:03:ce:33:84:4a:ee:
33:2a:0f:2e:a6:0a:ae:b0:21:f2:fb:81:4e:5d:ec:e1:59:4f:
4f:01:3f:4a:b5:73:3f:9e:51:f4:79:28:d5:b9:fe:67:bf:d4:
55:aa:88:a4:7c:59:ea:94:34:41:3e:d1:2c:f8:ae:af:74:d9:
f9:0e:0e:83:ac:1c:ec:0f:51:48:0b:3a:23:df:43:4a:db:f6:
36:a1:71:08:58:16:46:23:77:c4:5a:ef:75:70:16:49:bd:12:
34:b7:4d:b6:da:07:bc:fe:c0:54:e5:2d:a5:ef:8b:80:7a:4c:
44:41:a6:7c:8d:24:5c:82:f9:bf:08:3a:ea:20:16:e8:ec:50:
b7:f1:58:4a:35:f0:06:9c:5d:96:31:21:9c:be:18:e5:c9:76:
f6:a5:c4:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFMPDUYr3/NZNOlMEvzLVTuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWVjOTNkN2NhNzM3NDRiMmMxZmJiNmRkYTY0NDkzYzJh
NDk1YzEwHhcNMjQwODEzMTQ1NDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjQ4MGJjZWUwMjk5NTFhNTYwNGZiOWYxM2RhMzM3YzlhNjlhMTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGnsEtBBgQIUlpL5dFs53Gc/YzcW
UDkZsPkvBwRzMcvJNXuOSZDewT1H8xyW+443Fl/C/j/rKmi8pS69jLTjDRdR59RQ
twI7VmQKVh4el4WYkAyggZ7DmdsmX/2JY1yV+BdI41GjRMFU8AtGqLxUsAprqepY
6S6Od67yNxlL+qnhukvIZm2q6/WeA8WM9Weqlc7cGBjY0ElZklHwVK3JI0dTTyW9
dIdxeBHiSGF7rM4iZWE3368vx1IK4eeoZED2a9aljAh6cKi1z0eT0fEB5/ny+lfW
ALuL4i3sJHHgshyw65FTT9o9mQufOLz88g5CkSCJqtN1pCcNw2N2JWZmrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMZIC87gKZUaVgT7nxPaM3yaaaFQMB8GA1UdIwQY
MBaAFFJeyT18pzdEssH7tt2mRJPCpJXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2Et
ODM2NmIxNjRkZDY2LzEveGtnTHp1QXBsUnBXQlB1ZkU5b3pmSnBwb1ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2EtODM2NmIxNjRkZDY2
LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSGZMA0G
CSqGSIb3DQEBCwUAA4IBAQAoR5iC/vlQR/BVNq9ePvgBYXimTtcq9Uj4b85C3XPU
wifDAlHMpXu3I/bAn/tzV9zKPuGiT3uIQko2+8cq19dhwhu8kce3kLt8Dty6jh8Q
o7iKvsgklc7b6A+9X4RbDlTjnvueUF4DzjOESu4zKg8upgqusCHy+4FOXezhWU9P
AT9KtXM/nlH0eSjVuf5nv9RVqoikfFnqlDRBPtEs+K6vdNn5Dg6DrBzsD1FICzoj
30NK2/Y2oXEIWBZGI3fEWu91cBZJvRI0t0222ge8/sBU5S2l74uAekxEQaZ8jSRc
gvm/CDrqIBbo7FC38VhKNfAGnF2WMSGcvhjlyXb2pcT6
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:23:32 2024 by rpki-client on console-ams.rpki-client.org