Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/XB04NzLEx-SyksEGyVIj-49mThE.roa
File: XB04NzLEx-SyksEGyVIj-49mThE.roa (raw, json)
Hash identifier: ErQyM4kKe2LUTHsCnyLdANQ12CM4GQ2J1WOHRXF9P4E=
Subject key identifier: 5C:1D:38:37:32:C4:C7:E4:B2:92:C1:06:C9:52:23:FB:8F:66:4E:11
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 019064726BF9D227ECB52620E49CD9F1B2D6
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/XB04NzLEx-SyksEGyVIj-49mThE.roa
Signing time: Sat 29 Jun 2024 14:42:18 +0000
ROA not before: Sat 29 Jun 2024 14:42:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212550
IP address blocks: 141.138.13.0/24 maxlen: 24
141.138.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:72:6b:f9:d2:27:ec:b5:26:20:e4:9c:d9:f1:b2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jun 29 14:42:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c1d383732c4c7e4b292c106c95223fb8f664e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:27:87:88:c9:93:9c:21:8a:49:bd:e1:24:
ce:90:dd:fa:c7:82:e0:5f:a2:0b:cf:6c:b4:16:9c:
72:4c:40:43:65:08:ac:f3:34:4b:b2:58:9c:48:29:
32:fb:f2:b9:2a:21:f2:0f:61:67:cb:65:31:fe:d1:
00:af:ee:00:0a:9a:de:9d:98:03:aa:ce:04:34:e3:
59:1f:be:e5:8c:35:65:28:92:58:df:2f:b3:a4:4a:
8a:8c:83:f2:13:55:4e:20:e2:2e:bb:90:7b:ed:85:
58:b1:b1:2f:84:c8:c3:e5:2e:81:c5:4d:a0:78:77:
f6:e5:15:b5:da:23:44:d7:3a:2e:31:c3:70:a6:2a:
b5:33:ef:57:8d:c0:3f:4e:7a:a2:12:75:6c:10:8f:
ea:93:97:6f:a2:b4:94:83:fd:06:48:6a:33:56:f8:
09:7d:f8:3d:47:6a:0b:f7:6c:72:24:fb:74:d3:f4:
1b:76:3e:e2:07:5f:f5:7c:35:68:d8:66:03:37:81:
bc:a2:76:3c:05:e0:b8:71:72:b7:df:44:03:a2:ea:
da:dc:b1:11:89:00:55:ee:b5:86:f3:3a:59:43:3a:
fa:58:67:76:c1:ca:26:a9:21:e7:18:92:0d:f2:d5:
ff:a5:2c:dc:8e:a0:0f:40:3f:b0:4e:d3:d5:7f:7c:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1D:38:37:32:C4:C7:E4:B2:92:C1:06:C9:52:23:FB:8F:66:4E:11
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/XB04NzLEx-SyksEGyVIj-49mThE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.138.13.0/24
141.138.15.0/24
Signature Algorithm: sha256WithRSAEncryption
96:aa:de:6a:22:89:c8:e2:40:90:c9:82:58:1b:35:d0:7f:a0:
54:90:a0:c3:38:f2:43:39:29:aa:9c:b6:0c:21:2c:41:d2:dc:
73:c7:45:67:9a:8c:b4:8c:43:a5:ec:03:3c:bc:6c:9b:19:0c:
5a:db:22:86:b5:6d:d1:99:7e:dc:01:33:91:00:64:5c:28:ff:
d7:cc:b1:35:74:58:9a:c5:14:35:38:4f:95:03:b7:94:1d:f4:
7b:d0:a8:fe:3b:08:65:cb:88:3f:94:4a:d2:32:cd:c1:f2:3f:
07:31:af:0f:6d:fa:f5:42:79:00:ac:5f:3d:7d:d0:24:3e:71:
47:a8:89:24:e3:cc:dd:c6:14:75:b5:98:94:43:76:7a:b4:be:
0d:ae:f3:09:cc:fe:42:64:9e:fc:f1:98:5b:1c:36:6d:fe:ea:
93:78:bf:bd:f2:b6:6c:9a:48:59:88:85:13:6e:89:e0:ad:27:
45:51:7a:07:ee:29:b3:d0:80:6d:9e:7d:70:af:c7:42:71:eb:
1c:47:a3:15:a3:0e:21:e3:e3:f4:2f:0f:72:a7:be:87:d3:fe:
b8:91:aa:db:ad:38:2e:61:1a:72:5a:82:c4:b7:4f:3b:63:03:
e3:99:e8:fd:b0:c0:99:2a:01:c1:4c:8b:47:02:a6:ec:af:c4:
66:43:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:23:40 2024 by rpki-client on console-ams.rpki-client.org