Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/xywUy-j1hDs4WdVtiz4vZdriHlw.roa
File: xywUy-j1hDs4WdVtiz4vZdriHlw.roa (raw, json)
Hash identifier: srJM4D0xoaoHeJWC1iKVMbBfIKClDiI9mjsfqm3Rl00=
Subject key identifier: C7:2C:14:CB:E8:F5:84:3B:38:59:D5:6D:8B:3E:2F:65:DA:E2:1E:5C
Certificate issuer: /CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Certificate serial: 018CC8DEC0F266B146BC1265AC47BC9F407B
Authority key identifier: E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/xywUy-j1hDs4WdVtiz4vZdriHlw.roa
Signing time: Tue 02 Jan 2024 06:31:30 +0000
ROA not before: Tue 02 Jan 2024 06:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204861
IP address blocks: 185.237.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:c0:f2:66:b1:46:bc:12:65:ac:47:bc:9f:40:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Validity
Not Before: Jan 2 06:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c72c14cbe8f5843b3859d56d8b3e2f65dae21e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a2:3d:c2:a6:be:2c:ed:f7:ce:50:f8:04:88:
3e:22:20:bb:69:5a:b3:6c:02:f3:ed:18:3f:b0:aa:
ab:fc:27:ff:2b:bd:8d:4b:d5:9c:56:38:a5:cf:0c:
74:5e:92:9f:56:4a:1b:7c:60:7d:70:cf:c8:9d:7f:
ef:3d:4b:20:09:0b:2a:9e:1d:a5:43:70:9a:43:61:
10:07:c7:38:e7:65:13:1b:ec:51:ae:56:c9:49:bf:
41:34:9e:01:d7:18:94:43:bb:4c:98:fe:45:91:27:
aa:28:20:14:b3:b1:ec:66:25:d7:02:8a:24:15:8a:
3b:34:9d:77:02:2d:e9:a8:06:b9:18:99:70:54:2f:
13:27:19:be:b1:70:eb:f7:de:da:86:d4:59:bd:9a:
1f:14:36:51:fa:17:83:ae:bb:68:9e:85:35:da:5f:
12:33:03:fa:25:5e:43:f2:0e:0b:84:65:ba:07:d2:
a5:fd:64:1f:e7:01:75:9a:10:1f:37:71:0b:11:38:
0c:6c:3a:08:a1:69:e9:d5:0e:e5:c6:74:90:fb:e7:
4d:0b:e7:33:31:3f:fe:1d:4e:cd:fc:a7:34:eb:b4:
34:4f:83:7c:5a:35:ad:29:f6:0a:47:8f:54:e8:19:
be:da:03:2e:f3:b3:70:f0:fd:ca:cb:96:aa:a3:23:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2C:14:CB:E8:F5:84:3B:38:59:D5:6D:8B:3E:2F:65:DA:E2:1E:5C
X509v3 Authority Key Identifier:
keyid:E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/xywUy-j1hDs4WdVtiz4vZdriHlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.232.0/22
Signature Algorithm: sha256WithRSAEncryption
07:e0:59:e8:70:9e:6a:d5:21:f4:c7:8e:9d:4a:51:77:f6:94:
ee:07:66:b6:16:3d:7c:46:aa:68:ee:2f:fc:b9:2c:ac:e6:93:
bb:1c:53:72:18:52:5c:11:48:c7:4a:c4:b4:8c:de:81:b0:90:
d9:3a:76:be:5f:b0:a4:41:ac:67:53:82:c3:5b:27:7b:1b:42:
ca:c1:b7:20:a3:5c:30:2a:1d:c3:29:c1:ea:02:b9:ed:27:12:
97:dc:0a:f1:95:bd:3d:8f:ae:5c:85:4a:ed:39:47:09:49:06:
f5:b6:23:f2:db:74:0d:ee:06:a9:d7:93:54:68:c8:74:4a:b7:
97:50:2e:10:d5:4f:0d:73:bf:a6:0c:9c:e1:ee:b3:80:e0:70:
d1:f7:68:8a:00:4d:39:c4:dc:6c:29:76:82:8b:a1:bb:37:b5:
4a:6c:12:79:c9:af:47:ce:58:ee:5c:81:9d:93:2e:06:f5:b1:
c1:d7:df:7e:0b:66:3a:f4:92:f9:d4:e3:5b:9c:57:ce:32:58:
b8:8d:33:60:91:22:83:ba:e3:e9:78:79:2f:5d:1d:35:8d:f1:
08:42:04:b8:64:5c:94:be:0c:ef:0e:28:78:73:b1:e3:3f:34:
6d:b3:88:ad:bf:14:8f:1a:30:b2:81:13:2e:25:9f:8d:21:f6:
26:45:9e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 16:00:14 2024 by rpki-client on console-fra.rpki-client.org