Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/xcLKUpsvU3jgc6uGS6ICR0C_mMM.roa
File: xcLKUpsvU3jgc6uGS6ICR0C_mMM.roa (raw, json)
Hash identifier: DB/r2kZlM12CdTQZMXla4ScTf22GfeCVckRpwx7P6GQ=
Subject key identifier: C5:C2:CA:52:9B:2F:53:78:E0:73:AB:86:4B:A2:02:47:40:BF:98:C3
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 018CC8DCD5C27699C88733C4D2F3FEF7007D
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/xcLKUpsvU3jgc6uGS6ICR0C_mMM.roa
Signing time: Tue 02 Jan 2024 06:29:24 +0000
ROA not before: Tue 02 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39543
IP address blocks: 89.18.30.0/23 maxlen: 23
89.18.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d5:c2:76:99:c8:87:33:c4:d2:f3:fe:f7:00:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5c2ca529b2f5378e073ab864ba2024740bf98c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6a:27:9e:f9:21:4f:58:06:31:6c:44:8e:12:
eb:57:ae:a8:46:3f:01:76:bf:03:c2:1a:06:04:12:
b5:09:67:bd:8c:bd:93:a1:96:58:f2:ea:49:2e:f3:
cb:11:04:12:f3:6a:91:fd:bd:b7:58:46:1c:8b:29:
f4:41:45:94:70:7d:e4:09:e7:ad:cd:d8:74:e7:7d:
c6:b6:ed:50:b7:81:29:66:41:b9:8d:b6:25:a7:68:
10:b2:30:d1:3f:fa:8a:b2:c9:3c:f8:36:80:b1:16:
f3:c8:1e:40:33:ff:34:7b:0b:cb:d7:18:8a:cf:9a:
fe:a2:ac:96:56:d5:67:88:99:9b:f2:47:66:f2:48:
e8:68:61:48:ab:03:15:8f:87:08:b2:76:99:d5:32:
bc:fe:c5:92:17:bc:9e:d3:be:10:57:87:47:da:dc:
7e:34:14:a8:fd:33:e7:19:58:c9:e9:bc:1d:73:05:
fa:54:5c:95:f4:de:a0:fa:a3:22:5d:03:a2:5f:6f:
ea:eb:70:00:a7:cf:5f:63:46:88:32:82:18:c3:b8:
a1:73:dc:7f:06:ab:5b:64:07:cf:1a:42:85:d4:e0:
0f:9f:45:76:0a:10:85:91:e9:28:eb:09:1e:02:72:
95:90:12:b1:82:b8:1e:34:7b:f4:49:09:a4:da:7e:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:CA:52:9B:2F:53:78:E0:73:AB:86:4B:A2:02:47:40:BF:98:C3
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/xcLKUpsvU3jgc6uGS6ICR0C_mMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.30.0/23
Signature Algorithm: sha256WithRSAEncryption
35:e0:bb:01:36:3c:4e:16:2b:a4:5c:a4:c6:a2:28:fa:e6:8c:
00:f2:ce:41:3f:6f:a6:18:39:37:4d:22:f0:14:39:94:12:59:
7f:0d:54:97:a4:92:ef:92:c0:c2:b3:6c:3e:17:75:05:6d:bf:
5b:e7:8c:fd:d2:13:20:e2:08:12:fe:4a:09:b8:a7:89:9a:c4:
b9:df:1f:c7:20:41:a7:4b:5e:9f:7f:63:04:46:eb:ae:6d:b4:
f4:dc:4f:18:a1:f6:99:97:04:fa:a7:4c:be:bc:1a:79:51:d8:
6a:9e:43:1a:cf:8b:a8:0d:c8:76:7b:57:27:2d:26:54:ae:fa:
58:25:f4:2c:e5:2a:96:ab:6f:a1:a8:05:76:f2:6e:5a:39:89:
dc:f4:a2:b3:39:bd:52:86:3e:c6:0d:c1:83:e9:8a:d0:0f:9f:
df:1d:1a:9a:4e:e3:93:74:d6:5a:79:cb:8b:f5:4c:32:46:91:
98:46:ff:71:9e:31:80:28:b6:a6:5c:3a:83:1e:c7:4e:9c:2d:
31:7f:b3:79:21:e9:eb:84:c6:47:fb:77:7f:6a:35:17:c1:00:
54:d2:56:fc:9a:8e:b4:06:5e:49:08:83:63:7b:4b:4c:51:f7:
79:26:4e:ac:87:4a:8c:39:58:93:4c:c8:53:9e:3a:b6:f4:c5:
3b:6f:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:54:50 2024 by rpki-client on console-fra.rpki-client.org