Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/xsbYWPx4QJkcXy4IJhM5oL-g_nQ.roa
File: xsbYWPx4QJkcXy4IJhM5oL-g_nQ.roa (raw, json)
Hash identifier: FFWSxmsMm8Nt1LrA9Cthp81nExoxJikiWrh6TqVb2lw=
Subject key identifier: C6:C6:D8:58:FC:78:40:99:1C:5F:2E:08:26:13:39:A0:BF:A0:FE:74
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 018CC8704B94C3B856E408EEB72A292F07A1
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/xsbYWPx4QJkcXy4IJhM5oL-g_nQ.roa
Signing time: Tue 02 Jan 2024 04:30:51 +0000
ROA not before: Tue 02 Jan 2024 04:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212939
IP address blocks: 185.86.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:4b:94:c3:b8:56:e4:08:ee:b7:2a:29:2f:07:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Jan 2 04:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6c6d858fc7840991c5f2e08261339a0bfa0fe74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c4:9d:a0:0d:dc:28:ac:f4:96:5c:3b:28:b2:
b2:43:f0:46:e3:3d:30:f3:a4:1d:d6:1f:d7:9f:f2:
d4:3b:05:71:23:69:67:5e:f2:dd:fd:c6:52:1e:d6:
e3:2d:d3:90:39:89:13:41:31:27:8d:67:79:f4:8e:
bb:1d:20:92:47:e2:96:7c:c6:62:28:be:fc:9f:bf:
07:ba:8b:ff:b2:29:d5:f0:1e:23:35:da:4e:d9:83:
07:8e:29:40:95:24:07:34:75:b2:37:60:f6:af:3c:
3e:f3:fb:41:ac:08:22:7f:f5:5b:50:20:34:9b:eb:
1f:1e:7f:b4:2d:54:79:c1:fd:c3:5b:28:ba:5d:31:
96:bf:f6:12:08:c6:5f:0e:65:38:46:7e:80:9d:57:
9c:7e:dd:c7:f4:e1:2d:b8:7c:f0:3e:08:8e:31:b6:
f1:d3:ce:b4:1d:d0:40:bd:dd:d7:bd:5b:8e:45:3f:
e8:ce:30:fe:ee:c2:43:1b:e6:01:dd:64:64:c0:82:
05:76:81:bf:e1:e1:4e:2e:6f:2f:6f:7b:ad:11:3f:
5a:8f:72:d4:de:e0:f8:fc:97:2f:5f:a3:ba:52:5d:
2c:ab:83:c8:ec:2a:cb:db:24:3d:f3:c4:e7:12:41:
19:1d:4a:2b:2d:2b:72:a6:64:02:8f:99:75:6b:73:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C6:D8:58:FC:78:40:99:1C:5F:2E:08:26:13:39:A0:BF:A0:FE:74
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/xsbYWPx4QJkcXy4IJhM5oL-g_nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.183.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e2:cc:ea:35:f9:a1:16:fb:6d:38:97:07:63:be:94:ea:52:
8f:69:9f:5f:2e:a2:66:0e:ee:08:5f:ac:bb:87:37:8a:61:df:
b8:85:ff:2e:a9:b4:eb:de:40:56:0e:59:07:31:15:00:b5:ad:
f4:b1:19:a5:a8:5e:51:62:b8:81:b2:c3:12:f8:0c:a8:bd:03:
73:a8:77:94:e1:8d:94:47:6c:75:83:08:17:ae:b1:1d:8f:46:
86:0d:da:e6:3f:63:e4:67:e5:36:4e:94:84:db:39:87:27:08:
52:cb:5d:51:34:71:e5:d0:cc:3e:40:63:66:71:f0:58:aa:6a:
e1:73:8f:05:7f:bf:63:51:89:c3:fb:30:07:47:99:0c:fa:07:
e9:ab:ba:b7:64:b4:4d:22:43:5b:f8:31:63:df:4b:04:36:d0:
5c:66:66:27:16:2e:62:db:71:f9:12:4f:d0:e9:84:a5:df:81:
5c:77:6f:77:66:4c:b5:b1:6a:d2:bc:df:1f:2f:3c:e4:a5:db:
81:fa:f0:87:b3:a7:c5:18:3d:04:b9:30:79:9f:dc:9f:4b:b2:
90:28:d9:5f:de:3a:c0:13:58:a7:13:00:3f:bf:d5:6f:cb:da:
4d:1d:5c:f5:45:09:6c:ab:20:fe:0b:92:7e:f6:f0:90:eb:cc:
ac:7c:97:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:33:31 2024 by rpki-client on console-ams.rpki-client.org