Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/XXO-eiQCCswvsOOOEBsiqiI1cGo.roa
File: XXO-eiQCCswvsOOOEBsiqiI1cGo.roa (raw, json)
Hash identifier: iWvLZo5B7qC7wkFDLN8Kb5Zc3x3qrV051nPJ6vNSWUQ=
Subject key identifier: 5D:73:BE:7A:24:02:0A:CC:2F:B0:E3:8E:10:1B:22:AA:22:35:70:6A
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 018E33374985EAB061E3E2B84BCA2FF0903B
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/XXO-eiQCCswvsOOOEBsiqiI1cGo.roa
Signing time: Tue 12 Mar 2024 15:10:45 +0000
ROA not before: Tue 12 Mar 2024 15:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15623
IP address blocks: 212.117.193.0/24 maxlen: 24
212.117.194.0/24 maxlen: 24
212.117.208.0/24 maxlen: 24
212.117.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:33:37:49:85:ea:b0:61:e3:e2:b8:4b:ca:2f:f0:90:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Mar 12 15:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d73be7a24020acc2fb0e38e101b22aa2235706a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:0d:a3:cc:be:2d:0e:68:ed:f0:16:22:ae:
96:5b:fd:a5:b1:c5:f4:46:2e:d4:2b:ae:c0:e1:ee:
1a:23:a0:8b:d5:29:fa:1f:31:3e:47:1e:6f:20:3b:
7f:2c:99:b7:ca:76:e1:ab:10:80:c7:b9:df:4f:4d:
18:8f:d0:81:1a:61:87:61:1e:50:61:11:e5:47:eb:
44:96:90:c0:bb:ab:3c:be:d8:90:bf:9a:f8:6a:ab:
8e:ef:57:e2:72:3f:14:7d:43:ee:90:b0:46:0b:d8:
8c:44:f8:71:29:b3:6c:7e:39:dd:16:02:6e:14:4f:
cd:06:34:bc:5c:3a:6f:6d:b7:c5:9a:b5:33:55:d7:
e8:99:54:3a:ea:a1:59:6d:b3:5d:da:bf:5c:2c:3a:
90:d9:95:58:3d:b8:cd:aa:6e:52:57:41:6e:f7:44:
ee:1a:8e:9c:8d:cf:a4:aa:a5:2c:44:e2:a7:36:c1:
40:55:ba:c7:6c:13:75:71:cb:28:1c:6a:07:69:11:
c6:49:ed:38:c7:2d:98:05:9f:bc:5c:05:24:c7:ce:
6b:81:e8:20:8f:01:60:ac:76:48:f2:6e:28:bc:e4:
10:17:30:f0:76:70:c8:75:c6:ff:d2:69:0b:0a:af:
8f:e7:3a:7c:22:ba:67:42:2a:ea:1c:38:3a:63:bb:
7b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:73:BE:7A:24:02:0A:CC:2F:B0:E3:8E:10:1B:22:AA:22:35:70:6A
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/XXO-eiQCCswvsOOOEBsiqiI1cGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.117.193.0-212.117.194.255
212.117.208.0/24
212.117.211.0/24
Signature Algorithm: sha256WithRSAEncryption
94:4d:c1:7f:e5:ce:3e:53:fc:f1:74:65:f4:f9:db:27:18:25:
e0:49:33:12:d0:3d:41:f6:b9:92:e8:75:b9:64:9d:71:c2:da:
62:01:3e:6d:cf:cd:c1:af:46:c6:2d:e7:c6:3b:b3:81:68:80:
7c:98:70:72:ed:8d:1b:9d:03:a7:b9:ef:9a:5b:8d:85:31:f2:
fe:0f:84:08:00:07:7a:06:c2:aa:1a:19:8d:53:85:a8:2a:db:
5b:c4:7e:a8:65:3c:99:f7:cc:69:d8:59:42:4e:0b:ae:51:67:
63:3c:c1:6f:ea:4f:eb:24:d6:21:4f:89:fa:6b:8f:ca:01:32:
7f:e4:c6:bc:02:d5:8a:23:d8:bf:8d:26:cd:cd:d9:db:2c:f7:
63:1a:55:6f:a6:eb:54:c4:5e:ba:10:e6:53:00:39:4a:bb:dd:
43:83:b7:eb:15:c1:bb:18:65:04:01:43:4c:fd:12:90:c6:0f:
35:4b:82:84:1c:9d:0a:12:f1:f3:ff:ad:ac:b2:18:e3:7a:c0:
5f:41:8d:35:13:0f:83:f6:42:d1:cc:7b:ad:cf:39:33:a7:17:
65:b0:5d:fa:51:74:9a:53:07:e6:0f:a7:f3:e2:a2:e9:8f:4f:
4c:bc:e6:c8:83:81:88:fb:b4:66:f1:0b:b0:67:bd:a0:59:72:
d6:d9:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:44:15 2024 by rpki-client on console-ams.rpki-client.org