Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/Xyz5xN6_RZIN5Aw9s3DFAGFri8E.roa
File: Xyz5xN6_RZIN5Aw9s3DFAGFri8E.roa (raw, json)
Hash identifier: ZBd5GQtaKkhMd1TMuYQKZwfaqj7heCcPVeOD6heaOKU=
Subject key identifier: 5F:2C:F9:C4:DE:BF:45:92:0D:E4:0C:3D:B3:70:C5:00:61:6B:8B:C1
Certificate issuer: /CN=5c76eff26884bf006207d722b3b01a44d2b56199
Certificate serial: 018CC26D269F246AC0FBA0693BFC9F682DBB
Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/Xyz5xN6_RZIN5Aw9s3DFAGFri8E.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202949
IP address blocks: 185.174.58.0/24 maxlen: 24
185.174.57.0/24 maxlen: 24
185.174.56.0/24 maxlen: 24
185.174.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:26:9f:24:6a:c0:fb:a0:69:3b:fc:9f:68:2d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f2cf9c4debf45920de40c3db370c500616b8bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:6c:22:41:e6:b1:3b:7d:f5:c2:9f:78:c7:
d0:86:9d:1d:5c:02:ad:16:d4:5c:24:ab:48:c1:eb:
b2:d9:d4:e8:13:8d:44:2d:bc:95:58:6e:b5:62:7a:
02:3a:bd:2e:13:60:a0:5f:61:c9:5c:bd:e5:9e:c0:
93:3c:fa:ea:73:15:bf:99:a9:ee:9a:7d:29:b6:3d:
61:98:bd:ae:ba:02:ee:9f:38:e8:76:7a:18:82:e9:
2d:61:c7:12:4c:13:cb:b6:54:5d:69:d0:b3:e8:25:
43:9f:ef:b7:c4:57:c5:4e:e5:22:22:cc:94:fe:88:
6f:a1:45:fa:85:b0:03:34:fa:22:92:f9:b2:aa:3a:
0f:b6:23:b0:5b:98:19:0d:24:a3:41:c0:55:27:a1:
ca:61:3e:ec:db:aa:ee:95:17:0a:8c:f8:d5:6d:e0:
fb:31:17:f0:b4:9a:99:2d:54:e5:03:f8:a9:d2:ad:
b2:1f:de:10:83:e8:41:7c:91:49:ef:7b:62:0b:f9:
c5:75:84:06:35:5e:50:64:52:28:eb:35:9e:9c:fe:
ea:7a:61:3a:06:c9:b4:60:53:8c:db:79:bd:34:50:
59:50:47:df:04:d0:8c:80:26:d2:32:84:69:1a:7d:
ff:3d:ee:4c:40:52:22:40:7c:b1:16:67:eb:fa:04:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:F9:C4:DE:BF:45:92:0D:E4:0C:3D:B3:70:C5:00:61:6B:8B:C1
X509v3 Authority Key Identifier:
keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/Xyz5xN6_RZIN5Aw9s3DFAGFri8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.56.0/22
Signature Algorithm: sha256WithRSAEncryption
78:f2:e0:38:4f:e8:00:ca:ec:99:44:85:49:ae:a3:b9:9a:e1:
bf:0c:7c:25:42:a9:0a:a6:c8:8a:ec:ca:f2:0a:ca:e5:e3:ec:
41:18:68:d9:4c:0d:1e:50:6d:85:ce:27:6d:75:28:7f:d5:21:
a8:0c:c4:4c:c6:80:e9:2a:ab:d6:b3:fa:fd:5d:96:a6:e3:84:
ac:18:4a:cd:7a:9c:02:cb:de:75:0d:52:84:48:81:1c:8f:0d:
bb:70:69:4e:72:4a:fe:99:b5:15:e8:53:c1:7c:7a:d9:a5:00:
16:85:26:34:eb:b5:4a:7a:17:ec:2f:65:36:93:8c:08:45:7f:
61:78:d7:22:ba:7b:a5:26:c7:cd:c7:14:ee:9d:05:23:9b:b6:
b8:de:b5:62:25:27:bf:bd:4c:32:ac:3b:b7:b1:fb:2e:f2:dd:
bb:6c:45:a7:02:06:93:9d:35:0e:7c:3b:77:19:2b:96:ea:21:
13:14:df:66:59:dc:68:f8:8c:24:0d:a9:63:7f:75:b7:2b:a5:
b9:a3:a3:ed:cd:a8:0c:3f:f3:74:b2:b1:82:a1:72:ea:e1:82:
20:ba:c4:47:50:3b:b9:c0:3d:4a:e5:ab:17:e2:3b:b9:c7:f1:
12:44:37:5c:d6:c3:20:a9:ec:10:27:61:29:77:5a:35:79:73:
4d:f5:7b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:59:55 2024 by rpki-client on console-fra.rpki-client.org