Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/xiVozCkDaAIT7i9aqifJvrLuQIA.roa
File: xiVozCkDaAIT7i9aqifJvrLuQIA.roa (raw, json)
Hash identifier: oumu6x+C51N1couxxFyenIbbyzULhPigiPF4DooYP68=
Subject key identifier: C6:25:68:CC:29:03:68:02:13:EE:2F:5A:AA:27:C9:BE:B2:EE:40:80
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 018CC7276139AEC8DEE96FAD6C2F49AFC66A
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/xiVozCkDaAIT7i9aqifJvrLuQIA.roa
Signing time: Mon 01 Jan 2024 22:31:35 +0000
ROA not before: Mon 01 Jan 2024 22:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50939
IP address blocks: 195.88.81.0/24 maxlen: 24
195.88.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:61:39:ae:c8:de:e9:6f:ad:6c:2f:49:af:c6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c62568cc2903680213ee2f5aaa27c9beb2ee4080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:dc:a1:f2:95:35:34:9b:03:99:ab:9b:b4:
d8:92:35:e7:37:c6:12:ec:bf:e2:b7:e9:58:df:80:
b4:60:e4:83:d5:f9:db:1a:e4:de:e0:29:14:38:1c:
38:ee:5f:e5:35:fd:69:e4:c8:d5:44:26:25:25:6f:
c7:b1:d3:5d:38:5d:ac:fa:7f:0c:67:b6:f3:4c:0e:
1d:8e:77:0a:ac:54:f6:66:3a:50:44:f8:d5:1b:b5:
fd:87:b7:98:43:41:72:1a:5b:0c:f8:0c:4c:13:2f:
ca:c3:12:d4:58:6f:c8:3c:d4:5f:a4:e5:3f:cc:7f:
85:0a:74:61:2b:14:6d:d4:c0:eb:5a:fe:6a:57:70:
fd:42:d6:f7:30:87:e5:0d:34:a4:47:1e:d9:9d:20:
71:d3:b5:41:74:f0:d0:cf:7f:e9:88:25:f1:e2:85:
e7:a8:55:14:f4:68:06:53:fb:8e:26:89:62:ef:9f:
f1:25:e1:a5:12:18:f5:58:9e:5a:54:ba:82:f0:b5:
91:52:a5:35:cd:6e:9d:00:d3:2f:6c:ca:d3:44:00:
e5:ab:af:1f:7e:e9:37:27:9b:46:40:31:2a:c8:93:
1e:60:89:66:e8:f2:d9:6a:c8:31:ce:5f:7d:e5:e2:
52:9b:3d:79:bc:00:d7:19:8d:71:ee:04:f0:28:e1:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:25:68:CC:29:03:68:02:13:EE:2F:5A:AA:27:C9:BE:B2:EE:40:80
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/xiVozCkDaAIT7i9aqifJvrLuQIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.80.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:44:43:af:fc:41:a4:7b:b4:c3:1f:fb:81:34:12:2f:74:3f:
a7:00:16:ef:82:06:3a:4a:5e:51:1f:0d:95:2e:1f:3a:3b:f9:
96:ac:3a:56:5f:58:a6:c4:1b:d0:94:69:1c:bb:81:14:95:59:
d7:6c:29:16:58:c9:db:af:94:9d:ec:c9:29:3d:dc:04:ba:30:
d9:81:e7:bc:c8:fd:0f:17:d2:7f:5d:75:71:9d:24:07:84:6e:
50:e4:07:8d:c3:04:e5:99:4f:45:79:42:eb:0f:89:ac:7b:73:
1e:56:6a:e1:36:4a:2c:fd:b2:0d:0e:97:74:d5:ef:35:80:73:
a0:fc:89:2a:a6:2f:42:9b:95:ed:a3:53:e9:e2:9f:f4:79:ef:
af:98:a7:a8:25:2b:47:ca:db:d6:75:3a:6f:ee:90:29:d6:73:
25:27:7e:35:7c:f7:e2:e9:16:51:28:dc:d8:07:75:e0:e5:c4:
90:a3:df:d5:58:14:f6:69:56:76:c6:91:c5:5a:36:68:76:fd:
48:e8:86:51:ad:b4:c8:98:62:6a:6c:b7:2c:20:14:97:ec:3d:
c7:20:7a:02:7d:db:44:91:6a:b6:65:89:90:00:7c:c1:cf:94:
8b:f6:5c:16:4b:6f:74:ba:be:98:45:fe:47:d2:ee:9d:50:c4:
2a:7b:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:43:18 2024 by rpki-client on console-ams.rpki-client.org