Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/xGRnXnvxR3gKPJVu0oYEQMFsOgI.roa
File: xGRnXnvxR3gKPJVu0oYEQMFsOgI.roa (raw, json)
Hash identifier: s2S5QZ0dqdGxhmvx3Mg+a6qNRwKbrbH39QmvFRyGpwE=
Subject key identifier: C4:64:67:5E:7B:F1:47:78:0A:3C:95:6E:D2:86:04:40:C1:6C:3A:02
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018E9F31B162146B4C9880D60C529A656388
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/xGRnXnvxR3gKPJVu0oYEQMFsOgI.roa
Signing time: Tue 02 Apr 2024 14:23:37 +0000
ROA not before: Tue 02 Apr 2024 14:23:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209805
IP address blocks: 130.255.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:31:b1:62:14:6b:4c:98:80:d6:0c:52:9a:65:63:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 2 14:23:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c464675e7bf147780a3c956ed2860440c16c3a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:16:8b:cf:b3:2a:18:6e:15:9d:14:22:b8:
2b:a2:31:3b:6d:02:1d:7a:6b:97:4d:80:2d:00:0d:
f0:1e:02:7b:e3:1c:b9:e4:6a:89:ba:87:ce:ee:a4:
69:9f:26:98:ff:ff:64:1f:de:f1:4d:e0:76:a2:f8:
9a:30:aa:8b:a8:d4:cd:3e:9a:01:8f:4b:64:1d:10:
e6:12:2c:98:e0:fc:ef:fc:c7:cc:7a:81:4c:7d:36:
5e:71:58:05:ab:18:aa:25:0a:80:de:0d:22:11:94:
b8:25:29:ca:78:27:f3:84:b4:2f:e6:9f:1b:9b:d6:
d8:48:fb:32:a7:0d:12:fa:61:f0:f5:51:26:16:2e:
12:89:82:b8:df:f1:e3:a6:51:7c:ff:9a:9e:4f:5a:
4c:f8:b1:fe:e2:b3:b1:33:58:7d:9a:63:5e:6b:96:
06:19:7c:13:67:c7:32:c7:b0:63:ae:b7:10:c0:ed:
86:50:ff:2f:66:cd:bc:2a:64:44:d6:00:42:71:f4:
68:45:86:da:09:b4:d8:54:e8:e3:5b:92:50:63:eb:
0d:8f:5b:a3:b8:cb:58:2c:d2:bd:62:91:95:5c:6b:
86:87:2a:ce:3b:09:7b:06:31:b9:64:84:d2:2f:ec:
64:c8:19:d0:92:e9:14:88:8a:24:72:af:38:20:4d:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:64:67:5E:7B:F1:47:78:0A:3C:95:6E:D2:86:04:40:C1:6C:3A:02
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/xGRnXnvxR3gKPJVu0oYEQMFsOgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.170.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a5:45:36:5c:ac:b8:4b:43:ca:f2:fd:e4:60:5e:5e:53:c0:
de:0a:32:bc:4c:97:c3:e1:85:3c:c6:ef:8e:6a:05:fd:a3:50:
49:06:90:46:49:79:c5:71:f6:31:c5:e7:0d:5f:84:a1:30:49:
1e:4a:6f:a9:f5:01:bd:15:41:09:8f:8d:6e:91:5b:64:1d:18:
7c:b0:6d:ef:b5:e9:3d:94:e8:e5:ad:49:fc:c5:b7:f1:92:78:
14:40:f0:56:25:c8:0e:e9:0d:9c:a5:d1:13:ab:ba:46:1a:ba:
3a:f3:c6:ce:45:ee:7a:af:30:b8:c0:b0:2e:ba:cc:b7:67:72:
8a:87:ad:dd:d4:27:95:35:f2:3b:57:b1:36:3a:a6:25:37:11:
ca:0e:5d:1a:b2:74:a8:e1:5f:92:cd:64:61:dc:3b:f1:58:98:
fd:14:94:31:15:62:09:6b:f5:50:4e:8a:b9:51:bd:c4:b8:92:
c3:4c:c2:8f:b8:31:d7:31:0e:67:c3:b6:9c:5b:d7:d0:91:1e:
f1:a6:bc:a4:e4:4d:11:d2:c6:bb:5c:19:58:86:7b:2d:b5:7c:
7c:c2:d5:31:dd:0c:53:67:87:e2:15:9d:51:2b:4e:76:99:a7:
c3:d5:0e:6e:3e:5f:1c:90:25:45:12:c7:f2:89:69:eb:aa:40:
a5:87:12:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:45:56 2024 by rpki-client on console-fra.rpki-client.org