Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XlZV0JGoC61-cMHTHreM1RkVfGY.roa
File: XlZV0JGoC61-cMHTHreM1RkVfGY.roa (raw, json)
Hash identifier: V/7Is+IIQlrls2gwUa06ty07/dwo5arO9KSPyPc0cbQ=
Subject key identifier: 5E:56:55:D0:91:A8:0B:AD:7E:70:C1:D3:1E:B7:8C:D5:19:15:7C:66
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 018E85FEFFFB6AC3628EE6FD0D1484C68DCC
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XlZV0JGoC61-cMHTHreM1RkVfGY.roa
Signing time: Thu 28 Mar 2024 16:57:45 +0000
ROA not before: Thu 28 Mar 2024 16:57:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15943
IP address blocks: 194.76.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:fe:ff:fb:6a:c3:62:8e:e6:fd:0d:14:84:c6:8d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Mar 28 16:57:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e5655d091a80bad7e70c1d31eb78cd519157c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:f0:0c:2c:47:18:0d:25:d4:4e:2a:ff:00:
cd:62:55:79:39:a0:39:6e:04:65:be:c5:d8:d0:9c:
b0:16:f3:46:6f:13:14:8b:62:56:29:e5:69:f0:57:
af:87:ae:6f:e0:97:68:ff:a0:85:74:f8:68:f7:34:
a7:c5:e3:e6:be:18:01:5a:58:06:3a:70:c5:a4:f2:
75:44:08:63:8c:8b:f2:45:58:1e:aa:c1:7c:fa:81:
e5:dd:d8:8d:76:83:2b:a0:c4:e4:a2:cc:43:a9:b2:
01:31:64:c8:13:60:f0:14:cf:7b:98:71:3c:ad:98:
d8:e9:ee:11:c9:0a:f1:e2:2d:39:bb:80:b4:c4:94:
a4:94:7a:da:2b:81:43:e7:bd:00:ca:ac:af:a4:0c:
b6:21:f9:00:60:19:db:28:ff:aa:c4:c4:46:c0:0e:
2e:f5:ce:58:9e:cf:05:26:e1:0c:50:19:77:1e:53:
21:3c:2e:3e:10:ec:79:e6:b9:2a:94:10:62:20:e3:
10:c8:47:7f:dd:2a:27:b1:24:6c:a3:2a:c2:5d:0b:
4c:5a:5f:9d:91:67:60:8c:e7:d6:f6:08:f2:6f:05:
65:a4:bf:3b:6d:75:0c:da:1b:82:2e:ff:90:8a:6b:
37:11:2f:34:83:f1:20:24:75:af:21:f0:e0:8a:3a:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:56:55:D0:91:A8:0B:AD:7E:70:C1:D3:1E:B7:8C:D5:19:15:7C:66
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XlZV0JGoC61-cMHTHreM1RkVfGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.122.0/23
Signature Algorithm: sha256WithRSAEncryption
56:9c:d8:10:49:af:43:2b:d2:b0:b9:30:0d:4c:10:40:ed:ae:
ec:74:b4:a8:a3:ea:12:68:26:82:52:61:4f:43:56:76:3d:e5:
0c:6c:8a:be:6c:1d:c0:42:36:16:35:fc:14:cd:01:47:b6:36:
e7:98:80:2d:60:85:51:28:2f:2a:8a:04:58:96:98:89:53:cd:
bd:9c:78:ea:30:c1:d2:32:e7:cd:f6:49:bb:78:78:0a:e9:9d:
f5:ea:b5:b1:01:67:37:df:fd:ed:5a:7b:c3:df:73:9d:20:34:
fa:d1:6f:90:ce:e1:34:f0:f0:6e:02:b6:de:9d:d5:19:a6:5e:
fc:eb:87:13:40:d7:a7:a2:d7:a4:11:bb:dc:51:a5:71:97:65:
3d:14:24:17:ce:9d:c4:19:d3:19:e3:96:3d:d3:c1:a9:95:bd:
3f:59:8e:79:92:b5:8b:22:4c:2f:ed:ad:5c:dd:d4:31:8f:a8:
bd:56:da:ce:1f:df:71:2f:3e:df:e5:a8:ef:85:de:1d:89:98:
ef:d8:1e:e7:a5:9b:30:f3:3f:88:72:a4:74:3e:4a:50:da:ca:
f3:88:d5:0e:f8:77:7d:6f:b1:fe:42:1a:81:2b:14:43:50:94:
76:37:17:4a:d5:83:f5:9b:70:4e:9c:cf:3b:47:d4:a2:89:eb:
f5:82:de:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:57:00 2024 by rpki-client on console-fra.rpki-client.org