Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/xA6LToYOTKhyTX1S8AXOKrTJR_I.roa
File: xA6LToYOTKhyTX1S8AXOKrTJR_I.roa (raw, json)
Hash identifier: eDvwshLuaEbPtmMv+mFuV/27XAchqZJ37EjCNLv7Ap4=
Subject key identifier: C4:0E:8B:4E:86:0E:4C:A8:72:4D:7D:52:F0:05:CE:2A:B4:C9:47:F2
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01902BBEFA393C745B53AED588EA36CA0A8F
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/xA6LToYOTKhyTX1S8AXOKrTJR_I.roa
Signing time: Tue 18 Jun 2024 14:27:34 +0000
ROA not before: Tue 18 Jun 2024 14:27:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 185.251.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2b:be:fa:39:3c:74:5b:53:ae:d5:88:ea:36:ca:0a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jun 18 14:27:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c40e8b4e860e4ca8724d7d52f005ce2ab4c947f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:71:dd:c2:01:7f:33:43:71:b9:71:a4:20:
d9:51:bc:f2:ac:56:82:38:36:c5:92:2d:df:ce:2b:
16:04:8b:70:1f:e6:2c:f0:dc:11:12:66:88:a9:4c:
05:45:6e:79:36:d2:60:2c:1e:8d:cf:4f:d9:b9:81:
44:94:20:ec:63:d6:19:53:23:0e:89:90:c9:e4:57:
ce:29:1d:95:c9:be:82:8a:c5:a1:91:68:c9:9b:5b:
81:1a:53:e0:5d:aa:f2:17:e7:11:3c:e9:c5:f0:9c:
76:ff:90:37:95:4a:1e:a7:b2:97:52:d6:13:49:42:
74:a9:4e:df:e6:10:c3:04:ca:e6:e8:8e:2d:0f:5d:
01:22:d6:42:b6:44:b8:95:3e:2b:01:33:11:16:07:
0c:b5:62:01:f5:a1:6f:73:d1:c8:b7:8b:d1:5c:fe:
6a:51:e7:db:05:33:88:17:f6:01:13:d9:f3:d2:0d:
3d:57:73:3a:d1:07:27:61:88:8e:27:ea:24:5f:50:
04:29:b3:32:ef:11:ee:73:34:33:62:c4:08:9c:6a:
76:b1:09:0f:3a:8b:6c:c5:3a:f8:e4:78:b1:75:76:
c4:b1:00:05:cc:c1:d4:b0:50:2e:57:cc:0c:b9:17:
ae:dd:a0:96:be:c6:f9:dd:9d:dc:da:04:84:fb:f1:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0E:8B:4E:86:0E:4C:A8:72:4D:7D:52:F0:05:CE:2A:B4:C9:47:F2
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/xA6LToYOTKhyTX1S8AXOKrTJR_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.82.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:8f:69:98:14:b7:19:2c:db:28:aa:07:91:b2:f6:f9:c3:e3:
3c:32:18:30:2a:89:74:c1:1b:ca:a3:72:cc:82:ba:d4:3b:8d:
ad:07:45:03:fd:67:0a:19:db:3e:67:e1:8a:c9:b8:11:76:16:
45:0b:d7:96:1f:a2:8c:b8:f3:e5:e8:b5:f0:0e:12:ea:43:d3:
d8:a0:3b:5a:e0:f7:d2:15:82:57:f2:0e:43:69:a3:7c:74:e3:
de:bf:d3:5f:e5:cb:f9:b1:e4:af:b0:04:3d:90:ef:c5:a9:bd:
13:71:69:1b:18:6f:99:6b:78:18:fc:7b:a2:a0:2f:64:9a:95:
66:de:34:df:f0:d4:41:94:a3:2b:b0:37:90:75:94:a6:5c:4a:
bf:13:5c:ba:7f:5d:bb:6e:b8:92:07:c0:b4:1b:af:a5:c8:4e:
37:a2:84:a5:78:79:5e:d6:82:30:39:2c:85:6f:3f:a0:7a:1a:
43:97:24:ad:61:ec:ff:be:01:d2:0c:85:2c:5e:49:9e:d1:57:
67:5e:26:b5:3c:ab:75:41:a1:92:07:b3:09:71:fe:3a:96:37:
bd:73:af:5d:c7:84:ef:23:2c:ee:c2:d9:f0:a1:ec:95:e3:04:
0d:ae:73:cd:ab:27:08:05:4d:9b:b9:61:64:3f:ad:9d:8d:ec:
fe:b9:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:13:52 2024 by rpki-client on console-ams.rpki-client.org