Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/XgXo1pj917oiYuZWpNg-RINAcOM.roa
File: XgXo1pj917oiYuZWpNg-RINAcOM.roa (raw, json)
Hash identifier: atg2AXwVmObutb/VkzeeTF4rdQ06DyTtTyNadvdFY2I=
Subject key identifier: 5E:05:E8:D6:98:FD:D7:BA:22:62:E6:56:A4:D8:3E:44:83:40:70:E3
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 018E3D8D2A49BF5E3C31C9FBF72F8E424787
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/XgXo1pj917oiYuZWpNg-RINAcOM.roa
Signing time: Thu 14 Mar 2024 15:20:45 +0000
ROA not before: Thu 14 Mar 2024 15:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39100
IP address blocks: 195.60.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:8d:2a:49:bf:5e:3c:31:c9:fb:f7:2f:8e:42:47:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Mar 14 15:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e05e8d698fdd7ba2262e656a4d83e44834070e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:bb:c5:70:1f:d4:1d:93:88:68:10:07:d5:
41:7d:f4:45:90:50:bd:98:f3:68:21:6e:cd:08:78:
aa:eb:e5:d9:c7:00:41:3a:b3:46:5c:97:d1:36:f2:
5c:64:31:38:83:f0:1b:a8:15:52:c3:bd:01:e6:dd:
4e:ce:cc:41:21:e3:a6:e6:0a:44:d2:40:18:89:9c:
c0:75:f6:63:11:3d:70:da:52:a6:8f:7b:a3:37:98:
e5:df:92:da:92:56:41:04:42:d3:0b:e1:de:b3:97:
34:95:b7:ca:5a:a6:b5:df:b2:a9:90:78:34:7c:c5:
7f:bd:99:97:e3:57:0f:15:3a:36:6b:50:40:70:bc:
45:5b:25:71:94:6a:0e:c0:a3:d1:56:7c:ee:f7:66:
b3:f3:94:ab:af:4a:e3:16:06:c1:76:22:3a:fe:5f:
74:ad:69:84:d4:38:f4:00:8b:f1:8e:e3:4a:21:79:
76:28:3c:2a:19:6e:c3:2e:b0:c7:bc:a6:38:f9:36:
91:15:42:4f:5b:0a:86:3b:7f:53:4b:88:20:c6:ec:
bd:21:be:78:12:80:7f:9e:50:9c:2e:15:11:2e:d6:
87:a4:0e:a2:62:d8:7b:65:7a:c6:db:81:e3:23:9e:
6d:2c:9b:39:3d:06:b0:5e:0b:da:51:53:ed:44:f5:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:05:E8:D6:98:FD:D7:BA:22:62:E6:56:A4:D8:3E:44:83:40:70:E3
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/XgXo1pj917oiYuZWpNg-RINAcOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.186.0/23
Signature Algorithm: sha256WithRSAEncryption
54:c9:aa:14:e6:68:02:3f:3f:28:82:29:49:1e:47:9a:ef:3e:
3f:d5:57:40:18:f8:57:86:c5:75:1b:f8:3a:4a:85:2e:21:8b:
10:c5:55:a9:d4:f0:e7:15:d9:d8:9c:2d:e2:9b:de:6c:18:e2:
d9:85:ca:09:03:f3:31:ca:c8:23:b4:2b:6e:ba:5b:6a:29:e4:
cf:5b:48:f6:a4:69:06:fb:3c:a2:29:21:ff:45:16:c6:dc:56:
49:7f:f7:62:bd:e7:3a:3b:bc:fc:ea:e1:87:0d:10:4f:ba:e0:
8f:79:97:50:1c:c2:87:e1:74:28:ab:02:1f:1a:bf:c9:0d:4e:
c0:06:5d:99:32:b1:12:ff:a6:39:51:c2:57:f1:76:e1:af:46:
af:3b:07:7a:13:cf:0e:d6:18:83:d4:ed:11:52:ff:40:88:43:
d3:d6:16:30:3b:9f:77:34:b9:af:a2:a2:fb:10:dc:7d:52:71:
ef:20:45:5b:8c:28:c3:e5:30:cd:90:a8:69:12:63:01:b1:b3:
1d:a6:dc:a6:fc:f6:4c:de:a8:11:36:5d:c5:58:91:cf:b6:20:
ba:39:87:c6:45:37:72:24:97:be:b3:e3:6b:f0:d4:64:e1:bf:
8d:61:dc:4a:c8:06:48:9a:1d:e0:30:66:cd:52:de:13:d9:dd:
a0:93:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:06:03 2024 by rpki-client on console-fra.rpki-client.org