Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XpdohMWXetfzbq6140T1VoHrqaA.roa
File: XpdohMWXetfzbq6140T1VoHrqaA.roa (raw, json)
Hash identifier: PPtztT8JYkNrpB0DRHLu1rBUEcDjA3DbsczNXNIUuAw=
Subject key identifier: 5E:97:68:84:C5:97:7A:D7:F3:6E:AE:B5:E3:44:F5:56:81:EB:A9:A0
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 018CC26D47486C5DF4D2500A6DD9D9D86547
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XpdohMWXetfzbq6140T1VoHrqaA.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198114
IP address blocks: 91.231.192.0/22 maxlen: 22
91.231.192.0/24 maxlen: 24
91.231.193.0/24 maxlen: 24
91.231.194.0/24 maxlen: 24
91.231.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:47:48:6c:5d:f4:d2:50:0a:6d:d9:d9:d8:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e976884c5977ad7f36eaeb5e344f55681eba9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:05:b5:88:e1:eb:fd:93:5e:db:a8:e2:24:
c8:91:b2:1b:52:6b:ca:da:c5:87:31:7e:bd:52:c0:
ca:bf:4f:fe:79:1b:ab:d0:3d:6c:cc:da:e5:21:70:
c6:83:2f:54:8e:82:3d:03:62:2f:82:11:9c:bb:59:
03:5e:be:aa:e4:a1:81:06:2f:ff:19:09:d0:d9:1d:
f0:60:bf:34:52:df:07:4d:f1:ab:47:90:fa:5b:03:
59:b4:71:af:b4:e2:c9:96:07:43:ec:95:8a:88:5d:
32:ff:97:5e:35:e3:92:52:d4:f4:fe:7c:0b:6d:86:
8c:17:ed:3a:07:df:91:68:c6:d6:62:36:ba:24:c3:
36:3b:ad:43:59:c0:01:d0:f6:6e:4b:a4:48:a3:44:
0a:4b:c9:80:14:df:fb:e9:fe:5e:e0:e8:cd:af:c4:
0f:53:d2:af:06:e1:27:ee:c5:1b:ea:d5:e8:01:54:
32:30:36:e4:cf:98:7a:11:0a:7a:4f:9c:46:56:2d:
87:c1:d8:50:ec:10:62:64:71:fa:5d:5e:8f:9f:83:
1b:29:90:78:cd:86:6e:89:ab:24:61:c5:c8:e2:ab:
a4:2c:98:22:63:b7:3f:fa:0f:03:17:28:35:c5:9c:
29:23:fd:ea:36:26:78:df:13:d9:a1:33:a8:b0:ba:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:97:68:84:C5:97:7A:D7:F3:6E:AE:B5:E3:44:F5:56:81:EB:A9:A0
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XpdohMWXetfzbq6140T1VoHrqaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.192.0/22
Signature Algorithm: sha256WithRSAEncryption
28:66:91:f1:26:0a:b9:9d:b1:f5:ed:65:0d:8a:77:ff:c9:a0:
63:a6:47:b6:15:23:36:a5:54:36:5c:c3:b9:35:23:3e:a7:49:
a6:98:62:96:f5:2d:3f:e9:41:80:4d:07:70:28:62:71:22:da:
b1:96:f9:04:ac:bd:a1:2d:fd:49:99:9d:72:08:b0:c4:5e:f2:
8f:26:15:77:a2:a6:37:6d:00:ec:55:41:e5:8c:ba:c7:74:d7:
a5:1b:95:71:23:2f:a8:25:a2:1f:67:18:93:3b:13:0a:1b:18:
7e:0b:13:4b:d4:b5:2f:ec:e0:86:de:ae:cd:4a:99:ba:09:17:
9b:c2:6d:95:bb:48:39:5e:28:fd:91:0f:8f:44:d4:da:b2:9c:
89:f3:ac:71:8b:bb:4f:1a:ca:2d:a8:6e:43:68:2c:62:0a:8d:
61:be:3c:e4:56:26:61:a0:d7:ef:39:bc:f1:88:93:4c:c9:a6:
0f:b7:e9:a6:a2:1b:d4:27:48:03:0a:2c:ce:b4:21:3a:73:a8:
2b:80:3a:9f:11:e3:85:36:e7:c4:02:eb:7f:49:6f:0f:3e:27:
36:55:39:0c:70:b6:20:f3:b4:88:44:99:6c:63:87:c1:e1:9f:
a3:c0:7c:d7:13:e7:12:df:d5:99:6f:c8:bf:a7:a1:73:45:9b:
3e:ac:bd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:45:45 2024 by rpki-client on console-ams.rpki-client.org