Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/rxjmspn5zBaJCwCHriwqgyXYtz4.roa
File: rxjmspn5zBaJCwCHriwqgyXYtz4.roa (raw, json)
Hash identifier: XZMvDIPhl8F1yuLcRr9JaGPeG/1nTsNBUIOvFxDptBM=
Subject key identifier: AF:18:E6:B2:99:F9:CC:16:89:0B:00:87:AE:2C:2A:83:25:D8:B7:3E
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 018CC26CF4742B6940CB49EF4E3D2FD7325C
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/rxjmspn5zBaJCwCHriwqgyXYtz4.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199980
IP address blocks: 82.160.170.0/24 maxlen: 24
82.160.168.0/23 maxlen: 23
82.160.180.0/24 maxlen: 24
88.199.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f4:74:2b:69:40:cb:49:ef:4e:3d:2f:d7:32:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af18e6b299f9cc16890b0087ae2c2a8325d8b73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:4a:26:3d:72:91:92:c6:52:b4:6e:8e:ec:
35:5f:86:89:26:ef:ff:e1:73:f5:b5:27:27:9b:6d:
07:94:b8:57:28:f4:8c:8c:07:f5:7c:ba:4f:c6:59:
99:f4:a9:42:32:6b:b8:1e:26:92:1a:f6:5e:d4:9d:
e3:30:07:6e:ec:82:82:ee:bb:ce:3f:3f:70:68:9a:
42:b2:92:c9:3a:a6:fa:8c:27:14:ac:c8:9f:1e:47:
c0:b3:c8:25:f7:f6:c5:0e:34:59:55:a0:2b:5c:3a:
72:b7:c9:05:52:34:e4:34:cf:31:1b:71:de:c4:aa:
d1:43:36:47:b1:7a:f5:41:cb:32:7b:30:d3:e8:bd:
8f:b4:6a:4c:99:75:27:6f:b8:6c:3d:e8:3e:5e:77:
2a:27:e8:f2:8e:ff:e1:77:11:63:a2:bd:35:e0:b9:
e5:70:07:5b:e5:1d:f5:2b:f7:ad:ee:45:d5:22:a9:
d2:d9:7d:e2:b7:d7:b4:bb:92:6e:d9:02:1e:39:36:
d3:f5:af:fb:32:e2:68:dc:da:41:c0:07:71:b6:94:
c5:0b:18:e0:2d:c9:d0:57:22:7d:2c:3e:0c:9f:d2:
73:f5:40:7a:c4:e8:71:67:14:08:87:f0:5d:6b:63:
fa:a0:d4:f3:5c:62:8b:12:64:2a:16:32:3e:5e:e6:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:18:E6:B2:99:F9:CC:16:89:0B:00:87:AE:2C:2A:83:25:D8:B7:3E
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/rxjmspn5zBaJCwCHriwqgyXYtz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.168.0-82.160.170.255
82.160.180.0/24
88.199.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:75:94:c8:6f:97:68:3e:f4:31:ea:2b:17:8b:2b:23:ee:21:
e2:86:78:12:d3:e6:4e:92:8a:27:cc:d8:c7:63:97:04:49:f1:
be:ba:c0:c6:91:3b:11:ba:8e:1c:76:0e:ba:f8:1e:37:fa:c5:
30:56:f3:9f:0e:0f:d2:8e:6c:08:c5:12:43:12:3d:94:f5:a3:
c6:6f:62:b5:c7:82:e8:4e:31:5c:df:fb:63:fa:0c:1c:95:9d:
db:5d:88:36:33:4c:53:b5:b6:04:8c:34:0d:84:45:9d:c6:bf:
85:9e:a5:fd:c2:1c:de:c1:c9:c4:c2:12:19:9e:7d:de:a8:d8:
32:64:09:2d:dc:eb:e9:4d:40:48:53:b3:a8:4c:3b:c0:67:c2:
0f:d4:e3:53:13:39:f6:46:1f:8f:f5:04:4c:34:d0:46:c7:50:
0f:10:84:ed:95:54:0e:a6:00:04:df:99:7a:f1:8d:8f:33:e9:
f3:0a:80:48:e1:73:6e:9b:9b:72:81:11:24:20:51:f8:e7:f5:
a1:13:c7:f9:73:66:d8:8a:8c:1a:f5:0e:4f:e1:79:89:60:af:
a1:11:b9:6a:e3:07:74:cd:7d:6f:a6:d9:86:90:3e:48:1d:32:
5f:53:99:d7:72:bd:6e:be:41:c8:7e:63:9b:1f:4a:e4:63:c5:
d0:19:cb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:09:01 2024 by rpki-client on console-fra.rpki-client.org