Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/xbnOwG67x_J_Lmx2P0ojD593KaY.roa
File: xbnOwG67x_J_Lmx2P0ojD593KaY.roa (raw, json)
Hash identifier: 61Uuy9DeJ/ClIBwz/d8ZI+Bs1fUc5CvhvgmPjGtzMGk=
Subject key identifier: C5:B9:CE:C0:6E:BB:C7:F2:7F:2E:6C:76:3F:4A:23:0F:9F:77:29:A6
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FE9AA5932ED9D582803CB2AC3429D
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/xbnOwG67x_J_Lmx2P0ojD593KaY.roa
Signing time: Tue 02 Jan 2024 04:30:26 +0000
ROA not before: Tue 02 Jan 2024 04:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31307
IP address blocks: 212.252.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e9:aa:59:32:ed:9d:58:28:03:cb:2a:c3:42:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5b9cec06ebbc7f27f2e6c763f4a230f9f7729a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:b0:4a:30:25:ba:ab:da:18:38:86:3a:18:
99:88:a4:f1:2e:15:11:b8:f2:5a:66:dd:0e:54:c4:
3d:88:e5:5e:89:39:7d:c4:16:80:83:0f:6d:8a:76:
86:0e:d4:12:a1:12:26:db:8b:2a:19:80:c9:8c:44:
7a:88:33:cd:d1:f1:8f:62:c9:70:0e:91:9a:e5:12:
8b:89:67:48:38:33:62:a0:26:c3:b0:ce:dc:fb:15:
14:54:c3:4f:c3:e6:93:97:96:12:0b:14:d8:a0:67:
3d:71:49:bd:dd:c0:ca:67:50:ea:f3:4a:e9:38:dd:
84:62:53:74:4a:cd:3d:11:82:ba:dc:3d:77:37:34:
55:39:73:63:01:0c:32:47:a4:34:43:fe:14:17:18:
ac:03:51:44:83:40:08:de:a3:d1:08:3f:26:15:85:
9c:b9:d3:5e:9e:91:a4:6c:08:eb:ac:4f:a8:90:8a:
53:30:c5:89:31:62:9e:e8:8c:3f:88:1e:92:d2:1c:
fc:a8:d5:45:0e:aa:5e:9c:d2:ab:d0:9c:9f:de:64:
a5:7b:a5:20:6d:a5:f4:48:fe:64:d9:b7:7a:43:9b:
ef:c8:14:02:f6:f8:3e:63:63:d4:44:32:62:82:df:
c2:9a:27:fb:5e:b6:4b:eb:9a:0f:d4:51:a2:aa:ee:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B9:CE:C0:6E:BB:C7:F2:7F:2E:6C:76:3F:4A:23:0F:9F:77:29:A6
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/xbnOwG67x_J_Lmx2P0ojD593KaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.252.196.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f3:c1:d1:cc:c6:de:c7:8f:96:79:4b:bb:a0:35:0f:64:6c:
f3:c6:14:65:6d:e1:19:53:23:55:3d:2c:1f:22:d9:a1:53:0a:
93:17:a8:8d:5f:71:eb:ff:77:7e:8e:99:aa:5a:d4:50:04:7b:
52:39:77:1a:b6:30:65:79:03:a5:39:db:ff:e3:c7:ce:51:dc:
91:7d:78:b7:51:2c:df:c7:40:fc:d6:e7:44:1f:59:4a:1b:94:
a2:57:24:c9:45:97:53:ff:c2:17:f7:d7:a4:2b:df:b1:64:42:
15:d7:9f:ce:6a:54:5a:5b:66:74:6b:8d:bd:fa:7d:3b:ec:fa:
dd:e5:21:73:68:72:6e:44:a6:44:70:1c:1b:7d:f9:c1:16:b5:
7e:2a:15:23:7f:25:d8:c1:c4:89:12:b2:40:a1:49:7b:0d:ae:
ee:99:9b:7c:fe:46:02:b5:91:4a:ba:90:e3:d3:e4:50:76:37:
78:0a:93:88:75:5e:9d:c5:c1:49:85:19:3e:0b:0b:ba:d0:24:
e2:b3:e0:82:f9:89:b3:b0:ab:65:c1:95:b1:ae:b4:60:70:f0:
ef:64:6d:13:2c:cf:8d:e8:ed:95:18:a5:6b:eb:47:8d:ac:d6:
03:05:dc:9c:0a:ed:d4:d9:dd:33:63:ed:cb:3e:ca:e7:63:73:
b1:d0:ce:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:23:11 2024 by rpki-client on console-ams.rpki-client.org