Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/XNocZWDaAmD360CgaB16VJGy5qY.roa
File: XNocZWDaAmD360CgaB16VJGy5qY.roa (raw, json)
Hash identifier: pJnYxXsWDBXyOGJl9xX9Bwlp53N+bmnTCokK4tWn8pM=
Subject key identifier: 5C:DA:1C:65:60:DA:02:60:F7:EB:40:A0:68:1D:7A:54:91:B2:E6:A6
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 018F86584B6F0E11B36CFB46B87196554D67
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/XNocZWDaAmD360CgaB16VJGy5qY.roa
Signing time: Fri 17 May 2024 11:38:04 +0000
ROA not before: Fri 17 May 2024 11:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1298
IP address blocks: 83.66.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:58:4b:6f:0e:11:b3:6c:fb:46:b8:71:96:55:4d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: May 17 11:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cda1c6560da0260f7eb40a0681d7a5491b2e6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:88:e0:ea:78:8a:c7:dd:ce:14:20:08:68:
f0:ff:cb:fc:13:16:eb:7c:7a:65:16:04:66:83:3c:
52:29:6a:b8:db:cc:ee:ce:be:98:34:09:3d:70:4d:
82:0d:d8:79:8d:38:fc:0d:56:f2:ed:89:c1:8d:f6:
cb:72:58:2c:ae:04:28:38:d8:9f:b6:08:3c:d9:b6:
75:1c:4f:3a:48:2b:98:2a:35:09:c1:3f:3c:9e:66:
ca:c7:b0:59:65:cc:10:b0:6c:7f:0c:09:50:ac:3f:
cc:d4:6f:f1:34:6d:e9:3c:ed:3d:46:be:9f:ca:7e:
9a:1f:44:c7:b6:3f:04:74:cd:4b:18:c0:1d:e3:6b:
ef:8d:d3:81:11:d7:12:c1:97:04:26:50:f9:ac:a6:
9e:89:66:57:29:13:83:d9:60:83:f6:a4:78:b4:a0:
9f:67:f8:07:cb:86:cc:94:3d:cd:aa:4e:7d:95:9e:
91:1f:58:83:41:6f:bf:a3:b6:16:ee:91:cc:cb:d3:
b8:51:c4:06:e9:a9:27:88:a3:61:c6:3b:46:dd:f4:
f9:5c:cf:92:2f:ce:39:be:c3:08:8e:98:e1:1f:86:
d6:2d:ce:d8:ab:d2:ca:72:32:58:67:90:d6:b2:3c:
cf:b6:1c:a3:18:75:85:a0:a2:cd:d3:6d:76:00:ce:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DA:1C:65:60:DA:02:60:F7:EB:40:A0:68:1D:7A:54:91:B2:E6:A6
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/XNocZWDaAmD360CgaB16VJGy5qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c2:cb:da:a4:c8:69:d1:3a:67:03:a6:70:12:f8:65:16:83:
c2:94:a1:dd:b0:04:b2:81:6d:e0:90:a1:5b:36:53:18:ca:6d:
70:ed:d9:48:d5:79:16:d8:3f:f6:36:93:66:08:01:1e:5e:5d:
77:4a:27:b4:2a:c7:3a:96:78:aa:f9:83:62:f4:35:b1:fb:49:
b3:06:42:5b:b9:61:ae:a6:ec:3d:30:62:c4:7f:67:70:f8:6b:
d4:bd:da:e2:6a:06:f8:53:f2:3c:14:f7:70:08:b2:2c:f3:a7:
02:86:00:2e:10:c8:3a:58:43:01:47:ce:7d:2d:e6:b4:84:a6:
7a:ef:de:62:89:35:17:0d:57:f2:c1:c5:07:e8:e7:6f:96:3f:
ce:64:83:35:a8:2a:f3:fb:d8:5c:73:b8:6a:5e:31:f2:db:28:
2b:40:47:20:5c:f9:4d:1a:00:f4:b9:29:6a:ce:ca:09:ed:97:
b3:ca:30:0f:1f:d2:93:91:25:a5:0a:6c:0a:2a:3b:df:9d:0f:
ae:41:4b:62:67:d6:28:c3:3a:1d:93:73:45:57:1a:9b:46:34:
c4:fa:fd:9e:b3:5d:f2:aa:85:4a:d3:f8:02:f6:20:3d:86:33:
7f:f6:57:2f:61:f2:8c:4f:02:70:63:1c:8e:26:0c:cb:2b:b9:
2d:ab:a7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:52:40 2024 by rpki-client on console-ams.rpki-client.org