Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Xe5Y9B9chQ6KcWzUvgZlnp9Z8Ns.roa
File: Xe5Y9B9chQ6KcWzUvgZlnp9Z8Ns.roa (raw, json)
Hash identifier: Ymx5pN87SiftMtovneSUz8yN/2NtwPzUr1oWg/FxyZg=
Subject key identifier: 5D:EE:58:F4:1F:5C:85:0E:8A:71:6C:D4:BE:06:65:9E:9F:59:F0:DB
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B7323FE710F6523F35C18C53C94C05
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Xe5Y9B9chQ6KcWzUvgZlnp9Z8Ns.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24600
IP address blocks: 193.252.117.0/24 maxlen: 24
193.252.118.0/24 maxlen: 24
193.252.123.0/24 maxlen: 24
193.252.121.0/24 maxlen: 24
193.252.122.0/24 maxlen: 24
2a01:c9c0:b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:32:3f:e7:10:f6:52:3f:35:c1:8c:53:c9:4c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dee58f41f5c850e8a716cd4be06659e9f59f0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:6a:e2:86:0a:0a:35:90:85:ed:4d:4b:02:
e0:f4:34:04:3a:b6:71:78:d7:c5:8e:e1:e6:95:28:
d0:e3:fc:e9:77:b0:c2:b2:4a:c4:d2:ff:e5:db:47:
ee:7d:c7:d1:2a:bb:d6:f9:bb:1b:97:f2:b2:3b:49:
d5:0f:5e:9d:48:3e:ed:f3:89:fb:99:68:04:6a:e2:
98:5b:33:60:c4:5f:65:90:73:02:4e:ef:de:5e:58:
5d:75:fd:c7:09:91:ef:9c:9b:f9:24:bd:b2:f6:7c:
b0:5f:40:0b:ca:9d:d3:14:f4:bb:19:d1:f7:57:bf:
81:5f:3d:c5:d0:e7:23:f1:c1:b4:13:9c:28:4f:ee:
89:97:e0:0c:aa:08:d3:8c:3b:88:8e:1a:44:e6:95:
ce:52:e8:cc:f2:e8:1e:ff:36:74:0c:24:e8:2e:d4:
ba:63:93:de:43:1f:d7:b1:52:1e:b7:84:63:4b:30:
a0:c1:30:fd:34:1f:77:d7:2f:83:46:f1:22:e2:00:
df:87:22:4a:76:7b:03:51:83:d5:47:f1:50:1a:39:
1d:fe:ba:32:68:77:2b:85:83:2a:5c:8c:5b:36:06:
63:59:7f:db:6f:50:e9:a1:6c:38:48:7c:d0:49:e1:
a0:c0:16:c3:0f:0b:d1:dd:eb:51:66:b6:c6:ad:bc:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EE:58:F4:1F:5C:85:0E:8A:71:6C:D4:BE:06:65:9E:9F:59:F0:DB
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Xe5Y9B9chQ6KcWzUvgZlnp9Z8Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.252.117.0-193.252.118.255
193.252.121.0-193.252.123.255
IPv6:
2a01:c9c0:b0::/44
Signature Algorithm: sha256WithRSAEncryption
a4:77:dc:cf:8f:03:fa:d2:e5:01:7b:92:17:7c:e2:ec:8c:a4:
16:04:c2:bc:79:93:d2:51:79:3e:72:9a:1f:d3:69:20:19:23:
79:f7:3c:bb:8d:78:7c:42:74:95:b2:a7:bf:45:32:88:a7:c0:
2c:ce:84:77:71:de:ec:f4:96:11:ef:b9:6a:18:ee:91:bf:59:
26:eb:df:de:1c:95:65:c7:7d:33:fd:32:e8:da:0a:aa:04:03:
06:44:a2:c3:32:84:1a:0a:ba:9a:a6:76:17:bf:23:1d:a4:95:
7f:93:5b:1e:f8:fd:a3:a6:08:ef:c3:21:07:12:9e:f9:ab:95:
68:a2:d8:06:eb:04:6c:3c:d3:43:e7:3b:4b:b3:1f:9e:d4:e8:
65:b7:ed:78:71:42:54:47:d5:8b:9c:b4:a5:3a:cb:a1:b9:c9:
08:75:46:64:27:f8:5a:a4:6b:d8:2e:e9:3e:61:05:11:50:c0:
03:36:3e:17:7e:8a:f4:c3:71:9a:64:cb:07:1c:05:93:f7:56:
5a:67:25:39:08:8d:b6:78:c0:25:c7:b2:b9:17:a3:5e:97:08:
be:9a:dd:9c:d4:1e:2f:eb:ec:32:7d:6f:5b:3a:a5:75:b2:98:
7b:a2:d3:17:c6:44:fc:09:e1:ee:a8:e6:04:ae:48:4f:fc:91:
c3:3f:dc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:17:40 2024 by rpki-client on console-ams.rpki-client.org