Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/xQPJfWgHTWb5M9QZY3s4CPkGCg8.roa
File: xQPJfWgHTWb5M9QZY3s4CPkGCg8.roa (raw, json)
Hash identifier: Mj2YnO6FEktejYDanokPq2DQKUi1sVlVvUAaiDYb1jE=
Subject key identifier: C5:03:C9:7D:68:07:4D:66:F9:33:D4:19:63:7B:38:08:F9:06:0A:0F
Certificate issuer: /CN=f98ef904147026acd4e9df789292196ace328ac2
Certificate serial: 018CC500EA666E184D7A6351E2DE1FB2862B
Authority key identifier: F9:8E:F9:04:14:70:26:AC:D4:E9:DF:78:92:92:19:6A:CE:32:8A:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y75BBRwJqzU6d94kpIZas4yisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/xQPJfWgHTWb5M9QZY3s4CPkGCg8.roa
Signing time: Mon 01 Jan 2024 12:30:20 +0000
ROA not before: Mon 01 Jan 2024 12:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34790
IP address blocks: 45.93.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/1-Y75BBRwJqzU6d94kpIZas4yisI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/1-Y75BBRwJqzU6d94kpIZas4yisI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Y75BBRwJqzU6d94kpIZas4yisI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ea:66:6e:18:4d:7a:63:51:e2:de:1f:b2:86:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98ef904147026acd4e9df789292196ace328ac2
Validity
Not Before: Jan 1 12:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c503c97d68074d66f933d419637b3808f9060a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:0b:06:4c:47:26:f7:04:31:40:a5:ab:01:
df:3d:8d:13:d7:a9:e5:da:59:83:86:f8:41:90:8a:
51:33:58:1a:bb:79:95:ff:81:ec:48:f6:6a:85:c9:
c1:04:6a:56:74:2b:48:5b:aa:cd:54:cc:45:37:79:
c9:05:f5:7d:0f:fd:61:cc:0c:6a:f2:5d:bd:c1:69:
71:36:98:81:2f:9b:1c:9f:0e:b4:60:21:a5:db:4f:
18:8c:29:a9:4d:80:e6:4a:54:34:e5:fb:dd:1a:d7:
b1:0d:04:b7:bc:fb:c6:d9:87:df:d7:3b:e9:a5:86:
00:5d:27:e5:e3:23:c5:37:57:9a:c5:b9:2b:bf:2e:
02:ca:a0:40:44:a4:b4:95:95:c8:aa:5c:e9:ce:a4:
89:44:aa:fc:32:5a:01:50:37:79:45:d3:6b:de:4d:
fa:45:e7:83:71:67:2c:41:34:58:49:55:52:13:31:
88:d5:40:a6:de:ef:59:73:0f:56:c7:ee:98:02:7f:
ef:87:b2:91:1c:ce:a0:94:03:17:5d:bb:15:04:2c:
4e:fa:36:32:32:4f:ee:86:e7:62:e8:08:0e:58:5a:
23:09:43:e4:c8:fb:cc:2f:6f:e9:28:c6:61:8b:99:
3d:f4:ef:f8:f1:5c:21:ce:5c:5b:14:35:ed:bf:1f:
65:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:03:C9:7D:68:07:4D:66:F9:33:D4:19:63:7B:38:08:F9:06:0A:0F
X509v3 Authority Key Identifier:
keyid:F9:8E:F9:04:14:70:26:AC:D4:E9:DF:78:92:92:19:6A:CE:32:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y75BBRwJqzU6d94kpIZas4yisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/xQPJfWgHTWb5M9QZY3s4CPkGCg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/1-Y75BBRwJqzU6d94kpIZas4yisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:c6:02:75:ed:ca:d1:b7:f4:1c:89:8b:b9:20:7a:62:dc:86:
6c:78:26:87:7d:48:bb:d5:c1:42:13:8b:7f:fd:76:60:a0:e4:
8b:2a:5c:72:92:cc:46:73:4f:0a:00:81:13:74:5d:7d:2b:f3:
39:8f:ed:bd:b5:e8:22:e3:71:9f:d4:b3:23:57:f0:2a:15:d6:
7b:67:66:f2:e0:1c:71:e3:89:61:12:ed:db:1a:81:23:1b:ef:
f0:f7:42:61:06:9d:dd:2b:1f:fa:53:7c:38:e8:dd:c7:ae:22:
c4:3a:24:f5:c8:7e:96:38:87:d9:7c:26:54:55:05:65:4a:5d:
bd:a7:31:fe:73:bc:e1:6b:ee:29:85:80:b9:bc:86:12:57:cb:
c9:1b:82:e9:bc:c7:80:8f:3b:20:6a:ff:58:e1:32:16:ea:5a:
ca:78:1f:cf:0b:ce:f9:31:a6:f7:f1:d3:b7:10:a4:16:c3:e5:
f3:62:7d:13:14:06:a6:17:b5:51:fc:ff:dd:ae:c6:90:62:c0:
83:a9:2d:46:fa:99:84:96:f3:37:5a:eb:5c:f4:cf:25:34:7a:
2a:1c:cb:e7:d6:04:a0:c1:59:57:e4:f9:f4:08:cc:54:a7:17:
b4:a3:1b:23:17:14:20:e1:5a:b3:f4:38:49:26:19:07:12:35:
0a:85:2e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:40:58 2024 by rpki-client on console-fra.rpki-client.org