Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/xoznT0GC2VgV0bcY1n4mUNcxWY4.roa
File: xoznT0GC2VgV0bcY1n4mUNcxWY4.roa (raw, json)
Hash identifier: g7Qc0tWw8LEAsWoPobDHqCszAR32+EGtY8wTGcFTxfs=
Subject key identifier: C6:8C:E7:4F:41:82:D9:58:15:D1:B7:18:D6:7E:26:50:D7:31:59:8E
Certificate issuer: /CN=15e0c079ebbee9453adf40783340016497710e08
Certificate serial: 018CC6B7817CFCA4197B88F2299482479CE8
Authority key identifier: 15:E0:C0:79:EB:BE:E9:45:3A:DF:40:78:33:40:01:64:97:71:0E:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/xoznT0GC2VgV0bcY1n4mUNcxWY4.roa
Signing time: Mon 01 Jan 2024 20:29:24 +0000
ROA not before: Mon 01 Jan 2024 20:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208805
IP address blocks: 45.84.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:81:7c:fc:a4:19:7b:88:f2:29:94:82:47:9c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15e0c079ebbee9453adf40783340016497710e08
Validity
Not Before: Jan 1 20:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c68ce74f4182d95815d1b718d67e2650d731598e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:97:92:51:3d:7b:25:27:9e:42:0c:8d:d3:
b2:e8:80:1d:48:40:8f:b6:31:d8:e5:59:72:b2:37:
78:2a:58:f7:c8:e1:6e:b3:1a:b5:61:24:6a:92:98:
fc:4b:52:ca:11:fa:29:8b:15:26:b6:8d:ca:21:50:
c5:75:45:39:45:73:93:ca:81:28:29:70:d8:84:9b:
83:b2:fe:41:82:9a:78:26:cf:76:52:88:5a:ef:56:
55:10:b1:58:40:a6:79:9e:65:ce:87:ab:c2:5f:b6:
35:3b:a6:c8:e6:5d:31:f4:07:97:c7:d2:b4:83:3d:
a1:6e:96:5e:5f:af:d4:eb:b3:82:1a:3e:c5:04:8b:
93:02:4a:bc:fd:53:a8:6d:27:1a:16:42:08:02:94:
2c:c6:d4:ef:18:9f:65:4a:0f:02:b9:4b:b4:05:07:
4e:68:a0:14:a7:64:74:b7:c2:4e:8c:14:c5:2b:71:
32:dd:2e:aa:e1:60:c0:59:7b:8b:6f:ca:27:44:e9:
df:e2:5c:23:9f:bd:a0:7d:b3:b4:cf:21:10:29:25:
d1:aa:1c:64:09:9e:55:ab:b1:f4:dc:d9:98:54:db:
65:65:78:cc:50:9c:1d:8e:97:6b:83:a6:03:cd:fe:
15:4d:70:7a:59:e7:a8:50:a4:b7:90:cd:be:5b:ea:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8C:E7:4F:41:82:D9:58:15:D1:B7:18:D6:7E:26:50:D7:31:59:8E
X509v3 Authority Key Identifier:
keyid:15:E0:C0:79:EB:BE:E9:45:3A:DF:40:78:33:40:01:64:97:71:0E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/xoznT0GC2VgV0bcY1n4mUNcxWY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.164.0/22
Signature Algorithm: sha256WithRSAEncryption
28:9c:ad:11:da:94:c7:20:f6:28:d9:99:7b:02:fc:ae:51:73:
00:86:fc:bb:8b:7c:ac:f1:83:52:15:b0:5f:96:4f:9d:9d:55:
20:42:e3:6d:14:85:83:3d:08:67:0f:77:da:47:f4:e5:73:ff:
cf:06:50:91:84:7f:92:bf:71:d4:0a:c3:45:48:e7:79:d4:15:
51:ff:d0:dd:2a:f4:af:0a:e1:d5:5a:af:37:74:1b:ef:b1:96:
fd:25:91:a6:e4:26:a0:99:65:fa:f6:6c:73:62:58:24:fc:9c:
c7:ff:b6:dd:dd:7e:7c:c2:37:e9:ad:3e:1d:57:2c:b7:6e:00:
d6:f7:f6:31:30:81:df:22:16:1b:2d:ed:49:17:bb:52:c4:2f:
15:9b:50:f4:ac:d1:16:65:eb:49:50:cd:99:aa:cf:10:f4:a4:
6e:e3:f8:80:6d:ff:af:d9:89:bf:4b:8e:d0:1b:ec:6d:e2:e8:
18:34:45:3a:37:0b:91:ce:e6:4d:23:d6:1e:ed:d1:c0:05:89:
db:13:12:73:1b:f0:55:29:37:0d:f3:0d:d1:d6:37:19:9c:87:
17:36:dc:1d:02:e3:37:be:79:a2:5c:f1:b2:aa:00:d7:f2:16:
50:53:7f:cf:02:ee:4f:3f:57:b9:7c:86:39:7d:d5:5f:d4:fb:
a7:62:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:36:27 2024 by rpki-client on console-ams.rpki-client.org