Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/xMGRNL7kCoPm2UFO1V6CKEbir6U.roa
File: xMGRNL7kCoPm2UFO1V6CKEbir6U.roa (raw, json)
Hash identifier: gd+6KH5TVIQ6z6ZOxLFZXb9rRduApaylRUTOj9TDjC8=
Subject key identifier: C4:C1:91:34:BE:E4:0A:83:E6:D9:41:4E:D5:5E:82:28:46:E2:AF:A5
Certificate issuer: /CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Certificate serial: 018CC56E479F64C52586DF59AAEC5A5795F5
Authority key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/xMGRNL7kCoPm2UFO1V6CKEbir6U.roa
Signing time: Mon 01 Jan 2024 14:29:47 +0000
ROA not before: Mon 01 Jan 2024 14:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50698
IP address blocks: 159.253.232.0/21 maxlen: 22
185.116.76.0/22 maxlen: 23
109.202.64.0/19 maxlen: 20
2a06:4400::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:47:9f:64:c5:25:86:df:59:aa:ec:5a:57:95:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Validity
Not Before: Jan 1 14:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4c19134bee40a83e6d9414ed55e822846e2afa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:48:8c:02:c9:26:1d:b9:78:fc:5f:9c:82:ee:
03:d0:d3:35:38:91:b7:f8:48:36:41:1a:b4:af:ea:
b4:90:d9:67:b8:c0:27:67:07:a2:ac:d1:00:9e:ec:
a4:98:a1:1f:2c:11:16:e4:40:93:14:9f:86:38:47:
93:2d:10:83:b4:2f:ba:74:2b:76:1b:f9:44:81:63:
79:80:ea:7d:00:de:1d:9a:57:0d:b6:69:cf:ba:d8:
98:42:9f:aa:ed:f6:99:9f:66:e7:cd:eb:f6:08:43:
fe:6e:90:b8:9e:fa:a4:9e:1e:aa:35:a6:ad:f8:19:
1a:99:68:7e:1c:52:1a:e5:25:a3:4c:ea:b7:61:aa:
07:1b:d5:3d:5f:27:35:b6:80:23:10:d8:4e:ec:07:
21:ea:42:65:52:05:57:68:08:80:c5:2b:82:39:6f:
21:cc:de:83:e1:2f:d3:1f:ed:eb:02:61:04:2f:af:
79:d5:12:f9:23:36:7f:6b:4c:f9:de:5f:f1:90:66:
f7:ab:85:f8:83:b4:b5:82:c5:a3:87:fc:1e:2c:65:
cd:8b:c3:91:0e:d9:dd:b1:5f:8c:56:e7:f3:77:5d:
10:88:d7:92:29:de:22:6c:ac:03:33:cc:72:74:95:
13:3f:ad:3e:bf:e1:6f:39:91:c8:ce:a5:b0:69:10:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C1:91:34:BE:E4:0A:83:E6:D9:41:4E:D5:5E:82:28:46:E2:AF:A5
X509v3 Authority Key Identifier:
keyid:07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/xMGRNL7kCoPm2UFO1V6CKEbir6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.202.64.0/19
159.253.232.0/21
185.116.76.0/22
IPv6:
2a06:4400::/29
Signature Algorithm: sha256WithRSAEncryption
0c:e3:93:7d:3b:a9:1b:6b:5b:22:7e:6d:da:80:d5:1d:68:a4:
06:fd:99:6c:de:64:9e:45:99:b0:57:b6:36:2c:d3:48:f8:ca:
78:9e:60:ab:a5:55:32:52:83:d3:2d:dd:44:d1:76:7b:4c:ca:
42:8e:e7:40:47:77:b8:0f:49:8c:ac:ef:13:e1:de:d7:38:6e:
9d:09:0d:c3:92:27:f8:f2:c2:c4:dc:97:51:33:8c:ed:5e:a3:
28:42:53:df:29:c5:c8:2b:7a:ca:bf:94:d7:43:17:87:7d:4a:
7f:dc:b4:a7:2c:5b:df:c4:fd:b7:b6:e1:00:7b:e4:73:2c:03:
9b:02:9d:6d:cc:71:7c:02:4b:35:bc:a5:a5:a5:d9:a3:47:87:
d3:de:19:36:7d:3c:39:85:54:a1:bc:b3:a0:4e:c9:e2:b0:a4:
10:ee:55:4c:f3:31:ee:e1:d9:82:e5:78:4f:58:52:5d:33:db:
0d:4d:bb:60:1a:a7:64:77:bf:01:de:24:77:cf:3b:3e:92:73:
d2:42:9c:e2:b6:f8:26:83:3f:dd:bf:3a:b7:9c:7e:d9:73:2d:
f1:66:a9:e0:6f:d5:d5:00:e5:e8:83:39:72:f7:ec:b8:24:8d:
aa:18:d4:8c:df:64:58:6d:89:8f:39:6f:fe:a1:cc:57:f0:03:
c7:5e:83:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 10:55:40 2024 by rpki-client on console-ams.rpki-client.org