Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/XcNDzJE6GDTWP9D5RRSUqOuk5BU.roa
File: XcNDzJE6GDTWP9D5RRSUqOuk5BU.roa (raw, json)
Hash identifier: hmtJcLavzMkkSlzlmAzaFN/PcFduKxinZafZmTHVAZQ=
Subject key identifier: 5D:C3:43:CC:91:3A:18:34:D6:3F:D0:F9:45:14:94:A8:EB:A4:E4:15
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 018CC26D0151938236BD3D40591EDCE856A0
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/XcNDzJE6GDTWP9D5RRSUqOuk5BU.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57495
IP address blocks: 91.231.0.0/24 maxlen: 24
85.158.220.0/24 maxlen: 24
85.158.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:01:51:93:82:36:bd:3d:40:59:1e:dc:e8:56:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dc343cc913a1834d63fd0f9451494a8eba4e415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:76:08:c8:76:42:cf:71:f9:4e:4a:52:3c:
19:9a:7c:74:f3:09:ea:82:6c:7f:c4:dc:b2:3e:ae:
c4:05:2b:ae:f6:e1:3b:f1:0c:45:79:fe:4e:be:cd:
1a:8c:4f:f7:4e:11:51:46:02:07:d2:b6:eb:f0:59:
76:6d:09:da:2b:e2:92:46:91:be:9b:26:56:5b:85:
b3:ef:f0:92:99:e5:17:7f:cd:08:d2:5e:1a:d7:41:
1f:3f:de:9f:6a:ed:51:19:f8:d2:40:0c:e2:9c:7c:
ec:9a:a0:cc:49:ab:40:fd:c5:2c:00:58:4b:2d:f8:
f6:33:8b:18:34:8c:aa:3d:8e:1b:8c:98:cd:f2:17:
3a:c7:3a:b7:48:4f:dd:d0:6d:c2:7a:13:22:71:4a:
d0:42:af:dc:fb:0f:68:f7:22:b4:7c:77:c2:b7:61:
62:b3:d4:ed:60:65:e7:dd:33:88:c7:74:87:4c:9e:
e1:f6:35:a9:15:4a:bd:b8:a5:c9:c4:eb:be:47:e4:
c7:da:74:c4:eb:35:64:bd:d6:02:d5:56:09:8b:1e:
ae:9c:7c:c5:92:b2:0a:4d:dc:d0:15:5d:15:72:16:
dd:26:d8:34:9e:b2:ce:4f:72:f0:e9:27:ee:35:e6:
dd:4c:26:bb:1a:52:99:d6:7c:8b:5d:5a:7e:70:11:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C3:43:CC:91:3A:18:34:D6:3F:D0:F9:45:14:94:A8:EB:A4:E4:15
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/XcNDzJE6GDTWP9D5RRSUqOuk5BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.220.0/23
91.231.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e2:13:cc:79:31:1e:33:0e:31:8b:42:de:e9:93:f4:ae:00:
9d:bf:43:01:80:0d:70:a9:16:2b:a4:5a:df:f8:0a:e3:50:0a:
1c:6b:33:9b:13:a3:46:61:d1:c9:04:5a:1d:ad:70:11:8f:81:
af:5e:25:70:76:0c:79:2c:8d:a1:30:30:6b:c2:bf:ca:21:5c:
2f:be:13:0e:ed:39:20:bc:c9:b6:86:be:a4:73:c3:fc:36:38:
e2:4a:be:ba:c9:62:c0:4d:6a:a0:17:1d:e9:53:84:b1:67:08:
e1:a2:a8:e8:b3:17:03:a5:d0:c4:db:7b:2f:f9:20:78:cf:ff:
19:55:b0:93:e6:ca:7b:37:d1:dd:70:b9:5b:a2:fe:f0:2b:83:
56:79:8c:99:92:94:90:c7:f6:16:c8:1b:c3:3b:71:8d:5c:12:
5b:f6:87:d4:a0:1e:90:14:e7:6d:77:e6:70:ff:fb:23:55:22:
a5:ce:a1:1b:6b:6c:ed:3b:39:1d:61:c3:64:43:53:26:5a:e1:
c9:05:ee:cb:3e:7a:67:79:8d:53:7b:71:ad:06:65:24:6f:bb:
0e:9a:89:3c:3b:bf:5d:c8:d2:2c:83:71:bf:56:44:8d:59:24:
ff:d5:e9:6e:b2:07:43:01:a4:19:20:f0:cc:b6:af:1a:8c:eb:
77:f3:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:34:26 2024 by rpki-client on console-ams.rpki-client.org