Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/xWZU2EAQiMGfadgtdrDov6uewR0.roa
File: xWZU2EAQiMGfadgtdrDov6uewR0.roa (raw, json)
Hash identifier: iMhPq3o3DPvUeqH/qIy+tnxnWYJskfRDdmKMssZ1vyU=
Subject key identifier: C5:66:54:D8:40:10:88:C1:9F:69:D8:2D:76:B0:E8:BF:AB:9E:C1:1D
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 018E14DC88FC782219DCE7DB1EB510FCDF7F
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/xWZU2EAQiMGfadgtdrDov6uewR0.roa
Signing time: Wed 06 Mar 2024 17:43:01 +0000
ROA not before: Wed 06 Mar 2024 17:43:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26548
IP address blocks: 109.238.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:dc:88:fc:78:22:19:dc:e7:db:1e:b5:10:fc:df:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Mar 6 17:43:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c56654d8401088c19f69d82d76b0e8bfab9ec11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:ee:a8:d1:dd:1f:e1:33:3c:4f:03:62:c0:
a1:dc:d1:86:f1:eb:b7:d2:50:40:25:82:bc:e6:49:
46:6a:bf:28:ea:e8:13:66:79:72:33:74:e5:4c:d8:
91:1f:1a:a2:49:5c:51:f9:11:9c:ba:04:a3:9f:ff:
f4:50:c0:e2:ef:43:b2:69:86:a4:65:f3:a4:c9:17:
6f:10:40:a4:12:46:9f:43:62:ca:f9:5c:3b:29:f6:
ad:b2:29:d5:e9:87:61:2a:6e:e2:be:85:dd:57:23:
be:4f:c4:d3:3d:a8:f7:14:03:2c:72:62:93:40:e5:
fb:1c:ff:b3:8d:65:17:0e:d0:fa:df:69:33:21:ac:
93:94:ae:7d:7c:6d:83:cb:31:fe:a6:35:78:67:89:
cd:6a:2b:df:e2:13:b6:77:85:2f:9a:ca:bc:b3:6a:
c9:87:db:19:5a:4a:26:c8:1f:28:c4:45:f7:41:13:
e7:11:b7:3f:47:2e:98:28:6b:f7:99:67:11:30:53:
ce:9d:75:78:3e:b3:8e:b0:10:e0:cd:d0:38:0e:b5:
f1:fc:8d:df:88:fd:7f:ed:94:b7:05:6e:5c:7a:f8:
2e:53:b3:1d:12:fa:a8:ec:c9:e5:8a:a1:1f:c5:8f:
a5:8e:63:6b:9c:ca:72:3f:2e:f1:1f:4e:fb:e8:5d:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:66:54:D8:40:10:88:C1:9F:69:D8:2D:76:B0:E8:BF:AB:9E:C1:1D
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/xWZU2EAQiMGfadgtdrDov6uewR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.238.168.0/21
Signature Algorithm: sha256WithRSAEncryption
06:fc:4e:21:e0:be:3f:a6:0b:58:c1:85:48:67:91:72:3c:11:
fa:f6:f9:3f:34:27:fe:2c:7e:cb:da:54:19:7e:b1:cf:a2:a9:
4d:8a:9f:44:ef:36:b9:b2:d0:49:f4:18:59:64:66:68:66:a0:
80:54:9f:2f:87:61:e9:f7:94:ef:b6:9e:31:c2:ef:0a:8f:e0:
88:40:5b:8c:12:09:6e:14:b5:2a:45:57:98:45:5d:7c:33:95:
3a:c6:5a:40:c3:06:66:e5:b2:c7:94:10:fc:fa:0d:32:d6:d3:
ae:94:5b:51:5b:fb:f3:21:ed:d6:e7:a2:6d:22:d2:ef:c0:f0:
c7:99:7c:81:de:21:fa:e2:cb:46:f4:02:5c:93:bf:2e:6e:95:
71:03:80:ce:5f:03:f0:bb:44:b9:ed:4c:9b:65:96:f3:a0:2b:
a9:bf:f7:5c:b5:f6:5a:02:b6:80:28:11:cb:b2:b0:63:21:82:
4d:f8:de:35:d3:95:8f:ec:24:6e:2b:a3:e0:8f:c9:23:0e:e3:
8d:0e:5f:3d:53:41:15:cd:c4:23:a4:48:08:f9:a1:6a:ed:cb:
05:3e:52:8e:07:9c:b0:9c:7a:d6:c2:14:17:67:69:ce:c0:bf:
25:89:43:81:14:91:3a:e4:3c:00:f4:d3:ad:02:28:6c:ed:03:
10:1e:fd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 06:04:58 2024 by rpki-client on console-ams.rpki-client.org