Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/XxFIyYk-JeXXPViz19Tpm0wUuF4.roa
File: XxFIyYk-JeXXPViz19Tpm0wUuF4.roa (raw, json)
Hash identifier: 809k4ckC3caJFxDta0EhWeg1EZ7M1GYCWteZe/zolGs=
Subject key identifier: 5F:11:48:C9:89:3E:25:E5:D7:3D:58:B3:D7:D4:E9:9B:4C:14:B8:5E
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 018CC94D4E9244028EA90DD32C1B99CD02AF
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/XxFIyYk-JeXXPViz19Tpm0wUuF4.roa
Signing time: Tue 02 Jan 2024 08:32:15 +0000
ROA not before: Tue 02 Jan 2024 08:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204019
IP address blocks: 194.1.253.0/24 maxlen: 24
185.107.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:4e:92:44:02:8e:a9:0d:d3:2c:1b:99:cd:02:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Jan 2 08:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f1148c9893e25e5d73d58b3d7d4e99b4c14b85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:d8:c5:ea:fa:e1:05:70:ad:87:ed:50:80:
10:46:45:ad:54:7b:90:d6:bd:1e:72:e1:30:02:a4:
34:04:19:49:f1:20:c0:ba:a3:c9:83:eb:83:83:13:
cd:c3:b8:d7:be:b7:9b:07:8b:7c:57:ee:78:ad:fb:
1c:fb:95:d9:15:b3:de:60:ed:7f:3f:32:5a:59:a7:
6e:09:23:bb:c9:61:1a:ef:4d:b5:d1:a3:f6:4b:b7:
1d:bb:af:83:75:43:52:5b:96:85:b7:57:41:21:5a:
4f:88:c7:d5:51:73:3e:74:3a:a8:e5:01:6c:7a:6e:
71:7f:e7:10:1b:e9:30:81:a7:04:85:6c:75:e3:10:
e8:a5:6c:4d:5e:9a:e9:26:6e:2d:f3:3e:27:3f:7b:
d0:d5:6a:a6:32:3b:8d:c5:42:ee:ee:4c:68:85:24:
4b:ef:ce:2c:e9:c4:ad:88:4c:25:82:e0:d6:e4:28:
e2:44:86:4f:80:64:c6:fd:f5:f1:9b:a3:29:a2:1e:
44:78:68:68:50:02:dd:a4:69:6f:11:c0:ef:d4:7b:
87:d5:1f:1c:2d:e7:8d:0a:84:24:5b:a7:e2:78:a1:
4f:ad:27:99:1c:2e:4c:f7:90:8d:5b:c7:5e:be:7f:
6b:7d:f5:cd:89:24:eb:65:6b:81:24:91:00:3c:7a:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:11:48:C9:89:3E:25:E5:D7:3D:58:B3:D7:D4:E9:9B:4C:14:B8:5E
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/XxFIyYk-JeXXPViz19Tpm0wUuF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.66.0/24
194.1.253.0/24
Signature Algorithm: sha256WithRSAEncryption
66:0e:86:39:36:c8:e2:18:b3:d6:e4:d2:5a:6b:73:32:9d:2e:
28:e7:6e:b9:01:e0:4e:f0:f9:64:d6:ef:a5:ff:fb:24:eb:b1:
a5:0f:52:68:b8:80:64:03:bc:7d:a8:91:36:58:69:72:21:2b:
e8:0d:56:07:e1:37:26:2f:dd:a3:67:64:d3:8f:08:54:f1:95:
4c:59:27:02:c7:5a:6f:d8:e9:fb:63:e6:92:e3:57:9f:d6:70:
c3:1b:03:e7:c4:60:cc:ce:fd:7f:80:54:6d:df:b9:cc:2d:73:
f6:a3:3b:79:99:2b:8f:a0:65:dd:2a:56:bd:8a:92:9b:73:3c:
80:94:da:19:0c:de:95:4e:2c:69:50:d5:7b:5c:ab:f8:48:26:
cf:a8:c8:d4:9f:0d:02:33:b7:ea:c3:b9:52:f1:2d:a7:8c:e1:
55:ca:48:b5:3b:65:ab:53:34:ac:ea:27:32:be:ba:09:13:c4:
51:d6:8c:c1:82:25:32:9c:f8:0f:29:98:7d:aa:2b:bc:2e:c5:
1a:b0:28:f3:1f:f3:85:ee:e8:c3:b0:ce:2a:b4:89:17:35:14:
6e:ad:b9:51:a9:bf:94:ff:6b:4c:a4:38:d0:df:90:d4:6b:c4:
2d:cf:17:0d:c7:a1:32:80:eb:6d:41:2d:6a:ab:f4:0b:64:d1:
85:e3:e1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:26:03 2024 by rpki-client on console-ams.rpki-client.org