Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/XyOfzRdvIcr0UVVkm93i-t4Nhoc.roa
File: XyOfzRdvIcr0UVVkm93i-t4Nhoc.roa (raw, json)
Hash identifier: 5K6X5q1sOp6nLFtsSuh+7mnv75gBGNvJ/cbVgWxT9Kg=
Subject key identifier: 5F:23:9F:CD:17:6F:21:CA:F4:51:55:64:9B:DD:E2:FA:DE:0D:86:87
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 018CC7946A69B1F2FDD1B5753B7FC53BFA2E
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/XyOfzRdvIcr0UVVkm93i-t4Nhoc.roa
Signing time: Tue 02 Jan 2024 00:30:41 +0000
ROA not before: Tue 02 Jan 2024 00:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42926
IP address blocks: 85.153.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:6a:69:b1:f2:fd:d1:b5:75:3b:7f:c5:3b:fa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jan 2 00:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f239fcd176f21caf45155649bdde2fade0d8687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ee:36:5c:e7:01:4a:31:04:63:05:24:e6:ad:
b5:61:1a:25:16:5d:80:bb:8c:fe:da:19:f6:46:75:
3c:23:f7:3b:73:56:8b:80:0b:99:0f:72:b3:d4:be:
22:d5:78:74:8e:e5:1e:c8:7e:02:5e:06:9b:07:a0:
16:57:99:45:b9:c6:a4:19:de:1c:ae:18:ff:de:7d:
cb:29:d6:ba:99:04:69:ea:88:4f:2c:a9:fb:72:a8:
7b:5c:81:d3:40:f6:ba:1b:05:18:ce:f4:97:17:ea:
8a:31:31:c4:f1:78:46:73:d6:c8:57:50:0f:bc:39:
37:1a:fa:c8:79:93:b0:3d:62:74:39:d6:53:8f:93:
d4:ca:52:fd:6f:9b:67:d4:96:f3:59:fd:20:1a:b3:
ae:b6:c2:66:e9:b5:8f:d2:bf:21:ec:07:33:ad:81:
b0:f4:4e:0a:84:66:2f:8d:cc:26:af:63:ca:53:94:
26:bc:e2:ec:ea:e2:fa:76:e8:b5:9e:75:1b:45:82:
14:73:21:6b:53:a8:b6:95:5f:44:c5:57:04:ed:35:
00:87:3e:e3:f5:ce:48:cc:a2:a8:ba:e2:6e:26:13:
d3:4a:1b:b3:51:68:9f:2b:d9:ec:73:1d:7e:06:a0:
62:23:e6:df:46:dc:e1:b9:15:a3:7e:f9:2f:7d:06:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:23:9F:CD:17:6F:21:CA:F4:51:55:64:9B:DD:E2:FA:DE:0D:86:87
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/XyOfzRdvIcr0UVVkm93i-t4Nhoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.64.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e9:bb:b5:3f:83:24:9b:4b:bc:b2:a3:f0:cd:e1:30:3e:2d:
d0:04:fb:40:ed:68:a8:ae:ad:d0:9b:45:eb:6c:ea:a1:bd:a8:
b7:38:00:48:fb:d2:fd:49:4d:be:c6:ca:c2:af:48:fc:52:e3:
4b:78:b6:e0:eb:7a:32:4e:24:40:f2:79:4c:fe:ea:44:ed:b3:
e4:c5:52:38:53:28:2a:dc:c0:c4:aa:9c:1d:27:6d:43:64:1e:
8a:0c:79:6e:07:dc:f9:31:25:2f:43:8d:28:92:09:3a:58:13:
16:27:1d:9f:6f:b8:2f:9d:42:b6:61:26:74:bf:d7:05:00:be:
1f:b1:6f:71:a6:4c:be:a8:ee:56:0a:c3:a9:3c:9f:43:d3:7a:
bc:5b:3a:4f:e8:91:94:c6:db:f3:ad:45:9a:4c:5c:99:0c:42:
5b:2e:ec:1d:bc:96:d7:2c:55:31:17:c9:1f:17:72:26:0e:06:
1e:22:4f:ea:72:75:18:2c:df:50:be:65:d9:a6:8e:f1:4d:1b:
e5:ce:43:84:34:f1:2f:aa:0d:99:20:13:3d:fd:cc:63:3a:2d:
7f:77:a7:fc:c2:07:d1:7c:34:60:84:ad:e4:bf:e4:cb:80:92:
69:ab:29:38:96:8b:23:42:b6:42:49:c2:55:25:69:5f:9f:17:
9c:9d:d5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:53:57 2024 by rpki-client on console-ams.rpki-client.org