Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/XKwTmg-rHTW399wjUwMZA1hhcpI.roa
File: XKwTmg-rHTW399wjUwMZA1hhcpI.roa (raw, json)
Hash identifier: ERKSnhtg3F62FGfXplzQ29AONmfm0cAos7VYC3Lc1LU=
Subject key identifier: 5C:AC:13:9A:0F:AB:1D:35:B7:F7:DC:23:53:03:19:03:58:61:72:92
Certificate issuer: /CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Certificate serial: 018CC80124E40B9A8AD0B3BD9E99DCB6D0EC
Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/XKwTmg-rHTW399wjUwMZA1hhcpI.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 185.46.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:24:e4:0b:9a:8a:d0:b3:bd:9e:99:dc:b6:d0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cac139a0fab1d35b7f7dc235303190358617292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:e3:78:45:5c:02:97:ff:7c:29:83:90:cb:
8c:63:87:87:7e:e0:b2:45:e3:2f:a7:7c:68:75:77:
bf:2a:e7:90:b1:2f:c4:f3:a5:f6:19:18:98:1e:27:
11:fc:05:9e:e9:5a:36:31:f4:b8:2d:60:06:89:2a:
1c:ee:e5:43:cd:37:88:4a:fa:2b:85:d4:d7:34:82:
6b:62:43:5e:c8:e1:9a:1d:74:8e:64:53:05:bd:f6:
91:4e:51:40:4e:75:72:f9:ac:6a:ee:e1:eb:99:be:
03:a3:58:0a:04:b8:1e:4e:18:9f:de:e0:55:80:68:
75:26:24:e7:39:ce:47:f4:c2:cf:f0:91:1c:1e:5a:
80:cf:09:1c:ac:43:b0:d9:9f:7e:37:1d:e5:5c:51:
1a:2f:9c:cc:6a:77:22:98:90:a4:26:0c:f7:17:2f:
50:1e:9f:ff:32:a0:3e:66:ab:02:6a:c1:68:0d:85:
90:6d:bc:18:44:da:59:ac:c7:78:95:55:0e:91:27:
1b:41:da:fe:15:05:1c:8b:e5:90:0a:67:e0:34:fd:
a8:b1:e0:bb:8f:ec:e7:8a:b0:69:ee:9d:b8:87:d9:
f1:85:91:c0:40:c6:e8:36:f8:21:cf:33:7a:a3:2b:
22:94:ec:fb:4e:e5:3a:c9:ce:75:c6:04:b6:aa:e2:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AC:13:9A:0F:AB:1D:35:B7:F7:DC:23:53:03:19:03:58:61:72:92
X509v3 Authority Key Identifier:
keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/XKwTmg-rHTW399wjUwMZA1hhcpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.232.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ae:ee:34:bd:a5:17:da:4d:5c:da:a1:4a:97:6a:1a:43:0e:
9a:cf:68:44:b4:84:85:79:f1:69:c3:2d:ab:ab:41:80:95:83:
44:a8:6f:72:fa:10:b9:fc:34:73:33:63:5c:a5:1a:e2:d4:82:
f4:41:34:53:53:1e:61:c0:92:9e:92:ac:f5:7d:81:f6:84:0d:
24:a1:ca:60:82:38:54:78:ea:0b:ba:49:ba:ac:96:55:ac:b2:
15:b2:32:36:92:1b:43:58:53:2c:b3:77:bb:bc:a8:41:10:2c:
2a:ac:eb:09:37:43:11:94:f2:db:c2:fc:eb:29:3e:c9:4b:50:
1c:24:ac:dd:4d:ca:59:ce:c0:80:7c:7e:dd:0e:e6:dd:8d:f0:
f4:e4:d5:7b:90:f0:b7:c6:25:e6:c4:2e:de:2c:84:a6:78:6d:
73:3f:70:76:10:18:3f:cd:e8:dd:1e:f7:69:dc:e4:06:11:b6:
f1:d4:39:c6:fe:b1:9f:52:11:a8:db:b1:32:7a:cd:fa:eb:d6:
aa:d2:1a:41:63:7e:e7:ff:83:44:5f:5d:35:3a:b5:37:3d:b1:
ea:5a:4e:c0:ce:36:60:39:a0:33:7f:1a:76:88:82:d2:2e:eb:
7f:2a:fd:0e:b3:de:3a:df:85:45:45:e2:6d:b5:bb:13:b1:ac:
bd:cb:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:17:17 2024 by rpki-client on console-ams.rpki-client.org