Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/XVF0peaCr55nmB-4MiOAc-KEEx0.roa
File: XVF0peaCr55nmB-4MiOAc-KEEx0.roa (raw, json)
Hash identifier: GUGYC+8wxswIWbFv+dbYVCzbiLPC4vys869TxMIcax0=
Subject key identifier: 5D:51:74:A5:E6:82:AF:9E:67:98:1F:B8:32:23:80:73:E2:84:13:1D
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018CC9BBD18266AEED927DFCEBB411A7AAF8
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/XVF0peaCr55nmB-4MiOAc-KEEx0.roa
Signing time: Tue 02 Jan 2024 10:32:58 +0000
ROA not before: Tue 02 Jan 2024 10:32:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51660
IP address blocks: 84.1.44.0/24 maxlen: 24
145.236.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:d1:82:66:ae:ed:92:7d:fc:eb:b4:11:a7:aa:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 10:32:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d5174a5e682af9e67981fb832238073e284131d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:36:12:98:4e:86:0d:b7:c6:dd:e0:24:d2:
62:6a:28:5e:ff:18:c3:b0:78:77:b2:35:54:cf:de:
d5:cb:b2:8c:8a:d1:9b:42:c2:60:4b:2e:24:51:cb:
c2:d7:d1:b5:f7:92:1b:32:45:5d:74:a9:de:06:ca:
44:49:89:81:37:2f:a6:b3:e2:b2:63:ab:b7:fe:28:
4b:67:25:2a:c8:c8:73:61:a5:3d:3e:b3:2f:4e:47:
17:e6:7f:58:c4:88:a8:d9:c0:d5:5b:1d:b5:29:92:
11:98:17:4c:b1:fa:7c:73:52:05:94:e8:78:03:33:
c9:1e:ce:f2:07:8b:46:5a:b3:41:a9:dc:93:d4:b0:
bc:75:46:13:fa:99:d3:44:c3:fe:2c:98:06:bc:b2:
35:dd:20:53:25:40:a7:29:10:a5:90:40:4a:69:b9:
21:4e:f7:c1:2f:4a:36:fa:c1:6d:b8:94:8f:2d:58:
7f:41:ae:a5:13:ee:e7:c3:4f:22:bd:1c:1d:5d:7d:
35:14:1a:73:53:2b:30:38:f0:39:1a:94:58:8e:ae:
9a:90:63:2b:c3:ce:df:2b:30:e4:f6:c4:14:52:33:
97:13:01:32:2b:62:56:6f:3e:01:fc:cc:7a:19:7e:
ba:83:93:e9:49:36:50:0a:37:a9:d9:c3:3e:85:3d:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:51:74:A5:E6:82:AF:9E:67:98:1F:B8:32:23:80:73:E2:84:13:1D
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/XVF0peaCr55nmB-4MiOAc-KEEx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.44.0/24
145.236.80.0/24
Signature Algorithm: sha256WithRSAEncryption
24:cc:af:e3:2a:30:55:2b:61:55:12:ea:b8:ae:0c:3d:db:8c:
37:1a:97:59:60:f7:b7:a7:53:7a:1d:be:3d:dd:e4:55:2c:e8:
0a:d1:53:80:dd:c7:b8:a7:d5:c2:7f:31:62:37:07:eb:26:cc:
ea:76:4e:cd:30:02:fe:2b:b2:55:b1:9a:c1:ed:8b:aa:01:85:
10:1e:cb:4a:13:cc:20:f0:ca:42:fd:bd:a0:51:c8:84:40:5f:
ab:9d:66:90:85:30:6b:46:31:2d:2a:e2:0e:e2:db:eb:00:70:
61:0b:47:77:a1:bf:5c:62:e9:c7:ad:b2:4f:30:52:4d:59:5d:
d4:5f:15:cd:98:8e:71:d7:23:ae:54:5a:bf:01:d2:21:1e:9d:
c7:ea:70:14:bd:c2:bb:35:c5:1b:49:20:73:73:5f:fb:01:71:
2a:b0:c2:af:21:f4:6c:f3:8b:70:88:82:c9:21:25:50:c6:71:
73:4b:07:28:68:9c:b5:07:26:95:30:f2:11:cf:0f:d1:f8:e0:
e3:86:c1:9a:85:99:a7:e0:89:dd:2b:bb:f8:f4:40:8d:84:7e:
bb:69:cb:48:db:89:6c:7c:6a:b9:03:e4:d9:10:ca:b1:b3:4a:
2e:a0:5c:6a:10:b9:4f:03:65:4b:44:ab:ed:75:8f:f6:50:36:
d3:69:b0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:58:16 2024 by rpki-client on console-fra.rpki-client.org