Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/xuzrMo_agJx_-mkfGh9wk4WWqc4.roa
File: xuzrMo_agJx_-mkfGh9wk4WWqc4.roa (raw, json)
Hash identifier: 4lhIHrmPfakgDmOmqy3ZFfcNta+xxnDtxZDYX3rN55U=
Subject key identifier: C6:EC:EB:32:8F:DA:80:9C:7F:FA:69:1F:1A:1F:70:93:85:96:A9:CE
Certificate issuer: /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial: 0192488240B1113859DD4B20A6666D193936
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/xuzrMo_agJx_-mkfGh9wk4WWqc4.roa
Signing time: Tue 01 Oct 2024 14:35:48 +0000
ROA not before: Tue 01 Oct 2024 14:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 185.188.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:48:82:40:b1:11:38:59:dd:4b:20:a6:66:6d:19:39:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Validity
Not Before: Oct 1 14:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6eceb328fda809c7ffa691f1a1f70938596a9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:2a:42:c1:3e:fa:e1:f4:15:3d:1e:73:f9:
e7:b0:f8:ec:80:7c:72:c2:ad:e1:6c:cf:a6:08:5f:
80:96:34:6e:e7:d7:64:46:9d:ef:41:19:6f:84:66:
35:1e:c6:ec:a6:bf:aa:fb:c9:07:89:2f:7a:52:22:
0e:bf:0e:62:e5:7d:a4:92:bd:23:3d:de:e8:ac:3d:
e1:d4:0e:85:44:0d:9a:dd:47:b8:48:62:90:ac:21:
92:e5:79:3a:4c:2e:5a:07:fb:1b:1c:99:cb:96:e0:
de:d2:f6:08:51:69:7f:b4:99:7e:91:50:44:43:2a:
0c:85:75:7b:2c:f2:8e:22:34:2a:bf:a3:25:8d:a5:
af:f3:4e:d3:8b:99:db:8b:cb:f7:21:dd:43:24:35:
c4:24:aa:7e:4a:fc:5a:d4:14:0a:2a:93:09:18:5d:
00:b2:89:2a:a1:0a:3f:47:6b:bb:ba:86:ac:78:ac:
0b:4e:c0:b6:b1:8a:3b:36:31:13:e0:a0:2a:e0:50:
7b:a0:51:80:7d:1f:22:79:d5:0f:c3:2e:5b:35:0b:
cb:cb:e4:b1:f4:5d:b6:53:c3:01:fd:7e:78:b9:75:
19:0f:4f:c1:09:d2:10:1b:77:f4:11:f9:cb:bc:62:
69:08:8a:96:e9:a6:97:12:fe:b2:c8:22:7f:15:64:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EC:EB:32:8F:DA:80:9C:7F:FA:69:1F:1A:1F:70:93:85:96:A9:CE
X509v3 Authority Key Identifier:
keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/xuzrMo_agJx_-mkfGh9wk4WWqc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.252.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a8:40:61:64:e3:16:41:d2:71:52:70:c7:63:74:cc:45:99:
5b:90:52:57:df:8c:d1:e7:a0:79:d7:46:ae:42:04:96:f4:fd:
03:d3:0e:20:1a:9e:ed:28:6c:a3:a5:3f:fc:8f:f4:c8:a2:83:
ff:8b:79:8d:40:25:9a:98:2f:38:7f:04:bc:6c:94:2f:4d:a7:
59:cb:e0:a2:70:48:df:d3:20:58:ee:f0:88:4c:73:8d:36:09:
6f:51:29:17:85:99:e7:37:9d:b5:d7:e4:6a:6f:29:c3:c2:d8:
ec:07:aa:5c:cf:d1:e7:6c:49:fb:5d:42:64:49:76:cc:c1:ec:
e5:48:f3:fa:f3:ef:92:e7:c2:e3:7f:b0:b4:99:ae:e9:28:37:
a0:27:d5:45:67:e1:19:29:bd:f5:ac:46:95:53:1a:0a:c5:d2:
4d:4a:23:42:f0:e6:46:06:10:8d:0c:cd:fe:94:11:86:c6:f8:
f6:1e:82:54:fd:fe:66:72:e2:0b:83:bb:62:8a:e3:87:15:85:
40:53:ee:ec:56:57:69:63:dc:33:69:19:de:1b:98:47:d8:7a:
1c:3a:38:33:89:0f:34:77:3f:1f:b5:09:58:2b:ba:c1:9c:95:
77:d8:2d:89:38:a6:ac:ba:d4:20:7e:fc:cd:69:21:5f:14:34:
75:80:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:18:22 2024 by rpki-client on console-ams.rpki-client.org