Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/XloO2STes9tUAgfZi6JvrRFV5wo.roa
File: XloO2STes9tUAgfZi6JvrRFV5wo.roa (raw, json)
Hash identifier: +Q4BzHOt65FP8jT6hs/ygJvbjniCOye1AOslTJ+0V1o=
Subject key identifier: 5E:5A:0E:D9:24:DE:B3:DB:54:02:07:D9:8B:A2:6F:AD:11:55:E7:0A
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 018CC8DEC53F2151156CEE2EF22A3F661744
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/XloO2STes9tUAgfZi6JvrRFV5wo.roa
Signing time: Tue 02 Jan 2024 06:31:31 +0000
ROA not before: Tue 02 Jan 2024 06:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43824
IP address blocks: 185.217.85.0/24 maxlen: 24
185.217.84.0/24 maxlen: 24
185.217.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:c5:3f:21:51:15:6c:ee:2e:f2:2a:3f:66:17:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Jan 2 06:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e5a0ed924deb3db540207d98ba26fad1155e70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:93:da:91:84:30:12:1e:20:02:0a:21:81:
88:bc:e4:8c:a1:6b:d7:6b:ad:0c:db:49:90:b5:8b:
28:cf:ac:5c:ce:42:6e:7b:38:63:da:a2:bb:6a:d0:
54:73:c8:47:7b:f0:16:36:19:ce:7c:3e:0a:65:b1:
70:39:c6:94:46:45:d3:92:c2:15:d6:c8:bd:2f:bd:
0e:c9:85:5e:3c:6c:8f:8c:ee:f6:2d:b3:74:0e:bb:
0d:3c:3e:f5:3a:ea:4a:83:01:89:4f:50:27:55:1e:
75:29:ac:4a:d3:e5:0b:c7:49:f7:18:46:a4:3e:b0:
04:c6:d6:56:39:8a:a1:3a:3e:22:3c:b3:8e:c6:ca:
c2:27:b1:6e:22:53:1a:e4:62:cf:7d:ce:dc:40:d0:
44:d6:00:b3:43:5c:d8:32:05:0b:db:c0:1b:22:7c:
c2:9d:bb:d8:6f:97:74:c5:88:e1:ea:8d:66:93:22:
e4:78:f3:3f:c1:82:a2:97:fa:b5:d2:11:9a:03:83:
d5:fe:ad:b8:1b:a3:ae:cd:95:c8:4f:4e:be:75:37:
7e:0a:8d:b8:b7:f5:bb:b7:58:60:5d:a3:c7:50:aa:
23:b0:16:8a:42:af:53:ba:d3:82:4b:0c:a9:74:0a:
31:b1:07:4b:0b:ac:68:a4:7a:d9:57:e8:80:bc:85:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5A:0E:D9:24:DE:B3:DB:54:02:07:D9:8B:A2:6F:AD:11:55:E7:0A
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/XloO2STes9tUAgfZi6JvrRFV5wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.84.0/23
185.217.87.0/24
Signature Algorithm: sha256WithRSAEncryption
80:67:90:de:c5:af:fd:a7:49:d5:70:bc:06:c6:6a:2a:aa:ba:
cd:c8:8d:2b:d8:7e:bc:96:1e:7e:7a:18:dc:d5:ef:24:65:9d:
af:dd:6e:db:f3:cc:0f:fd:19:2d:cb:4e:81:b7:e4:00:9a:b4:
6f:1e:90:74:ec:10:fc:8d:67:5d:8a:c4:50:4f:1e:ab:44:f7:
cd:68:b2:e3:68:10:0a:85:54:2b:44:59:3e:ee:75:cd:e1:18:
16:a6:96:b8:26:2a:cf:b3:da:cf:fd:ff:27:e6:b4:df:77:47:
08:41:8e:b2:5f:1d:22:1a:ab:84:86:49:8d:07:c1:1e:e2:95:
a1:c3:93:fa:97:81:ca:9d:6a:ba:98:bb:17:f9:13:73:0f:82:
4d:ce:42:a6:86:09:c8:1e:da:fe:42:1d:11:ac:95:6f:29:9d:
89:53:f7:2f:53:d2:c7:a3:be:fc:3f:ee:d6:88:3a:8f:db:8f:
c1:6a:1e:87:1c:f8:3b:3c:c8:c8:d8:db:b6:f8:36:02:b9:b5:
06:ac:fb:c0:a5:d4:06:dd:94:b7:aa:50:ef:ed:67:0f:cd:14:
49:84:81:59:1b:ee:8b:d5:b7:a8:31:c5:5f:ca:7b:6a:f3:3d:
d0:89:8f:7d:d0:dd:36:fd:7d:73:32:3f:db:57:46:d4:a0:99:
69:f2:49:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:30:06 2024 by rpki-client on console-ams.rpki-client.org