Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/x1uAxembrKCX37S3V5cqeBayjIA.roa
File: x1uAxembrKCX37S3V5cqeBayjIA.roa (raw, json)
Hash identifier: Ce4pd3jWlTiJVQFTqQbYqJAaUjfXjICVCIcXCWUZB7g=
Subject key identifier: C7:5B:80:C5:E9:9B:AC:A0:97:DF:B4:B7:57:97:2A:78:16:B2:8C:80
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 018CC3494D633E5D846A1AB0A815D9EFB754
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/x1uAxembrKCX37S3V5cqeBayjIA.roa
Signing time: Mon 01 Jan 2024 04:30:10 +0000
ROA not before: Mon 01 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200548
IP address blocks: 194.147.174.0/24 maxlen: 24
194.147.174.0/23 maxlen: 23
194.147.175.0/24 maxlen: 24
194.147.239.0/24 maxlen: 24
194.147.238.0/24 maxlen: 24
194.147.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4d:63:3e:5d:84:6a:1a:b0:a8:15:d9:ef:b7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: Jan 1 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c75b80c5e99baca097dfb4b757972a7816b28c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:57:02:54:33:ba:20:97:1c:37:e8:3b:92:
db:36:9c:8d:60:96:74:68:ff:3e:bd:37:6d:12:61:
57:b3:7a:0e:46:06:83:8b:05:27:3c:fa:a3:bb:9a:
ea:49:b8:d5:bd:f4:c7:0c:01:9e:a5:e6:bc:c7:bb:
d5:40:5b:dc:5b:f8:02:2e:41:e3:83:7c:68:56:20:
e4:22:32:0d:31:08:2d:0a:89:a3:7f:0d:02:c5:ba:
ed:9f:2e:4d:e4:14:8a:13:dc:cd:8f:00:f0:ca:a0:
7a:e7:10:5b:09:43:79:c3:dc:16:f5:72:12:cc:99:
eb:7e:10:5c:95:ef:96:94:19:6d:59:0f:07:8b:46:
8f:c2:e4:19:76:b8:2e:f2:5e:e6:0e:f6:7a:a7:10:
01:1f:f2:34:d4:66:91:07:e3:44:19:19:0e:32:af:
a0:ae:d9:12:38:9d:9b:72:d7:a9:2a:d5:01:4d:1b:
bd:a9:b2:3d:e5:ab:81:13:8a:f7:5a:53:c5:65:0c:
66:09:9e:99:8b:52:6b:82:29:7c:98:d2:8b:c9:03:
65:33:d4:f8:6c:6e:d1:e7:3d:5d:30:a5:6c:3b:80:
c4:bd:c5:0a:78:60:b9:3a:7c:5e:6b:d0:7c:86:9f:
cd:05:de:d1:b3:c2:41:6f:e0:7b:74:d5:53:ee:15:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5B:80:C5:E9:9B:AC:A0:97:DF:B4:B7:57:97:2A:78:16:B2:8C:80
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/x1uAxembrKCX37S3V5cqeBayjIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.174.0/23
194.147.238.0/23
Signature Algorithm: sha256WithRSAEncryption
88:c2:52:9f:d2:7e:3d:2c:9f:bb:b6:63:a2:b9:fa:4b:92:01:
5a:d8:92:92:ab:b5:cc:ce:51:6c:a9:9a:4a:3e:71:89:24:27:
bc:7e:cc:54:42:37:1c:96:5a:2e:f3:54:32:ff:9a:1e:4d:ff:
f5:2e:49:cd:c2:f1:f6:1f:f5:8e:08:64:0a:13:cf:e3:3e:63:
57:63:3c:ab:1c:b7:0a:84:6d:df:bc:cb:7f:e8:c6:3f:96:71:
09:8b:57:99:f3:31:29:91:39:24:7b:06:95:b6:20:b0:a8:3a:
16:38:18:64:e1:bc:6d:02:f8:15:6a:0e:b7:6f:d0:ff:49:09:
5b:47:ac:0b:11:63:73:80:a8:15:17:5b:4d:60:56:a7:b8:63:
4b:e7:ff:bb:ee:fd:9f:ee:fc:21:6d:78:48:3e:38:60:32:93:
01:ec:dd:7c:50:90:b4:c8:83:fa:56:f1:55:54:db:e2:0e:e9:
40:27:86:2a:b0:38:2d:76:4e:11:0b:86:20:1d:51:67:c8:1d:
15:e7:9b:f4:06:bc:51:f3:8c:af:fd:4b:b4:e6:ac:36:aa:8b:
fe:92:c4:b1:31:8a:d2:eb:e4:57:ac:33:49:89:52:0b:5c:66:
c1:7d:bf:ed:30:86:0f:24:92:0b:d8:4c:81:d7:d2:ce:5b:b1:
41:2e:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 17:02:55 2024 by rpki-client on console-fra.rpki-client.org