Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/xPPX_HWiMgJuIFCBIk7PWl2V66U.roa
File: xPPX_HWiMgJuIFCBIk7PWl2V66U.roa (raw, json)
Hash identifier: Go3yOS0sUjC/iX2iAiLDnX93liPcNHV+lLlRFO0f6+M=
Subject key identifier: C4:F3:D7:FC:75:A2:32:02:6E:20:50:81:22:4E:CF:5A:5D:95:EB:A5
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: 018CCA292762104364A57048DB8DDE2253B7
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/xPPX_HWiMgJuIFCBIk7PWl2V66U.roa
Signing time: Tue 02 Jan 2024 12:32:23 +0000
ROA not before: Tue 02 Jan 2024 12:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399382
IP address blocks: 213.173.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 04:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:27:62:10:43:64:a5:70:48:db:8d:de:22:53:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Jan 2 12:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4f3d7fc75a232026e205081224ecf5a5d95eba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:89:08:6f:dc:3c:8f:8b:04:dd:89:fe:6e:c4:
54:1e:27:b8:5f:86:44:1c:ce:9a:69:51:e9:99:25:
d0:60:09:77:c2:75:c2:59:d9:78:55:d0:d9:99:86:
a3:3a:b5:94:70:75:a3:dd:57:ef:4b:22:5a:21:d2:
32:e9:49:32:01:28:5f:16:9e:20:f1:30:ff:8d:15:
e1:f7:66:58:04:69:74:8c:d0:a5:03:e7:82:8f:33:
43:64:af:7f:2c:4d:1e:b9:fe:f9:96:8c:5c:bc:fd:
81:da:84:52:dd:a9:e3:59:ed:01:7b:bb:14:28:5b:
04:c0:de:fe:88:14:19:3a:bd:c2:91:5f:30:f1:0b:
4e:5a:5c:5c:36:74:f5:44:be:b4:9d:e3:3b:49:b2:
59:b4:fd:74:c2:ec:79:c3:f2:71:06:93:9e:ef:8e:
22:72:46:41:07:6f:ce:69:18:e6:a7:e9:8f:d8:1b:
44:78:39:c6:57:71:16:3b:e2:1b:63:22:02:ce:62:
2c:a4:00:55:28:d4:88:cc:d2:f1:99:f8:62:59:88:
3a:f5:dd:a8:11:e4:9e:c7:8c:6c:8c:68:09:e3:09:
cb:81:ba:c3:58:b4:62:4d:95:ff:b9:3a:bd:ad:ed:
b4:96:1b:78:9d:2d:7f:6b:0e:5e:ae:01:67:55:4d:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F3:D7:FC:75:A2:32:02:6E:20:50:81:22:4E:CF:5A:5D:95:EB:A5
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/xPPX_HWiMgJuIFCBIk7PWl2V66U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.173.36.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:72:c4:3d:0c:85:9e:5f:99:57:03:a3:b3:38:40:98:27:f8:
8d:2f:f1:85:ad:18:9d:80:0d:7a:38:d7:83:f6:42:bc:74:a2:
58:1d:69:c3:86:09:72:73:35:8b:d4:e2:c4:dd:6f:c2:6e:37:
e7:9a:ed:da:4b:f6:9d:4a:d7:46:d9:84:ea:ed:44:4c:0b:ad:
c0:e6:4f:22:2a:34:82:6d:1a:44:0b:2c:ca:27:8b:d7:80:c9:
3e:08:74:e0:54:3e:f1:36:e8:df:a3:46:8d:f4:28:dc:27:e1:
b8:06:40:9b:f7:70:57:79:73:a6:58:de:64:67:dc:67:5a:d3:
04:4d:ac:57:a0:3f:c6:28:9b:0a:25:24:6d:f2:42:49:f5:ea:
d3:39:c6:c0:bc:af:0a:da:66:62:3e:46:ff:6e:34:6d:9b:4b:
5a:ec:6e:69:80:58:3e:d9:c9:37:4b:17:86:72:64:66:87:ec:
09:4b:85:71:3a:60:6f:bc:dd:c3:0f:9b:3e:82:85:3c:7d:d4:
90:38:1e:8a:92:fa:d1:3b:e4:da:9b:12:75:f2:e1:4c:60:c9:
89:35:f9:e8:21:e9:73:29:54:92:4b:f0:52:22:a1:30:fb:c5:
9b:14:3f:0a:d0:7d:3a:ff:f6:24:c4:38:e8:31:f0:e8:d1:db:
84:27:51:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:18:42 2024 by rpki-client on console-fra.rpki-client.org