Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/XBCxfjxKR5rvZqj3ChdpOo0q4rw.roa
File: XBCxfjxKR5rvZqj3ChdpOo0q4rw.roa (raw, json)
Hash identifier: B41Jwr+a7Sg+gen6fe5DRDpbYEq3T+WrCzO/lfN0naw=
Subject key identifier: 5C:10:B1:7E:3C:4A:47:9A:EF:66:A8:F7:0A:17:69:3A:8D:2A:E2:BC
Certificate issuer: /CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Certificate serial: 018CC9BB0CD43527E183D594C9F5F46616F1
Authority key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/XBCxfjxKR5rvZqj3ChdpOo0q4rw.roa
Signing time: Tue 02 Jan 2024 10:32:07 +0000
ROA not before: Tue 02 Jan 2024 10:32:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207874
IP address blocks: 194.31.12.0/24 maxlen: 24
194.31.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:0c:d4:35:27:e1:83:d5:94:c9:f5:f4:66:16:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Validity
Not Before: Jan 2 10:32:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c10b17e3c4a479aef66a8f70a17693a8d2ae2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:82:b2:d5:21:f9:90:ff:81:37:3f:5f:cd:
89:8c:04:11:0c:14:04:12:8e:92:be:1f:db:0a:51:
06:33:a1:27:f7:6f:84:3f:85:9a:ba:a1:1d:bb:e2:
29:3b:cf:b3:86:82:88:5a:9c:89:2c:e5:0a:5d:13:
88:d8:8f:20:74:51:9b:20:39:ef:ab:89:21:d0:97:
af:45:6e:39:2c:38:0d:30:80:96:0c:84:e1:67:5d:
e5:c5:88:50:e6:ba:13:1f:a5:6b:39:6e:6e:a9:bf:
19:40:d6:86:ea:0d:cc:28:1f:90:72:57:91:86:4b:
92:1c:76:d3:c4:11:3b:3b:29:54:2a:9f:1a:5d:e2:
61:51:1d:64:fc:13:7d:99:da:9b:3c:af:fc:d5:f3:
96:04:0c:7e:20:00:83:ee:90:56:d5:22:bb:2b:d5:
ac:7b:d1:9a:f8:03:c3:91:f7:0a:46:b6:ae:9d:5a:
ec:f3:dc:56:3b:4f:42:63:a7:d4:58:8c:0e:0e:53:
f0:90:51:53:53:59:3d:3f:57:7e:ab:1c:19:e3:43:
85:2b:d4:8b:ea:5e:cf:d7:95:bf:2b:d5:19:76:dd:
48:ee:7c:5d:8e:3e:db:e5:3a:61:a4:bf:48:85:05:
a4:e0:dd:f7:66:ed:24:67:c1:ad:54:6d:c6:67:dc:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:10:B1:7E:3C:4A:47:9A:EF:66:A8:F7:0A:17:69:3A:8D:2A:E2:BC
X509v3 Authority Key Identifier:
keyid:00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/XBCxfjxKR5rvZqj3ChdpOo0q4rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.12.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:b3:2f:3c:25:81:1c:0e:4c:f0:80:ed:62:e1:7f:59:61:cd:
7e:e2:95:be:83:55:1d:ee:68:56:ad:a3:0c:43:73:a6:98:72:
e1:8c:12:29:2e:04:e4:02:38:8b:9a:2b:df:d8:cb:19:3d:cb:
dc:3a:71:01:4b:b3:64:27:29:4b:f7:42:e9:42:8c:ba:7c:b6:
ff:47:52:d8:d4:eb:17:7b:62:ff:93:87:d4:4a:75:aa:93:ba:
ec:37:2d:41:27:58:af:00:19:1b:65:30:f4:f1:ca:14:40:67:
b9:36:5c:47:b2:36:d1:10:9b:0c:24:64:a5:d1:a7:8f:46:45:
e7:b7:1f:4d:ee:a2:8c:7c:9a:78:2b:d3:22:d8:2d:4b:6b:21:
49:ff:99:7d:75:f6:9e:c7:0f:40:d2:dd:0b:38:87:ce:cf:6d:
eb:01:39:fa:19:29:68:f6:b1:99:36:f7:e9:c8:15:c7:4f:5b:
b8:c9:24:49:4c:e2:48:f5:c1:ac:df:27:4b:fe:a0:39:c5:bf:
51:ff:3c:1d:a6:68:e1:60:e5:90:4d:76:87:6c:ce:dc:41:06:
c9:1f:45:d9:3a:5d:1b:a0:eb:de:c0:a2:42:86:36:85:c1:46:
ca:d3:de:df:a8:4a:03:d0:9f:31:b7:f6:14:77:9b:08:3c:4a:
72:38:e8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:01:23 2024 by rpki-client on console-fra.rpki-client.org