Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/XKSXxv-taJ4Gawngnw5hjIG-JEg.roa
File: XKSXxv-taJ4Gawngnw5hjIG-JEg.roa (raw, json)
Hash identifier: zaS1vLJbPt6cC4krrB78z3solOp/69KpAYMxBNe/Fp8=
Subject key identifier: 5C:A4:97:C6:FF:AD:68:9E:06:6B:09:E0:9F:0E:61:8C:81:BE:24:48
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 018CCEE6994FACAC85A6D1A856E205BD7AC6
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/XKSXxv-taJ4Gawngnw5hjIG-JEg.roa
Signing time: Wed 03 Jan 2024 10:37:48 +0000
ROA not before: Wed 03 Jan 2024 10:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35732
IP address blocks: 185.118.25.0/24 maxlen: 24
185.118.27.0/24 maxlen: 24
185.118.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:e6:99:4f:ac:ac:85:a6:d1:a8:56:e2:05:bd:7a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Jan 3 10:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ca497c6ffad689e066b09e09f0e618c81be2448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b3:be:43:c5:ce:d0:d6:a7:fa:8e:ae:81:7b:
72:50:65:a7:bb:e9:44:c3:0f:a5:c4:33:2d:dc:0d:
2e:5c:35:86:17:10:2f:65:7f:cd:05:46:fb:60:95:
63:75:1c:6c:e5:82:c6:61:68:5e:50:44:00:3a:ae:
20:7d:88:8c:03:c0:cd:5f:ff:d1:c3:09:66:88:0b:
eb:93:a3:99:59:b1:19:e9:31:fa:b4:73:d3:ae:5a:
c2:44:20:66:52:0f:5e:77:40:15:f5:66:71:26:c6:
11:47:79:b5:a0:d2:df:e3:14:e7:b7:11:33:95:dc:
f9:fd:64:00:11:ef:1d:47:30:fc:ca:f3:b2:c8:27:
d6:59:93:d0:53:11:37:df:ee:e8:f7:80:80:98:c7:
58:72:2f:0b:05:e0:a2:c6:27:99:7c:82:97:ec:97:
e5:d3:a7:c1:3e:d8:31:a1:db:27:7d:f8:79:b2:8a:
cc:0b:d5:66:cb:98:2c:60:ac:44:95:ad:a8:25:23:
4b:06:66:fa:1d:27:b7:d8:b5:68:8c:49:68:8e:ae:
3b:bd:2e:4b:ff:f0:64:40:7f:9a:bf:1f:6b:9b:f3:
cb:81:3f:37:e0:1e:12:15:87:91:62:d9:74:df:1e:
7b:98:91:d3:e3:ba:2c:01:43:1a:eb:fe:b0:8d:e3:
5c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A4:97:C6:FF:AD:68:9E:06:6B:09:E0:9F:0E:61:8C:81:BE:24:48
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/XKSXxv-taJ4Gawngnw5hjIG-JEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.24.0/23
185.118.27.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:79:95:2f:5d:e9:17:35:85:18:d3:d5:25:7b:97:e2:0f:ee:
4f:df:34:b1:97:3c:5b:40:a5:5f:f0:0e:0e:39:c8:ab:b8:d7:
63:bb:67:d6:ca:fc:97:76:14:53:94:a5:8d:66:53:21:e8:3b:
94:c3:9d:b6:88:09:fa:72:98:10:b2:96:84:9f:94:b0:da:47:
7c:8a:d5:3d:8d:3b:67:25:4e:b2:62:b0:3a:b3:8b:9f:75:20:
2a:bb:88:f3:7a:82:2d:d2:5a:6e:d6:fe:bf:6c:f5:f5:cc:00:
4d:d1:38:d1:67:c9:10:c9:9c:19:7b:61:e7:11:2a:4d:88:ee:
14:e9:fe:a6:8f:d6:96:59:f7:42:4a:63:8f:5b:c1:e6:93:a8:
4c:c5:77:76:12:5d:2e:e8:6a:9e:e9:24:69:06:d5:5f:dc:0e:
d9:f3:fd:77:c7:f6:f7:16:1c:b6:2f:11:8e:1f:96:72:11:b2:
72:af:18:d2:fa:db:e9:70:60:be:5e:47:5d:d4:7f:6e:a3:47:
34:96:c5:4d:47:cb:93:2c:26:59:e1:94:72:5b:91:30:ab:5e:
6d:30:98:1c:bc:66:1a:02:cc:4f:39:8b:93:0f:58:89:30:63:
ff:a0:71:68:49:c1:2a:99:22:6f:57:37:22:5c:26:08:5a:d1:
a0:b6:a4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:06:50 2024 by rpki-client on console-fra.rpki-client.org