Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/XSupLy8IB8_HrepE7950ENHqc7M.roa
File: XSupLy8IB8_HrepE7950ENHqc7M.roa (raw, json)
Hash identifier: YolxdL5a1dI9gl0M/wu2XHghQVq18s6HsabZtoxJbSY=
Subject key identifier: 5D:2B:A9:2F:2F:08:07:CF:C7:AD:EA:44:EF:DE:74:10:D1:EA:73:B3
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01920A48FED3EB9515A27AC7359784D0644B
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/XSupLy8IB8_HrepE7950ENHqc7M.roa
Signing time: Thu 19 Sep 2024 12:36:48 +0000
ROA not before: Thu 19 Sep 2024 12:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43641
IP address blocks: 185.58.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0a:48:fe:d3:eb:95:15:a2:7a:c7:35:97:84:d0:64:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 19 12:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d2ba92f2f0807cfc7adea44efde7410d1ea73b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:fb:4f:c2:89:06:35:b0:83:2a:7f:60:62:
fc:b6:8c:f4:a4:a9:ae:5b:51:44:8e:9d:51:06:f4:
b4:4d:6e:9f:8c:df:7d:af:5b:f5:2e:fa:14:2c:24:
6d:9d:95:d3:5b:3d:1f:25:f6:04:42:b6:4b:dc:e1:
ef:c6:7d:5a:6c:e6:00:59:3d:88:57:d4:24:95:ff:
e5:be:50:86:64:32:eb:71:8b:9b:d1:de:9b:24:c3:
c2:20:c5:a9:94:de:92:58:74:62:22:f9:0d:46:ac:
77:fb:1a:d5:21:b8:a4:06:93:40:2e:51:d1:90:c8:
1d:f1:e1:f4:4e:e7:30:1f:44:62:25:bb:3b:16:99:
3d:74:ec:a2:26:78:31:f9:d8:4b:f3:76:d0:1f:54:
99:f1:ec:37:e5:34:01:2c:9d:8e:36:52:55:cc:81:
6c:23:74:5a:db:fc:87:4f:ac:97:81:2b:83:45:0d:
07:7b:f0:03:40:b9:66:e4:a8:d2:44:14:7b:78:cd:
5f:e4:83:62:54:13:50:23:11:d4:a1:7d:e9:36:d9:
e9:2e:24:23:a2:2b:d9:62:13:97:cf:5e:1e:79:ea:
56:44:49:1a:2a:9e:ec:c5:6d:d6:f7:09:78:3b:d0:
d6:16:84:8c:0f:d1:2c:e1:f8:f9:31:09:0a:62:d2:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2B:A9:2F:2F:08:07:CF:C7:AD:EA:44:EF:DE:74:10:D1:EA:73:B3
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/XSupLy8IB8_HrepE7950ENHqc7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:6c:d8:48:10:81:33:e3:36:b4:28:88:2a:73:74:ec:bd:5d:
96:e9:29:a4:93:5e:71:31:f4:cc:fa:a9:2c:d7:18:f8:09:3b:
78:ee:0e:5d:d7:84:ac:d1:03:7c:9f:26:7c:70:e8:62:78:ea:
f2:c0:99:5b:ef:c0:bc:a9:c1:31:da:20:b0:00:a3:84:33:53:
4c:fb:7f:0e:66:4b:79:be:8e:cc:96:79:2f:13:af:c5:e6:fe:
12:88:a2:19:89:43:61:92:65:cc:e7:38:a5:77:b6:dc:2a:e7:
5f:df:dd:f0:97:f8:07:c5:87:2e:72:af:73:57:cd:2d:b6:1a:
d6:2f:ba:e4:74:a4:50:f1:82:42:27:e5:f9:ae:e6:f7:e4:4c:
e3:30:c0:ac:c2:6b:7c:04:0e:e2:e2:d6:72:69:dd:40:69:a4:
b5:1c:bd:a9:ff:d6:82:f1:34:15:c1:74:76:14:db:91:d2:86:
c1:38:d8:2d:22:0b:fc:99:25:63:b8:6f:2a:79:bb:b0:e9:3f:
ed:23:69:7a:61:31:2a:18:d7:80:58:9b:19:cc:e9:cd:48:ea:
5d:fc:ba:d6:51:f9:e0:a4:21:e0:52:78:6e:20:87:d4:79:5e:
63:0b:eb:e5:59:5d:e1:50:c6:7c:e8:73:2f:9e:7b:60:b0:50:
27:7c:e9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:38:59 2024 by rpki-client on console-ams.rpki-client.org