Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/XIr7vREav9FpHWaeRG66U-V2T1I.roa
File: XIr7vREav9FpHWaeRG66U-V2T1I.roa (raw, json)
Hash identifier: PxrE7fYbb1QmrFVOUi/PP18esVuNy4IZ/Pyl5v93vNE=
Subject key identifier: 5C:8A:FB:BD:11:1A:BF:D1:69:1D:66:9E:44:6E:BA:53:E5:76:4F:52
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018CC500AFCF62EA1145D838010532D59785
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/XIr7vREav9FpHWaeRG66U-V2T1I.roa
Signing time: Mon 01 Jan 2024 12:30:05 +0000
ROA not before: Mon 01 Jan 2024 12:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.150.53.0/24 maxlen: 24
95.214.176.0/24 maxlen: 24
91.238.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:af:cf:62:ea:11:45:d8:38:01:05:32:d5:97:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 12:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c8afbbd111abfd1691d669e446eba53e5764f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:31:16:00:d6:99:cc:e6:7c:0b:50:ac:7d:
ee:98:fb:e9:16:24:6a:23:8d:cf:ee:70:69:57:1b:
a8:32:c7:7d:c2:17:a1:b1:e7:16:0e:e0:d3:69:eb:
a0:55:44:59:93:6c:64:f8:e5:66:5d:93:31:10:96:
20:49:e8:49:b3:6a:ff:5e:8e:0f:6e:72:0f:97:bf:
d5:c6:62:b6:68:cd:cd:3b:ad:67:92:c0:82:44:f6:
eb:6c:f2:7f:63:ac:3e:83:58:b3:41:9c:14:1c:3e:
69:15:5a:52:50:27:49:37:80:aa:89:cc:f8:a3:a9:
c6:7c:18:66:58:4e:93:4a:1b:ec:21:63:d2:ba:7e:
b1:fe:8d:f4:2a:0c:42:23:92:a8:a5:ae:88:47:9d:
54:1f:44:de:2f:19:c1:72:d6:4e:62:0f:f6:eb:3a:
d1:82:2a:b7:8e:74:cf:c0:1f:e1:4a:42:2b:db:1d:
00:ad:5a:69:71:d0:e3:db:2c:26:85:63:3e:8d:f2:
1d:ad:8f:59:5c:4d:31:56:c4:56:a6:34:49:13:23:
55:da:3c:ca:7d:44:18:89:ee:c8:be:35:5a:25:46:
d9:5f:c2:33:c7:11:98:ea:1a:11:32:94:6c:4f:45:
86:75:45:d2:12:3b:46:c8:a1:37:8a:16:9a:c1:20:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8A:FB:BD:11:1A:BF:D1:69:1D:66:9E:44:6E:BA:53:E5:76:4F:52
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/XIr7vREav9FpHWaeRG66U-V2T1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.53.0/24
91.238.93.0/24
95.214.176.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:f1:47:d3:3d:fd:d2:c2:af:90:e2:97:65:69:da:11:50:a4:
ce:7a:06:c0:30:3f:36:7f:a5:f3:bb:f8:ce:4a:4a:2d:a1:f2:
e1:67:d2:00:1e:6a:aa:2b:ca:51:7c:e2:ae:b0:62:d1:db:85:
05:ef:27:0e:ba:e1:aa:7e:74:39:8f:fb:60:86:4c:00:17:53:
3a:55:cd:ad:21:7f:67:17:73:20:07:70:3c:68:35:69:e0:08:
cd:aa:37:68:6f:91:6c:e4:2a:ec:0f:03:2a:93:0c:48:06:f8:
87:c9:b4:19:f6:ab:0a:b3:51:53:e8:75:77:a8:0e:72:b2:e6:
78:ae:7b:8d:f9:a3:eb:59:86:be:7b:d2:1d:8f:a2:fb:44:4a:
46:74:bd:6a:a6:50:9f:23:48:09:14:c1:89:50:57:21:1b:74:
93:00:d3:bb:d4:65:1d:78:5f:43:9f:e9:51:af:15:0b:13:0a:
67:64:f8:82:fc:ab:95:e0:98:51:c7:f8:9c:b2:14:77:63:1d:
7c:2a:f6:98:4f:65:2a:22:d4:54:e2:82:eb:80:f6:37:55:04:
0d:4a:89:ed:3c:ed:49:d2:80:0b:27:b9:95:f3:c8:47:59:87:
38:74:45:a1:4e:ba:30:98:55:5f:72:b8:9a:fa:03:ac:ce:4b:
7f:80:71:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:37:26 2024 by rpki-client on console-ams.rpki-client.org