Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/XxOkr5Cx_fIbZKkClLRQf0D6ISE.roa
File: XxOkr5Cx_fIbZKkClLRQf0D6ISE.roa (raw, json)
Hash identifier: dRzehVYoFfJQe4NSTlaw75NiOxBAYAu8f2HinJYNbAY=
Subject key identifier: 5F:13:A4:AF:90:B1:FD:F2:1B:64:A9:02:94:B4:50:7F:40:FA:21:21
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA99351D23997839EC7CBDDC3A8EC521
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/XxOkr5Cx_fIbZKkClLRQf0D6ISE.roa
Signing time: Tue 02 Jan 2024 14:34:47 +0000
ROA not before: Tue 02 Jan 2024 14:34:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56466
IP address blocks: 87.107.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:35:1d:23:99:78:39:ec:7c:bd:dc:3a:8e:c5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f13a4af90b1fdf21b64a90294b4507f40fa2121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:f6:6a:54:e4:da:6a:3c:c9:a3:90:56:f1:
0c:f5:2d:f3:e8:a2:61:e5:fe:05:3f:2d:79:d1:cb:
bd:93:36:ce:56:62:ef:54:ff:76:93:51:0f:0d:7e:
10:00:01:49:34:f8:55:c3:e4:ee:e4:65:5b:fe:2f:
c4:f9:ed:90:c8:07:da:82:76:75:78:7a:42:1c:11:
61:9b:e8:22:bb:8b:92:cd:6a:af:88:99:85:18:70:
b7:8f:3c:4b:3c:34:50:cf:95:83:44:af:c7:e6:a6:
65:72:f8:01:7a:cd:2e:32:45:46:b6:89:81:39:77:
45:23:5a:92:ec:21:a6:c4:10:9e:7a:85:1d:8f:21:
62:64:12:fb:c2:3c:0d:be:d1:68:4d:49:15:23:9f:
71:f2:f7:b6:26:1a:a7:53:d2:a8:4f:e9:58:f7:0d:
95:1a:bc:6f:a2:47:56:ab:b0:6a:1c:88:7b:00:fa:
f1:1d:6b:e9:e8:c1:94:8d:b8:17:4a:1a:60:80:6f:
6e:33:d4:50:66:05:b4:5b:42:2d:95:9d:68:8b:d3:
01:75:0e:95:e5:5d:91:7c:61:39:ec:bf:56:bb:f5:
67:a6:f0:94:7f:d4:5d:a3:a7:94:8a:02:b4:52:1c:
99:e1:89:68:64:50:6e:05:39:9b:1f:fd:c1:bc:2b:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:13:A4:AF:90:B1:FD:F2:1B:64:A9:02:94:B4:50:7F:40:FA:21:21
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/XxOkr5Cx_fIbZKkClLRQf0D6ISE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.141.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b9:e6:e7:16:c0:de:0b:06:5b:84:50:5a:e0:de:70:02:51:
96:db:a3:a0:f8:68:bc:36:52:4e:e8:a2:33:4c:1f:a9:fb:33:
6a:8e:21:b4:36:85:47:04:af:f0:92:f9:a2:9c:bd:30:fe:0e:
8e:e2:3d:1f:c0:44:68:bd:77:14:f5:00:aa:f2:35:5d:4b:79:
f0:9e:10:59:9a:43:e1:1c:68:d5:94:f9:05:5b:7b:54:be:38:
4b:ab:cb:ef:33:ae:bf:d9:a2:ae:1e:af:45:d5:fe:16:61:6e:
c5:8b:5b:5f:38:1c:62:f7:8d:de:f2:21:dc:90:b8:26:d3:73:
4e:6a:e4:bb:a5:38:81:9b:d2:56:6a:30:3c:81:19:1e:60:31:
56:15:45:60:5b:46:44:ce:a6:fb:02:47:8d:24:34:27:fa:4c:
ea:6a:4c:5f:61:c5:75:5a:41:02:9a:cf:c1:8e:35:db:92:75:
15:52:ce:ee:e9:ac:6d:3c:08:3a:e9:76:0c:57:d9:b1:59:fd:
54:d1:a8:bb:86:1e:f9:46:fb:a3:18:41:d1:51:a8:c6:37:ad:
3d:b8:b2:59:ba:17:5b:9f:0c:0b:01:74:a7:c4:00:92:dd:03:
c6:2d:68:ab:9b:5d:41:ad:43:5e:e1:16:8b:1e:8c:1c:d8:f2:
91:e1:3a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:11 2024 by rpki-client on console-fra.rpki-client.org