Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/xmGe7JJreGajFrLjnndYWuVBq3Y.roa
File: xmGe7JJreGajFrLjnndYWuVBq3Y.roa (raw, json)
Hash identifier: QVkkGv0Hl8DhEZ9Bo/ovH4gawvUGgcYGy4IlWy3O+v8=
Subject key identifier: C6:61:9E:EC:92:6B:78:66:A3:16:B2:E3:9E:77:58:5A:E5:41:AB:76
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 018CC3B733381200FBAF13CA76943580F9EE
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/xmGe7JJreGajFrLjnndYWuVBq3Y.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51274
IP address blocks: 185.158.172.0/24 maxlen: 24
185.158.174.0/24 maxlen: 24
185.158.175.0/24 maxlen: 24
185.158.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:33:38:12:00:fb:af:13:ca:76:94:35:80:f9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6619eec926b7866a316b2e39e77585ae541ab76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:f0:5f:5e:88:42:c3:f1:53:f3:7d:55:3f:
ee:47:be:0a:45:b6:29:40:4e:0b:13:fe:8c:38:11:
ae:64:b7:29:31:ee:23:72:25:5d:af:ca:9d:c2:a8:
5f:c9:eb:3a:4d:e3:b5:f5:e1:00:36:df:df:b6:f3:
70:d2:f6:8a:58:e7:f9:c5:e2:26:b6:c3:f7:32:89:
6f:59:9a:d0:84:58:1f:24:9d:2b:b1:3c:40:52:48:
a4:6f:0f:7b:84:18:48:7a:ec:0e:50:01:2e:fd:ff:
77:31:06:31:ea:bd:0e:9c:a8:6f:e6:0c:40:2b:59:
85:60:c7:23:5e:3e:20:55:26:53:c5:07:50:38:b4:
8e:5f:ad:ab:0d:be:be:e9:e2:b5:4b:4f:5d:15:43:
49:d0:98:cc:5f:db:18:3f:8e:a9:b3:d1:6e:c3:76:
ad:2f:54:28:9a:ab:76:b7:17:dc:39:a0:22:f3:01:
cf:bd:11:9f:6e:a5:02:52:d2:b5:65:1d:21:88:e1:
4f:2b:ec:ec:ca:ce:cc:18:37:4f:fb:a7:2c:eb:17:
46:23:8b:f4:fc:fe:2a:8e:56:81:04:8b:39:2a:27:
ac:10:d9:db:e4:af:0d:ab:d6:ac:45:6e:e6:b3:cc:
89:2b:93:66:1d:d0:2c:78:cf:90:e7:bb:8a:a9:71:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:61:9E:EC:92:6B:78:66:A3:16:B2:E3:9E:77:58:5A:E5:41:AB:76
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/xmGe7JJreGajFrLjnndYWuVBq3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.172.0/22
Signature Algorithm: sha256WithRSAEncryption
09:ee:9e:42:35:99:9d:a5:33:22:5c:c8:94:4a:08:b7:42:dd:
11:74:9e:e0:bf:17:73:fe:bd:ff:e6:e8:ec:21:99:49:30:d0:
7c:53:80:55:39:e1:57:c0:24:24:5e:ed:79:93:7a:cd:16:a6:
e4:b7:ec:93:a4:3f:8a:4d:dd:ab:52:fb:c8:c3:40:1c:8b:e7:
21:9e:4c:7a:f3:53:38:12:c8:e5:da:63:46:c8:2e:42:df:a5:
0b:3e:e9:b9:48:30:50:1a:c4:23:22:9f:83:5a:b3:25:69:50:
bd:10:9a:0f:06:3f:3f:e2:ce:41:59:52:90:9f:08:15:d5:15:
68:b0:e4:b0:f2:13:d2:c3:de:83:2e:bc:20:a3:d0:6d:b8:6f:
8b:0e:40:27:4a:0e:bb:61:62:77:16:92:5f:c3:0a:0d:0f:fe:
98:9c:a3:d1:64:50:cf:62:8e:71:ee:59:73:4c:dc:a7:d7:67:
f2:10:bf:51:03:f3:7c:3b:44:aa:53:b3:24:0f:05:43:dc:07:
2a:4a:fb:a8:7b:9e:43:2f:ec:f7:ff:d6:a9:01:db:e3:aa:7f:
b8:77:eb:ac:36:ee:ec:3e:b4:e2:72:22:d8:20:c7:20:3c:e3:
7b:ea:b6:e2:80:c7:ac:eb:39:1f:c7:d6:92:71:09:af:8c:7f:
af:77:68:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:44 2024 by rpki-client on console-fra.rpki-client.org