Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/xbxcmlS5w3DcHv2KTiQiiNSMu9A.roa
File: xbxcmlS5w3DcHv2KTiQiiNSMu9A.roa (raw, json)
Hash identifier: I2CTkDJOqt4hcJ2m3/cKWZO/An6GpsK0lheu83mIDpc=
Subject key identifier: C5:BC:5C:9A:54:B9:C3:70:DC:1E:FD:8A:4E:24:22:88:D4:8C:BB:D0
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 019031105D99AA4A8D6C6D560562BFA088DB
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/xbxcmlS5w3DcHv2KTiQiiNSMu9A.roa
Signing time: Wed 19 Jun 2024 15:14:34 +0000
ROA not before: Wed 19 Jun 2024 15:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142146
IP address blocks: 185.217.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:31:10:5d:99:aa:4a:8d:6c:6d:56:05:62:bf:a0:88:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jun 19 15:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5bc5c9a54b9c370dc1efd8a4e242288d48cbbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:55:69:b5:44:82:cd:ed:15:1d:ff:0c:2a:
ef:6f:a4:ad:90:f9:43:ae:10:89:a6:a5:f3:a6:da:
3a:45:58:cb:83:aa:dc:a5:59:1e:80:d2:46:c6:26:
1a:70:b6:6c:62:c7:f0:15:19:52:4f:a2:d6:e5:56:
18:26:03:7a:c1:d4:dd:75:fd:19:6f:f8:a4:22:a3:
2c:c3:c9:cd:62:fc:6a:38:5f:61:e9:3c:11:df:0c:
86:f9:5c:36:f9:94:f4:f7:d1:32:8f:91:2f:5b:d4:
08:f5:d8:f0:40:f3:00:08:5c:2f:44:37:bf:31:bb:
e7:ee:e7:9d:b1:f8:cb:8c:d5:1a:09:9b:69:0e:14:
1b:d1:b7:02:8a:5d:6b:bf:6d:b3:48:f7:46:4c:01:
f0:a9:f2:53:8c:aa:03:7e:21:3f:87:fd:62:4a:12:
f9:99:2e:c2:e8:6b:ec:c7:f1:4a:45:ed:c6:38:31:
d0:06:f8:c0:05:67:47:06:79:87:e8:f6:79:7f:95:
90:9d:b8:31:04:d1:5b:db:66:8f:eb:da:2f:00:76:
ed:cc:09:48:4b:f5:bf:57:78:bd:57:c5:d6:c5:03:
cf:b1:30:45:7b:5d:34:a0:11:de:a6:2f:8b:d9:97:
b7:ad:e3:8d:75:d7:65:47:a0:51:16:8b:97:0a:56:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BC:5C:9A:54:B9:C3:70:DC:1E:FD:8A:4E:24:22:88:D4:8C:BB:D0
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/xbxcmlS5w3DcHv2KTiQiiNSMu9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.195.0/24
Signature Algorithm: sha256WithRSAEncryption
48:9a:3f:48:14:5e:d7:ee:6d:c5:54:0a:c8:74:33:df:54:fc:
6f:fb:e7:b2:df:75:c2:04:7d:43:fd:3a:28:86:75:32:ef:a8:
14:d8:d8:d6:17:1b:ee:8b:74:59:7a:99:bc:e2:47:1d:40:aa:
4e:a5:8d:42:4a:66:30:4c:4b:53:a9:ea:02:63:0d:45:4f:a2:
4f:84:9b:af:bd:f3:26:4b:df:79:02:d4:6e:2b:0d:a0:54:3c:
0e:25:aa:86:2e:00:3c:ff:a0:8f:70:79:1e:cf:da:98:31:9f:
f2:97:2d:bd:1a:45:32:1b:11:ad:dd:13:77:ca:0a:6b:90:80:
e9:09:21:b9:87:e4:67:ef:46:3e:06:b8:17:fa:6d:a5:e0:c3:
c3:83:d0:26:ee:3e:20:12:1f:bd:ac:03:1d:a3:20:e5:78:68:
54:26:2f:92:91:9e:81:55:43:ad:f1:44:4d:f5:29:d7:5a:5e:
32:1b:da:02:31:d0:ac:69:3b:64:eb:93:b8:3d:82:82:e7:c5:
bf:8b:e8:7e:39:1e:51:c4:ad:96:67:a0:7a:af:d1:35:82:22:
7d:dd:27:4f:fe:d9:73:36:9f:45:2d:ee:23:3c:9e:9a:a2:08:
2e:af:c6:c2:32:ea:de:06:c0:56:b0:25:e9:da:a1:46:10:23:
80:b0:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:42:52 2024 by rpki-client on console-fra.rpki-client.org