Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/XSs0dHuO_6vpY2bDmg95lhyFM0s.roa
File: XSs0dHuO_6vpY2bDmg95lhyFM0s.roa (raw, json)
Hash identifier: q82qJufoOwn/LBneCPhD+WpyuilfRwB8NHSwZQ4uzlE=
Subject key identifier: 5D:2B:34:74:7B:8E:FF:AB:E9:63:66:C3:9A:0F:79:96:1C:85:33:4B
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0191AC27E9D48355059B6F646D79C2D167A2
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/XSs0dHuO_6vpY2bDmg95lhyFM0s.roa
Signing time: Sun 01 Sep 2024 05:56:22 +0000
ROA not before: Sun 01 Sep 2024 05:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60223
IP address blocks: 195.96.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ac:27:e9:d4:83:55:05:9b:6f:64:6d:79:c2:d1:67:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Sep 1 05:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d2b34747b8effabe96366c39a0f79961c85334b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:20:d9:d2:85:dc:ca:3d:71:cf:66:da:55:
bd:9f:a1:77:21:32:78:82:22:bf:c7:58:c3:75:2b:
19:9b:7f:bf:d8:98:69:12:81:71:d9:0e:d5:fd:af:
1b:fe:0d:de:02:4a:43:c6:f1:13:7d:58:50:76:f3:
ef:7d:d4:0e:70:ea:e4:17:68:d2:3c:43:30:f8:bd:
66:c2:05:cd:e4:35:1c:d7:c3:4b:0c:03:bd:46:34:
35:2c:e0:3b:62:5c:ce:ff:fd:97:d0:0a:c0:67:1f:
ca:06:39:1b:4c:33:98:ec:89:a3:94:35:9b:2c:8c:
99:d4:da:5b:34:47:7d:b7:1c:10:10:16:10:58:7a:
59:45:a1:a7:71:31:e8:f4:be:ca:1c:0d:00:60:7c:
b6:2a:94:d4:53:39:7b:dc:39:67:ef:fa:db:d5:53:
69:4d:45:fd:96:e2:e5:62:c7:76:1e:0e:20:d7:0d:
87:03:6b:47:d9:5f:69:5d:bc:6b:86:c1:07:c2:6c:
df:fb:92:72:02:bc:50:68:97:db:29:6f:c2:19:f1:
16:fa:af:1e:25:4f:2d:56:ec:e5:b6:11:d0:6e:8c:
f9:df:08:71:dc:98:25:34:fd:c0:cf:80:4b:2c:c9:
0c:8e:98:02:4b:03:3c:ed:8c:c4:a0:64:ee:90:9b:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2B:34:74:7B:8E:FF:AB:E9:63:66:C3:9A:0F:79:96:1C:85:33:4B
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/XSs0dHuO_6vpY2bDmg95lhyFM0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.129.0/24
Signature Algorithm: sha256WithRSAEncryption
58:4f:17:a6:c9:4d:0e:0b:79:66:4c:4c:3c:53:bf:f1:8a:cc:
dc:78:3c:e7:c1:9b:d5:50:27:f9:4b:d1:64:a9:bb:02:88:fc:
5b:9f:64:36:8a:11:36:2c:04:1a:44:d2:9b:54:d5:f6:5f:e4:
1e:0d:ad:db:ba:78:7f:d6:12:91:80:25:78:d0:5a:48:6b:3f:
ef:ba:1b:2f:89:35:66:e4:b3:6b:65:02:1e:15:3e:07:9d:f9:
34:14:ce:67:fb:38:79:97:d8:37:78:ce:c9:d6:83:04:21:e0:
2d:96:58:a8:40:85:7c:28:ff:59:af:d5:e7:ae:c3:96:54:b2:
0a:52:72:f6:2a:a1:84:80:b8:bf:47:ed:b4:56:04:e5:c6:19:
fc:83:6a:38:42:5d:b5:1c:1d:e6:43:71:9e:a3:31:41:c0:64:
45:10:92:4f:3c:21:dd:d7:35:78:5c:84:0a:3e:54:13:9f:ab:
28:16:17:a7:5c:47:78:7b:d2:e6:82:17:7c:05:9a:eb:4d:8c:
1a:37:15:23:6d:9a:a3:70:8d:33:e1:9d:fe:c9:46:bc:19:36:
b9:cd:01:1d:a5:86:46:a8:9d:49:75:bd:99:9a:73:13:32:f9:
f3:e6:37:b4:c3:4a:4d:25:35:8a:6f:0a:19:19:3b:ea:da:45:
bd:69:85:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:07:21 2024 by rpki-client on console-ams.rpki-client.org