Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/xpLh9Lj7oTxQdljhneEiuabYaEg.roa
File: xpLh9Lj7oTxQdljhneEiuabYaEg.roa (raw, json)
Hash identifier: 8PBZSAKAlWNnSSjCMveJuOv8g2dUooBD+tW290mhX6M=
Subject key identifier: C6:92:E1:F4:B8:FB:A1:3C:50:76:58:E1:9D:E1:22:B9:A6:D8:68:48
Certificate issuer: /CN=ebc524d6276b0ffbf87af7c7dfb826897fec7976
Certificate serial: 018CC64A27B9DB24D18B3ED5AFF35D32561E
Authority key identifier: EB:C5:24:D6:27:6B:0F:FB:F8:7A:F7:C7:DF:B8:26:89:7F:EC:79:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Uk1idrD_v4evfH37gmiX_seXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/xpLh9Lj7oTxQdljhneEiuabYaEg.roa
Signing time: Mon 01 Jan 2024 18:29:57 +0000
ROA not before: Mon 01 Jan 2024 18:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48551
IP address blocks: 185.159.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/68Uk1idrD_v4evfH37gmiX_seXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/68Uk1idrD_v4evfH37gmiX_seXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Uk1idrD_v4evfH37gmiX_seXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:27:b9:db:24:d1:8b:3e:d5:af:f3:5d:32:56:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc524d6276b0ffbf87af7c7dfb826897fec7976
Validity
Not Before: Jan 1 18:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c692e1f4b8fba13c507658e19de122b9a6d86848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:b7:88:1e:46:ec:c3:8f:c2:c8:ed:f1:49:
5e:7c:0c:13:0a:84:c7:1e:9c:e4:ee:ea:cb:42:31:
52:c2:3b:8c:61:57:a0:e1:8f:e0:75:f7:36:81:44:
37:63:d9:35:56:fc:a7:b4:f8:a5:9b:7f:9e:2a:38:
a7:f8:40:eb:b7:4f:1b:63:0f:b2:77:01:c8:05:d1:
1c:8f:99:a4:3c:82:b2:9d:fb:06:41:0d:5a:2f:b4:
c7:8d:d7:d1:e4:82:f0:b7:8a:c9:d0:cd:1d:c5:da:
b8:8e:c5:c1:1e:e3:a8:ea:46:68:a5:3f:f2:3e:c6:
61:e9:bf:0c:24:da:d6:e4:35:2a:49:2d:fa:d9:81:
d8:06:4f:14:7c:7e:20:10:97:49:60:c7:92:54:17:
00:cf:c9:7a:12:2b:72:71:65:4c:91:22:01:57:3c:
8a:9c:98:c1:aa:48:e9:28:92:fa:bc:3b:28:6b:8b:
d3:27:64:72:b2:75:07:01:5f:71:cb:77:2f:03:8e:
99:68:d1:19:e3:8a:67:f9:ed:c7:d1:06:69:42:7e:
a6:c7:31:20:3c:14:61:6e:52:08:84:ae:4b:9e:1d:
d4:40:85:29:f4:12:c1:ba:31:2a:6e:93:62:3f:c3:
db:93:b1:06:28:2b:58:09:f4:ac:12:b7:e0:ac:0c:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:92:E1:F4:B8:FB:A1:3C:50:76:58:E1:9D:E1:22:B9:A6:D8:68:48
X509v3 Authority Key Identifier:
keyid:EB:C5:24:D6:27:6B:0F:FB:F8:7A:F7:C7:DF:B8:26:89:7F:EC:79:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Uk1idrD_v4evfH37gmiX_seXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/xpLh9Lj7oTxQdljhneEiuabYaEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/68Uk1idrD_v4evfH37gmiX_seXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.189.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c5:52:e4:95:ad:06:36:81:3d:99:ba:94:45:0d:44:c2:af:
37:ce:13:54:76:1c:84:82:ba:7e:b7:5d:2a:16:cd:e7:1f:bd:
58:54:e9:6d:25:77:29:21:a8:4b:29:12:95:3d:44:d2:e1:05:
b8:5b:68:23:53:98:f5:2c:9b:89:c1:94:14:98:d5:c4:b7:6c:
c4:1c:55:03:c7:f0:c8:bc:f5:10:f0:c4:46:91:d4:55:4c:e0:
c1:71:07:c9:7b:50:da:b7:13:0f:d1:16:4c:68:7e:f8:c4:56:
0f:7d:ec:aa:3e:fe:d9:70:a3:6b:01:20:c5:72:3c:b7:fb:5b:
01:1d:81:c1:33:23:0b:93:b2:63:8c:e2:25:62:c8:73:04:7c:
e1:2a:4a:e8:5a:d2:e5:8e:70:c7:b4:d2:30:28:82:5e:db:cb:
c8:80:0e:bc:d1:41:b8:eb:89:e2:8c:c4:0d:6e:a6:47:e1:89:
77:75:c0:f4:2a:e8:ee:b2:95:18:3f:f1:01:9a:7c:07:0c:f3:
30:c1:0d:46:d6:04:49:3c:4f:e7:d0:54:25:8d:38:54:58:91:
08:8b:ea:c5:36:a4:50:86:35:2c:1d:20:97:4d:1d:84:92:de:
ba:2c:8a:bd:8b:e9:cb:37:f7:74:82:6a:b7:ed:27:1e:c6:f7:
11:2d:49:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:32:29 2024 by rpki-client on console-fra.rpki-client.org