Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/x2mRk4_i_RH8oTclzfEZYyM9ORI.roa
File: x2mRk4_i_RH8oTclzfEZYyM9ORI.roa (raw, json)
Hash identifier: Fe53Fphpc6LcKFE3jokg7E5hCT0qdCv1qWrTYFWRp1M=
Subject key identifier: C7:69:91:93:8F:E2:FD:11:FC:A1:37:25:CD:F1:19:63:23:3D:39:12
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 018CCA29A01755485D84E83B3DFA0159C973
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/x2mRk4_i_RH8oTclzfEZYyM9ORI.roa
Signing time: Tue 02 Jan 2024 12:32:54 +0000
ROA not before: Tue 02 Jan 2024 12:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59962
IP address blocks: 185.24.252.0/24 maxlen: 24
185.24.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:a0:17:55:48:5d:84:e8:3b:3d:fa:01:59:c9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Jan 2 12:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c76991938fe2fd11fca13725cdf11963233d3912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:c5:8f:2e:36:fe:6f:a9:5b:03:ca:3e:10:
8a:95:58:81:93:49:b9:04:6f:f7:41:d9:ed:2b:bb:
05:1f:e7:81:7b:c9:9d:f0:e2:19:af:14:b9:54:aa:
bb:e7:db:23:ad:b9:7d:c1:37:e1:70:ad:f6:e9:72:
ec:8f:e3:dc:e6:e0:e4:01:b1:90:df:2d:08:99:4f:
e3:48:7c:f9:76:93:97:5c:c3:fb:5d:37:22:09:39:
b5:ee:6f:c8:77:d7:2e:8a:41:2b:8d:e2:a4:ea:2a:
16:79:30:1a:31:ba:7a:28:d6:eb:42:7e:5b:ae:aa:
28:67:0a:23:5f:e8:83:45:e6:66:ad:88:8c:08:16:
d5:7e:99:89:42:5e:7f:5b:a4:db:47:49:bc:af:f9:
d6:ac:e9:a9:dc:a8:d3:e7:a9:9b:24:f6:32:eb:ba:
b5:d9:2a:5e:20:84:89:76:55:cc:e2:5d:58:e2:18:
de:ba:9c:ab:8f:98:13:80:13:b0:7b:4d:74:26:67:
f3:2a:0c:dd:be:e1:d1:12:71:c3:6a:7e:21:53:70:
53:48:53:5e:ce:13:cd:f7:f1:d1:e6:9d:d6:94:ae:
bd:c8:83:b7:80:93:a7:63:e2:8d:f0:31:d2:00:d1:
b2:ef:3b:3c:f2:44:02:cb:16:d0:95:3e:9c:40:81:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:69:91:93:8F:E2:FD:11:FC:A1:37:25:CD:F1:19:63:23:3D:39:12
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/x2mRk4_i_RH8oTclzfEZYyM9ORI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.252.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:26:15:e0:1e:66:48:0b:27:0b:e7:fa:e9:53:ed:2d:d5:50:
a8:9a:cd:36:d1:39:24:78:b4:70:a6:2e:38:90:01:a9:d3:7c:
f4:ab:7d:8e:d4:c6:c3:9b:2b:b7:49:8c:1f:d5:5f:ce:9d:02:
76:e2:50:2a:ba:07:ac:a6:69:81:56:3b:37:00:1d:a9:19:24:
bb:29:0a:fa:ca:f1:17:59:32:7b:59:42:75:03:93:07:30:80:
f2:17:fa:d1:92:2e:ab:d3:7d:f8:1a:2b:18:85:62:36:bc:ea:
9f:54:0c:a0:50:74:79:ba:64:1a:f3:8f:f7:37:34:23:1d:7c:
a6:02:e6:85:ff:24:22:65:4b:30:b7:59:1a:f4:97:d6:83:39:
e9:b3:76:7d:4d:d5:3f:d9:ae:ef:0b:ad:6b:be:cc:8c:ae:4e:
ac:67:f0:98:fc:4c:5c:82:3c:88:4a:36:37:90:68:d8:72:6a:
74:61:e9:81:b9:b1:25:d7:ae:1d:70:96:8f:f4:e3:36:24:2d:
fd:60:79:be:53:68:43:77:87:e1:25:21:ab:b2:fd:38:12:39:
6a:61:33:f8:49:08:b9:c6:c1:c0:de:97:4e:8b:c2:00:d4:b5:
4f:29:f9:02:5d:b5:9c:01:8a:85:60:65:80:42:bc:39:d6:02:
43:16:c8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:40:40 2024 by rpki-client on console-fra.rpki-client.org