Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/xeveyWTqlqFDxBLHTgr8JsxjUhI.roa
File: xeveyWTqlqFDxBLHTgr8JsxjUhI.roa (raw, json)
Hash identifier: O+w78v/jA+gxaUBqvEAzNRsJ7bstdWMdmxNOHXUEA28=
Subject key identifier: C5:EB:DE:C9:64:EA:96:A1:43:C4:12:C7:4E:0A:FC:26:CC:63:52:12
Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Certificate serial: 018E8574C15167A82436AF2077996905AE8C
Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/xeveyWTqlqFDxBLHTgr8JsxjUhI.roa
Signing time: Thu 28 Mar 2024 14:26:45 +0000
ROA not before: Thu 28 Mar 2024 14:26:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29104
IP address blocks: 91.213.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:74:c1:51:67:a8:24:36:af:20:77:99:69:05:ae:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Validity
Not Before: Mar 28 14:26:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5ebdec964ea96a143c412c74e0afc26cc635212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:e2:ce:71:c4:7d:01:f7:90:1c:05:b0:d9:
9c:89:1f:c0:2a:24:0b:51:b3:eb:bd:82:59:b0:4d:
e5:da:e3:cc:cf:12:33:26:d1:ad:b3:ea:aa:d7:ce:
ef:22:8f:52:56:a3:49:f9:ab:84:ed:e9:ff:8c:1c:
e5:5c:33:5f:0e:c2:d3:06:d6:aa:a0:f7:5f:37:ac:
56:e8:5b:65:f6:0c:eb:f7:21:8f:bd:20:01:fe:fc:
4a:2d:e7:41:9c:55:1d:c3:e0:88:09:1b:29:cf:17:
ff:13:35:f0:ca:18:64:a7:bf:a5:7b:7f:83:9a:3f:
27:41:06:dc:50:9f:ad:89:4b:c3:fa:fb:22:57:69:
90:5a:33:3c:3b:e8:30:7c:ef:3c:de:63:ca:3c:31:
62:79:9f:12:f5:b1:b6:a0:9c:42:2d:cc:1a:90:89:
fd:5f:71:7e:3b:1f:35:a7:4c:5f:cd:38:83:7a:e4:
9f:58:cb:91:de:f3:24:75:c7:15:b9:02:bb:6f:e5:
00:57:9d:08:fc:db:fc:48:58:d4:3b:3f:c1:0c:21:
25:db:57:71:dd:34:f3:c6:05:48:db:3e:95:a5:40:
c2:d7:3b:59:b7:80:3a:d1:96:7b:2f:05:9d:67:3c:
ff:7c:31:4f:95:34:80:5b:d8:c0:51:ad:e6:0c:ac:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EB:DE:C9:64:EA:96:A1:43:C4:12:C7:4E:0A:FC:26:CC:63:52:12
X509v3 Authority Key Identifier:
keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/xeveyWTqlqFDxBLHTgr8JsxjUhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.180.0/24
Signature Algorithm: sha256WithRSAEncryption
40:4d:4c:48:a8:6a:f7:49:17:e4:ee:ae:a7:64:eb:6c:6d:f0:
ab:32:68:7f:40:3a:ea:43:e2:d6:2a:b8:bd:0c:43:42:b4:04:
ea:26:ba:5e:64:ea:22:a1:3f:8d:d0:05:e1:99:31:97:86:33:
33:9a:05:3a:10:8a:90:a2:0f:36:75:ce:f9:43:cb:70:14:7b:
2c:77:2d:86:36:e5:2a:4e:f9:c2:2a:2a:ba:32:c4:8b:e9:2e:
cf:41:68:15:cd:75:38:44:45:2b:49:96:dc:76:b5:e0:59:52:
66:16:1c:7e:75:08:33:d1:58:e8:03:70:63:cf:c4:55:eb:cf:
b0:83:c3:f2:89:a2:2d:f0:f3:26:6c:94:39:e8:a4:6a:f9:14:
da:03:3c:90:72:a7:23:d9:65:16:74:f4:87:97:1a:0f:14:f0:
93:5a:25:66:cd:6c:e7:2e:65:91:5f:c0:5b:07:e8:a5:65:d9:
44:95:37:42:8f:f1:cf:b9:1f:2c:56:a9:50:4b:99:a9:ed:2c:
22:2e:1d:36:fb:1c:db:f8:0f:86:32:88:46:8f:c7:3b:45:01:
65:8e:37:ac:5e:a4:a8:78:5a:6b:fd:1d:d0:f1:9c:95:58:28:
e9:ac:e5:b2:e0:b7:6e:af:b9:58:42:35:35:8a:fd:73:68:fe:
b8:22:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:12:22 2024 by rpki-client on console-ams.rpki-client.org