Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/xctb0Tyo8U9TOKxkM_jmW_qXvxk.roa
File: xctb0Tyo8U9TOKxkM_jmW_qXvxk.roa (raw, json)
Hash identifier: r6+NZm6RogvwlF/HE7ltggR7MNQAhdNgW+b+z/UDabU=
Subject key identifier: C5:CB:5B:D1:3C:A8:F1:4F:53:38:AC:64:33:F8:E6:5B:FA:97:BF:19
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 018CC8DF6E08DD9A592386AF52EBAB20FB57
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/xctb0Tyo8U9TOKxkM_jmW_qXvxk.roa
Signing time: Tue 02 Jan 2024 06:32:14 +0000
ROA not before: Tue 02 Jan 2024 06:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24845
IP address blocks: 194.246.144.0/21 maxlen: 21
194.246.152.0/22 maxlen: 22
194.246.160.0/19 maxlen: 19
194.113.40.0/23 maxlen: 23
194.246.192.0/18 maxlen: 18
194.246.128.0/20 maxlen: 20
2a00:1830::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:6e:08:dd:9a:59:23:86:af:52:eb:ab:20:fb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Jan 2 06:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5cb5bd13ca8f14f5338ac6433f8e65bfa97bf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2e:3e:a3:b3:46:5c:cb:33:69:77:1d:df:6c:
f4:87:00:55:ee:de:5c:15:f0:23:02:e9:70:78:b2:
c3:f3:7b:d0:ba:0a:a1:0f:78:9f:9d:a2:a8:b1:5e:
7a:55:92:ff:98:bf:82:69:30:41:42:1c:e7:6a:d8:
aa:5a:76:97:3c:81:5e:57:23:79:59:4d:34:3d:51:
9e:47:1c:eb:d9:a5:d4:45:9c:b8:5a:c8:a9:33:97:
48:28:23:30:9b:33:31:54:b9:29:70:bf:93:99:d2:
0d:de:9e:89:3a:1e:4b:eb:ee:a5:c3:39:52:0a:5d:
a2:6b:fb:be:ce:82:3b:51:1f:7f:fe:5f:23:be:50:
bb:a7:f1:84:a1:41:0b:2c:9e:eb:d1:ca:55:b0:fd:
08:e5:00:da:d9:d0:c4:59:c0:68:b9:42:76:6c:97:
24:67:e3:b3:2f:75:da:c3:7e:8f:67:f0:74:fc:35:
43:de:22:30:50:e9:af:96:5b:eb:1a:ee:38:1f:25:
61:eb:26:3b:e1:e7:fa:9a:4a:96:12:c9:14:b4:9a:
e3:8f:ac:7b:d9:99:9f:98:ac:35:cc:71:a3:2e:54:
52:f7:03:32:28:7d:8e:29:f8:17:3a:0f:44:69:18:
2c:24:4a:32:40:db:90:1f:99:62:06:e7:f5:54:b1:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CB:5B:D1:3C:A8:F1:4F:53:38:AC:64:33:F8:E6:5B:FA:97:BF:19
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/xctb0Tyo8U9TOKxkM_jmW_qXvxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.40.0/23
194.246.128.0-194.246.155.255
194.246.160.0-194.246.255.255
IPv6:
2a00:1830::/32
Signature Algorithm: sha256WithRSAEncryption
00:47:0c:2c:76:47:bf:ed:c9:e6:5a:de:11:72:e8:62:dc:cf:
c3:88:e2:d2:7a:c3:f1:06:f7:82:d8:5a:a0:21:3d:6a:c8:e6:
43:ee:c2:0e:e2:29:06:44:9a:6e:b6:b3:dd:ee:20:1b:38:ba:
7b:f2:f5:cb:63:8f:b7:02:a7:0f:16:40:74:b0:95:c8:80:b7:
cb:c8:c2:9b:4f:66:a7:89:63:1d:f0:e1:82:71:37:0c:ec:ed:
43:9e:a3:53:41:bb:73:b9:63:af:a0:e9:83:51:90:15:73:bb:
40:92:03:23:7d:42:b7:13:47:2e:68:ef:3f:ce:a6:e4:15:1f:
cc:9c:eb:37:c6:bb:16:c1:79:13:59:8a:cf:9e:90:f1:79:6c:
ee:c9:c0:b2:a7:94:1a:c4:d9:d6:6e:3b:61:37:07:8d:25:b3:
39:ae:aa:3c:a0:2b:1f:e3:a1:a9:88:1e:33:1f:d3:92:0c:2f:
cc:2c:46:f0:71:8c:28:38:5f:a7:f7:ce:ef:34:20:37:c9:21:
f6:28:97:52:ce:bc:7c:51:90:46:52:29:f6:39:a6:39:27:ed:
d8:51:51:d1:cf:21:d6:81:51:34:4b:6c:58:58:78:ee:40:06:
20:60:b7:31:f9:bb:8a:ca:8d:83:87:24:93:8f:92:27:d7:a7:
88:88:8e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:13:22 2024 by rpki-client on console-ams.rpki-client.org