Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xH2-xiBSdwk276ovhNE7Py7YKmg.roa
File: xH2-xiBSdwk276ovhNE7Py7YKmg.roa (raw, json)
Hash identifier: dxTQhLnDb9nx3N9O6LAWA77TCPVAahHJcwx3bU65q8U=
Subject key identifier: C4:7D:BE:C6:20:52:77:09:36:EF:AA:2F:84:D1:3B:3F:2E:D8:2A:68
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFB330E801E07EF1F98593C32C9034
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xH2-xiBSdwk276ovhNE7Py7YKmg.roa
Signing time: Tue 02 Jan 2024 06:32:32 +0000
ROA not before: Tue 02 Jan 2024 06:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212936
IP address blocks: 82.115.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:b3:30:e8:01:e0:7e:f1:f9:85:93:c3:2c:90:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c47dbec62052770936efaa2f84d13b3f2ed82a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:13:37:6d:05:40:c6:a4:8a:4a:7f:68:31:
a4:01:f2:8a:22:af:1a:ae:de:7f:a3:9a:15:a6:50:
20:28:fb:a2:90:53:7e:6b:09:7f:e7:fa:85:94:94:
a0:0a:e4:a0:dc:54:e1:37:a5:f6:aa:bb:20:06:ab:
77:6a:39:2d:8d:8b:fa:77:cc:42:0c:3d:8d:8e:ad:
57:49:f7:2b:08:a9:fc:3a:8f:c5:3d:5e:e4:fc:5e:
fe:b1:5a:5c:9c:01:1f:4a:97:db:07:59:d1:0c:b6:
52:8c:5a:42:fe:89:fb:7a:e0:14:cb:3c:45:1e:14:
a8:ff:6b:e4:c2:ef:1a:f3:20:2c:47:22:42:dc:da:
44:d6:da:2a:72:e5:0a:74:27:24:32:d5:e5:1a:f8:
a5:30:6f:0f:d0:7a:bf:28:79:8e:ff:42:c7:ba:4f:
44:c9:ad:ec:69:f3:78:68:5e:c0:52:a1:1c:14:01:
98:6f:8c:bf:7d:40:b3:ba:23:e0:c6:aa:38:08:54:
67:8b:af:48:aa:d4:fe:11:16:37:fe:44:b2:d6:ad:
d0:dc:ca:4e:08:01:da:ae:25:9c:0e:1e:b2:dd:83:
ec:f5:23:e9:e1:6d:ab:7f:4f:a9:ac:c8:bc:a5:c0:
52:75:d7:fb:83:af:6d:ac:06:3d:36:35:ad:ed:f3:
8e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7D:BE:C6:20:52:77:09:36:EF:AA:2F:84:D1:3B:3F:2E:D8:2A:68
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xH2-xiBSdwk276ovhNE7Py7YKmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d5:5a:d4:8b:6d:4b:80:df:b5:9d:ed:34:d4:ba:bb:f8:bd:
bf:15:58:1d:e1:f3:0f:55:cf:2c:7f:13:f2:49:4c:99:51:ed:
ed:b6:7d:be:fb:4a:12:d6:04:56:03:a2:51:85:8c:9b:66:02:
bf:59:07:87:55:bc:ab:c9:a3:ce:fa:ea:e2:6b:b4:2b:22:92:
77:24:28:07:3d:98:47:e2:d3:58:8b:69:7d:d9:d1:b6:d7:95:
76:43:e2:59:ca:e7:b4:10:f3:23:cf:7a:97:a9:e2:89:cb:52:
16:e3:97:1f:17:07:4b:4b:8c:35:70:97:82:5a:92:24:1e:22:
2c:00:e3:21:ef:87:49:06:eb:3b:28:29:e2:fd:3d:9d:47:cc:
04:8b:0e:d3:8e:2e:1f:46:4a:bb:af:5e:e9:24:07:27:b8:59:
44:f0:c1:0f:ff:64:1a:83:62:9d:0f:6c:b2:74:85:ba:0a:71:
35:c5:e1:b8:6f:d9:b4:05:ce:70:30:a8:89:fd:42:11:e8:1a:
d0:28:e5:83:7a:d0:a5:7d:a5:3a:2f:c9:32:2d:72:54:47:96:
51:a3:f3:24:27:d0:7a:38:3e:5b:6f:fb:cf:34:74:bc:79:34:
c4:06:1a:cc:d1:bc:08:9c:de:fd:e6:45:03:0f:ed:95:e4:39:
ec:7a:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 10:14:20 2024 by rpki-client on console-fra.rpki-client.org