Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xmU5H_-Y1QdRbUIyWdeJXkVV-4g.roa
File: xmU5H_-Y1QdRbUIyWdeJXkVV-4g.roa (raw, json)
Hash identifier: BCipZjBr585EyCJyqLLZiB+FAHOaDkJNNtti3Xlocy0=
Subject key identifier: C6:65:39:1F:FF:98:D5:07:51:6D:42:32:59:D7:89:5E:45:55:FB:88
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF94AB8ECAD071560B001BEEC22A91
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xmU5H_-Y1QdRbUIyWdeJXkVV-4g.roa
Signing time: Tue 02 Jan 2024 06:32:24 +0000
ROA not before: Tue 02 Jan 2024 06:32:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24875
IP address blocks: 185.106.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:94:ab:8e:ca:d0:71:56:0b:00:1b:ee:c2:2a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c665391fff98d507516d423259d7895e4555fb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:a6:3d:9c:7c:ba:f0:b4:de:4f:70:6b:20:
46:8b:bc:88:76:df:63:f9:19:20:22:b0:57:84:e3:
84:15:58:e5:69:6d:59:d6:27:c9:af:e8:a0:81:58:
d7:c9:ff:3d:f0:21:d7:7e:a8:4a:07:d2:a3:1f:f3:
00:d8:70:06:56:b8:04:60:d8:e4:2b:5b:d8:a6:38:
8e:5b:0c:87:64:12:b9:ba:07:bf:33:0c:d7:38:47:
7e:30:52:88:e7:5e:7c:e2:3e:19:05:1f:26:8e:f5:
8a:70:29:79:19:53:01:59:04:54:6f:4c:1d:00:78:
26:3a:fa:f5:80:49:b9:97:7b:68:96:16:7b:17:d7:
e3:b3:63:b8:6c:59:46:23:95:07:ee:eb:04:c7:11:
44:33:ca:3f:1e:20:47:67:31:dd:97:07:e1:a6:bd:
fc:c6:72:98:b0:f4:22:35:30:3e:3b:7e:6e:b2:57:
05:ce:a0:f1:60:0b:14:23:44:ef:7b:f8:a4:73:3b:
b1:62:1a:47:e3:3c:17:3f:b9:ec:74:85:c4:48:eb:
ac:a3:2f:89:05:2b:e4:e7:31:fa:e1:1a:b7:8e:f8:
87:f9:b5:04:ea:53:e5:5f:94:16:6b:0c:ce:ec:51:
3a:b2:8b:bf:51:61:f4:27:9b:c9:71:38:21:75:dd:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:65:39:1F:FF:98:D5:07:51:6D:42:32:59:D7:89:5E:45:55:FB:88
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xmU5H_-Y1QdRbUIyWdeJXkVV-4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.92.0/22
Signature Algorithm: sha256WithRSAEncryption
33:bb:55:ef:15:2a:51:7c:34:78:45:6a:ec:c0:f3:a7:67:22:
10:17:b7:d6:56:f3:e0:5a:98:3f:e6:ad:e2:2d:2b:65:96:cf:
88:0b:91:4f:e7:b2:d6:3d:8e:b4:86:1a:1f:e2:6b:d7:85:40:
bc:da:bf:7a:9b:00:8b:e0:80:73:eb:30:0b:99:cf:50:d1:58:
59:f6:bb:48:a4:e2:e4:17:f4:c4:31:9a:0e:de:4e:3b:c7:b8:
2b:6a:85:98:2e:0f:68:97:9a:1e:d6:82:7f:42:2c:98:67:f5:
f6:03:ee:61:e8:53:d2:67:d1:45:ca:80:78:e8:8c:18:72:08:
b5:8c:1f:65:ee:01:7d:04:13:1f:7e:50:c7:cc:b4:80:73:65:
ff:7a:4d:06:b9:52:f6:85:dc:48:fc:34:24:53:26:39:80:1a:
7e:1c:45:34:b1:1e:a3:8c:a7:17:bd:e1:2e:27:ce:bb:ed:e8:
58:c6:f5:d8:d3:2f:35:dd:88:66:1d:d4:36:ca:6b:09:ab:f5:
e3:03:4c:2a:57:61:d8:88:50:ad:a8:17:17:ce:a9:31:af:a3:
03:cf:85:b1:fe:89:38:91:5b:c8:91:8a:54:84:67:d6:ed:a5:
35:79:d9:9d:00:6b:1c:74:ca:90:f2:6b:a3:db:05:fd:85:26:
ff:84:77:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:49:12 2024 by rpki-client on console-fra.rpki-client.org