Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/x4srLY7LzQ6xCZXvK4hh98mpSq8.roa
File: x4srLY7LzQ6xCZXvK4hh98mpSq8.roa (raw, json)
Hash identifier: OGH/ycjsZdWaEv36A5xM7mQEF43ntk2YUIoPjqzbj/w=
Subject key identifier: C7:8B:2B:2D:8E:CB:CD:0E:B1:09:95:EF:2B:88:61:F7:C9:A9:4A:AF
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DACB479CEB11BC629CA4FF8D9B9793
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/x4srLY7LzQ6xCZXvK4hh98mpSq8.roa
Signing time: Mon 01 Jan 2024 02:29:27 +0000
ROA not before: Mon 01 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201435
IP address blocks: 185.72.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cb:47:9c:eb:11:bc:62:9c:a4:ff:8d:9b:97:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c78b2b2d8ecbcd0eb10995ef2b8861f7c9a94aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7f:84:81:26:c6:1e:ce:b0:5a:c9:95:f8:02:
60:38:3e:02:9b:d0:4b:b0:b0:67:44:49:0d:16:3f:
e7:9a:dc:72:35:c5:37:f9:71:c7:6f:12:7f:0a:b0:
f7:b5:7b:65:0b:9b:cd:0a:8d:23:72:4a:e9:6c:a0:
65:1f:44:df:35:3a:bc:6f:23:7a:29:1b:17:2e:b8:
f5:fb:16:a7:53:88:af:50:72:32:4b:24:bc:93:ed:
60:77:a1:c6:a5:33:3f:ae:22:90:61:1d:a8:4a:d0:
f6:bd:1f:df:a7:df:62:57:48:63:bd:2b:92:46:0a:
dc:34:ef:fb:61:47:27:f2:a3:1c:ea:c0:08:37:a8:
7b:0b:70:17:55:1e:3b:5a:c9:ba:aa:be:ef:fb:a5:
44:3b:16:84:23:80:b3:ab:22:03:21:81:8d:77:f7:
72:46:df:cc:69:e4:58:a5:2f:81:9d:f1:2a:0f:28:
c8:f2:b2:b8:f0:fc:b0:b6:fe:5a:d5:33:5f:b1:65:
e3:e7:60:d0:af:98:fd:17:14:86:a9:b3:35:34:98:
a4:6e:6c:74:4f:31:28:b6:d8:28:d0:e1:cd:38:65:
51:06:d0:9d:e2:95:89:36:05:79:5f:9d:3d:63:ff:
3e:e5:fc:14:a5:60:3a:ce:c6:70:f8:41:1a:8e:75:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8B:2B:2D:8E:CB:CD:0E:B1:09:95:EF:2B:88:61:F7:C9:A9:4A:AF
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/x4srLY7LzQ6xCZXvK4hh98mpSq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.52.0/22
Signature Algorithm: sha256WithRSAEncryption
38:ee:24:c4:f1:ed:09:7a:1d:e4:84:54:99:5c:ab:47:56:d5:
fa:6c:57:d0:5a:85:58:f0:43:09:6f:30:fd:14:0f:7d:4d:66:
7f:05:12:8e:9e:c4:9f:50:89:3c:8a:ff:29:08:87:db:fd:dd:
71:f4:ea:1b:ed:7c:7f:ab:59:f2:3c:a5:fd:c6:37:cb:39:0c:
99:87:46:96:57:13:c6:ba:b8:d4:7d:a1:ef:ca:bc:9a:ad:8a:
0b:d6:f5:a5:53:e9:6a:12:40:d3:14:49:44:4c:00:a0:ba:44:
8e:9b:b3:c0:e5:49:38:7e:76:47:82:30:c5:50:af:3a:aa:8c:
d5:b0:ab:45:4a:bf:ce:30:ff:d8:7e:dd:e6:df:47:91:25:41:
be:ad:f1:7d:aa:36:e5:23:bd:ec:fa:c1:e3:58:c2:7a:0c:c6:
96:c4:ad:a6:7c:43:d8:90:2a:35:a2:00:79:52:07:ab:09:46:
96:da:ed:85:88:82:07:e4:a8:d7:1f:bb:ef:c2:d5:42:53:df:
81:36:23:e1:9c:70:99:f5:2b:29:ed:c5:99:66:b2:de:53:b0:
dd:a8:8c:d7:70:a2:77:4e:51:72:af:7c:3e:74:14:66:c1:8a:
15:dd:80:40:83:5e:8f:91:cd:2b:e4:da:29:b9:18:b5:91:34:
82:37:2c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:26:08 2024 by rpki-client on console-ams.rpki-client.org