Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/XqOzEdpL9HRU_pw03BjWWOWT3S4.roa
File: XqOzEdpL9HRU_pw03BjWWOWT3S4.roa (raw, json)
Hash identifier: yq5IZpD6A8PgdyCos8l2KF/uBakRMrvw+eYxTaq/ods=
Subject key identifier: 5E:A3:B3:11:DA:4B:F4:74:54:FE:9C:34:DC:18:D6:58:E5:93:DD:2E
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 018CCA2A912426547AEFF214762D857CEFC4
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/XqOzEdpL9HRU_pw03BjWWOWT3S4.roa
Signing time: Tue 02 Jan 2024 12:33:56 +0000
ROA not before: Tue 02 Jan 2024 12:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35831
IP address blocks: 83.245.79.0/24 maxlen: 24
89.167.228.0/24 maxlen: 24
89.167.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:91:24:26:54:7a:ef:f2:14:76:2d:85:7c:ef:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 2 12:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ea3b311da4bf47454fe9c34dc18d658e593dd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:ab:1f:04:da:4b:94:a0:98:45:05:05:f4:
be:b4:f7:e2:3b:5d:51:93:8a:a5:6e:09:1b:5d:ee:
b0:82:b5:37:3b:f1:af:cb:81:c2:4c:bf:1c:35:10:
14:02:42:04:d8:2b:0b:d2:df:a7:5f:4f:01:f0:a9:
48:cb:36:42:fc:c1:8e:78:85:4c:3c:16:13:73:b0:
d5:62:35:f6:35:5d:3e:0a:0a:54:9c:7f:c9:d8:f0:
f5:f3:8e:b0:eb:8b:37:c7:a2:6b:15:c5:02:45:ab:
d2:18:3b:9e:8e:8f:56:62:f8:3e:d0:8d:7a:f5:af:
bb:61:b0:a2:00:5d:59:bd:fd:28:09:89:ea:ec:84:
42:1c:3d:d6:2e:7c:f9:39:01:9b:a7:a5:10:48:4a:
a7:8a:d3:07:77:ec:14:94:c0:af:d9:a2:0e:e1:e7:
4d:9b:68:7d:cc:83:47:6e:cc:15:58:ec:15:08:62:
71:a1:71:1f:3c:dc:4e:75:49:bf:2c:52:72:82:68:
87:7b:a3:55:8b:27:94:37:47:55:b9:47:8a:4a:a8:
e4:aa:8d:83:6f:ff:f7:64:7e:4e:01:dd:75:30:a0:
3b:bf:c9:60:aa:82:59:be:d9:12:3e:de:17:f9:56:
42:e8:6b:c9:e2:af:11:27:17:4a:c2:89:81:15:5a:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A3:B3:11:DA:4B:F4:74:54:FE:9C:34:DC:18:D6:58:E5:93:DD:2E
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/XqOzEdpL9HRU_pw03BjWWOWT3S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.79.0/24
89.167.181.0/24
89.167.228.0/24
Signature Algorithm: sha256WithRSAEncryption
62:19:6b:4e:6b:d3:ee:73:5d:d1:8c:c3:2d:0a:9f:43:2e:9f:
e8:ad:a1:91:a9:ad:21:ce:6d:f4:81:48:2b:ad:ae:ed:3d:fb:
85:a8:c1:cd:e1:52:ab:5a:9c:7e:db:b2:7e:b5:81:00:03:c0:
10:77:a6:f6:b4:15:dd:8f:ea:74:f1:a7:32:0d:84:16:22:a5:
43:6d:d8:e2:95:46:5e:d4:02:85:ce:9c:4b:e9:a3:bc:89:e4:
e0:3e:24:d0:d6:17:3a:dd:aa:ab:47:5a:d2:9f:62:4d:eb:af:
c0:cd:c1:9e:40:86:34:0c:13:2b:87:26:72:bb:7c:16:14:9a:
34:10:a0:ab:47:17:45:15:63:35:ff:a8:38:3d:48:84:3d:c6:
b2:17:76:76:b6:df:20:c9:a2:17:31:f8:18:9d:65:46:0d:c0:
d7:f1:29:ce:7d:35:32:5b:9d:9b:3f:26:25:8a:78:de:df:bb:
7a:b2:b3:2c:d0:da:48:1e:ca:b9:f5:1c:27:e7:7a:a8:cd:e7:
50:ce:66:7e:61:13:96:0e:72:a0:6b:10:65:cf:a3:0a:e2:08:
08:46:a5:2c:1e:a4:8b:82:6a:0e:a1:92:25:7c:28:d0:55:1b:
ff:8a:c8:7a:46:da:08:e5:fe:c5:8b:14:93:0d:c6:4d:08:79:
86:da:1b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:36:25 2024 by rpki-client on console-fra.rpki-client.org