Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/XcaTvx0tQXm7IWYlw41JWE0JttE.roa
File: XcaTvx0tQXm7IWYlw41JWE0JttE.roa (raw, json)
Hash identifier: DQ9oXW8lq37Vh5ccGFkzhf+gpWeUkjryDwhnI2gwPgI=
Subject key identifier: 5D:C6:93:BF:1D:2D:41:79:BB:21:66:25:C3:8D:49:58:4D:09:B6:D1
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B4EA1E97B48DC97A6D0CB95E429BE
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/XcaTvx0tQXm7IWYlw41JWE0JttE.roa
Signing time: Tue 02 Jan 2024 12:34:44 +0000
ROA not before: Tue 02 Jan 2024 12:34:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 45.138.210.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:4e:a1:e9:7b:48:dc:97:a6:d0:cb:95:e4:29:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dc693bf1d2d4179bb216625c38d49584d09b6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:f9:ac:54:a0:70:05:50:ff:57:18:3f:19:
65:e0:9a:49:d5:ea:82:f4:b8:78:ac:ec:1b:3c:23:
9f:ae:69:74:4e:73:97:21:96:44:76:bf:6e:58:c5:
5f:d1:83:07:11:32:e6:c0:0a:0d:75:75:3f:00:67:
30:cb:18:5c:c9:b8:b2:b9:a6:01:80:96:2e:3f:bf:
8e:a3:9e:d2:67:d7:81:b4:0f:62:7e:2b:a6:0a:9d:
3f:2b:13:4e:ba:9c:38:37:66:db:00:39:b9:52:73:
26:62:66:10:eb:30:f3:b9:35:c2:4e:00:76:2f:fc:
8a:1b:e7:82:55:37:f7:ec:31:7a:91:5b:7f:30:82:
8b:d2:9d:f9:c4:4c:ef:72:91:6b:6e:47:3a:72:a3:
28:ee:b7:4f:09:86:8c:fe:02:a2:41:8d:a8:69:b0:
01:5d:47:51:66:e8:f8:ba:25:d6:34:54:e6:4f:7c:
d2:c5:fc:7c:d8:3a:4e:75:94:c4:4f:fa:a2:fa:65:
0f:1b:e7:95:a1:4c:0e:28:1e:1a:1d:c5:b1:ba:83:
2c:39:fd:14:7a:32:61:47:06:52:6b:aa:8a:8a:a6:
73:fd:9e:8a:68:dd:7b:a2:ef:56:4e:60:4c:32:c3:
d3:07:22:7e:db:24:54:3c:57:c3:77:6f:60:a1:9d:
e4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C6:93:BF:1D:2D:41:79:BB:21:66:25:C3:8D:49:58:4D:09:B6:D1
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/XcaTvx0tQXm7IWYlw41JWE0JttE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d5:ec:42:90:97:db:d4:21:78:4c:c7:ea:16:2d:27:00:41:
61:51:42:6c:d1:1b:86:45:be:80:c2:c4:6c:30:04:c5:d1:11:
f9:af:f9:b8:b3:9d:f4:d8:d4:06:cd:1e:b6:71:fa:a9:f8:26:
72:db:c4:38:67:9d:da:fa:c9:b2:cb:82:36:87:89:f3:42:ea:
1f:67:cb:27:ef:7c:f1:e8:87:d3:90:e1:0f:88:9f:4d:62:d8:
60:d3:19:20:a7:c3:30:92:58:54:c9:3b:40:5a:48:2b:fa:05:
0f:de:0b:4e:59:1c:5c:41:5f:3e:36:a1:bc:03:c4:5a:e9:15:
b9:d8:6d:e0:9a:d5:51:2a:40:f0:30:d4:e3:d0:85:08:d3:62:
00:be:a5:e2:97:d1:5d:15:7b:3e:6a:f2:56:0f:5f:37:42:96:
7f:6e:c4:4f:fe:63:40:dd:2f:bd:65:f3:f7:39:40:7f:c6:f6:
95:9c:d8:42:53:e0:85:69:29:58:a3:78:c1:e0:53:2b:3a:98:
3f:fc:e8:60:c3:ee:d3:14:86:92:fe:92:eb:7a:e2:36:8b:0d:
2b:c6:83:e6:e2:69:a4:df:3a:7b:0c:f3:6d:50:91:82:80:c7:
19:fe:32:fe:f7:2a:81:e5:4c:2b:68:95:e8:38:0b:60:52:e2:
22:22:d1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:21:25 2024 by rpki-client on console-fra.rpki-client.org