Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Xbpa_t0Aqf7Ao2Ke0kdZEjTJZT4.roa
File: Xbpa_t0Aqf7Ao2Ke0kdZEjTJZT4.roa (raw, json)
Hash identifier: e8/B6vIihKuer33Gn3NaqyAQQIQ0Ei9kP42cg1OTLKQ=
Subject key identifier: 5D:BA:5A:FE:DD:00:A9:FE:C0:A3:62:9E:D2:47:59:12:34:C9:65:3E
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018CC500B3211091FD491F43E8C6303DF45A
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Xbpa_t0Aqf7Ao2Ke0kdZEjTJZT4.roa
Signing time: Mon 01 Jan 2024 12:30:06 +0000
ROA not before: Mon 01 Jan 2024 12:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201450
IP address blocks: 77.111.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b3:21:10:91:fd:49:1f:43:e8:c6:30:3d:f4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 1 12:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dba5afedd00a9fec0a3629ed247591234c9653e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:ea:2c:aa:76:1d:54:d0:d8:41:5b:5e:b6:
79:56:00:aa:b7:84:f6:ff:35:a9:30:07:ce:67:63:
4a:12:0b:bb:c2:9c:45:36:e3:9c:e7:6a:a3:e4:4f:
b2:85:fa:53:a7:c1:14:9b:0f:82:08:d4:74:f4:2a:
29:13:5a:e9:6c:08:10:71:a9:bc:1a:5c:86:0f:b8:
7a:07:25:cf:f8:e8:08:6b:f0:ac:85:03:36:cb:21:
d9:f3:42:c8:af:05:28:b4:04:90:63:08:7e:41:c4:
b3:f1:60:0e:41:58:02:1e:9b:8a:4b:79:41:86:c8:
78:e1:d3:71:75:37:e3:69:fb:27:d0:ff:18:83:21:
34:cb:50:8e:28:ae:64:24:03:ad:06:ec:62:71:01:
d7:95:59:46:04:18:b9:f2:d0:ce:ba:51:42:f4:f0:
26:c0:fc:62:17:d1:45:34:bd:24:b1:ff:7c:29:67:
1e:50:24:86:5a:fd:33:6c:1a:f4:42:47:65:9b:d0:
3f:c5:63:b8:ef:ca:58:4f:94:10:bd:59:09:98:b5:
58:db:be:8d:02:6e:fd:e2:2f:c3:2f:3c:7a:75:6e:
71:30:73:f3:22:02:21:2e:bc:99:36:2c:fe:e8:e3:
31:8d:c7:41:d8:07:16:2f:09:01:0f:db:b3:b0:9a:
f5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BA:5A:FE:DD:00:A9:FE:C0:A3:62:9E:D2:47:59:12:34:C9:65:3E
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Xbpa_t0Aqf7Ao2Ke0kdZEjTJZT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.126.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c3:1c:57:00:f1:dc:70:f1:fe:ca:49:a5:e0:b7:ba:b4:38:
2e:8f:7c:da:f8:c0:ab:eb:aa:36:0a:67:1e:db:13:a8:73:64:
07:6d:2f:ae:bb:69:2a:71:8f:0d:bd:6e:3f:3c:20:5f:62:10:
cf:57:b6:74:fd:be:22:90:28:c3:9b:50:62:d9:3a:18:36:e3:
56:30:a8:17:e1:a6:da:99:e3:59:e2:11:83:30:5b:64:21:78:
71:5e:e7:87:f8:af:a4:f7:58:27:48:02:67:06:07:a2:a0:62:
40:5e:7a:6c:72:de:7b:dd:cf:e3:33:59:a6:94:eb:b1:f1:65:
59:9e:a1:0f:f6:20:4b:b1:be:8d:e0:b1:2b:34:36:de:d3:c2:
c2:d5:d9:3a:c9:12:a1:2a:16:3f:0d:cf:bb:a8:a6:8a:95:1c:
72:19:3a:77:f7:16:5e:95:2f:dd:30:02:f4:91:df:35:61:7b:
10:67:80:aa:31:c3:df:b6:4d:71:7d:c8:6e:95:36:a0:b0:a2:
31:40:00:97:0a:f4:3c:c8:37:d6:40:31:40:e2:99:f8:15:eb:
56:6b:2f:db:5f:c1:64:ba:0a:9b:88:ce:f3:c1:48:82:6d:8e:
6c:fd:2f:80:41:cf:f0:a0:80:c0:f0:3d:df:64:b2:ea:18:bb:
c8:a9:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 00:06:56 2024 by rpki-client on console-fra.rpki-client.org