Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/xsl8cl2PXTRZavxB0aONwvnWZnw.roa
File: xsl8cl2PXTRZavxB0aONwvnWZnw.roa (raw, json)
Hash identifier: WnTpY3v999OMw03Wn2JIRc61Veu1Vs2K7M76Op11/Tg=
Subject key identifier: C6:C9:7C:72:5D:8F:5D:34:59:6A:FC:41:D1:A3:8D:C2:F9:D6:66:7C
Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial: 018D7CE540711A315A2A42A02FDF8CA2BBBE
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/xsl8cl2PXTRZavxB0aONwvnWZnw.roa
Signing time: Tue 06 Feb 2024 05:30:15 +0000
ROA not before: Tue 06 Feb 2024 05:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1136
IP address blocks: 89.147.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7c:e5:40:71:1a:31:5a:2a:42:a0:2f:df:8c:a2:bb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Validity
Not Before: Feb 6 05:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6c97c725d8f5d34596afc41d1a38dc2f9d6667c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4d:b4:ee:db:30:aa:1c:44:c6:17:01:7d:d6:
17:32:07:8e:5f:8b:38:00:1c:69:04:dc:f8:15:19:
1b:1e:ff:95:31:46:d7:8f:1f:d5:ce:1b:4a:d7:ba:
69:39:26:fa:38:c9:67:69:eb:f3:3d:cc:60:38:7d:
01:d5:dc:41:0c:44:33:54:d1:cc:1a:1b:32:21:d0:
4f:60:6c:d1:42:0f:3f:b7:3d:a6:06:c0:d0:36:bf:
1d:41:ce:8f:9d:35:ce:ee:f3:81:70:3d:19:17:ed:
6c:de:81:6b:92:dc:86:2a:4c:8d:6f:c1:b0:e5:e1:
56:ca:52:f9:1e:02:20:88:87:f8:91:63:88:b2:66:
7a:fe:8c:d1:67:72:63:54:cc:e7:15:fa:3e:27:41:
bc:94:6b:9f:67:ac:6e:6e:62:35:49:2a:de:a1:31:
c7:87:7a:99:dd:f3:29:ae:43:e6:36:e7:87:78:a9:
c2:64:ab:c1:04:b4:69:37:62:43:c3:5a:34:49:55:
30:37:50:62:bf:31:32:16:e7:26:a6:4b:be:73:80:
a6:ef:52:d3:19:13:5e:3e:61:e6:cd:3b:49:60:50:
c1:95:55:6f:bc:7b:ce:97:f7:b7:f8:71:d0:11:52:
88:68:6e:7a:bd:1b:57:52:85:e9:42:e2:21:46:e8:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C9:7C:72:5D:8F:5D:34:59:6A:FC:41:D1:A3:8D:C2:F9:D6:66:7C
X509v3 Authority Key Identifier:
keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/xsl8cl2PXTRZavxB0aONwvnWZnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.32.0/23
Signature Algorithm: sha256WithRSAEncryption
00:b3:14:90:fd:92:1a:d3:06:25:6a:1e:d4:74:cf:28:c3:ea:
7d:1f:f5:31:df:d1:8a:9a:8a:45:81:05:eb:7b:a0:7e:f4:5f:
54:63:4e:98:b6:bc:f2:93:39:d0:f2:85:5e:13:73:c2:0b:85:
63:13:d5:87:8f:a7:90:cd:e0:e3:cd:20:e0:49:0a:90:9c:97:
fc:43:09:66:89:61:25:f6:05:59:eb:9c:e1:0f:b9:5b:5a:4a:
db:f2:a7:0f:28:14:e5:38:91:c5:64:0d:a0:98:81:42:8d:63:
d0:aa:e7:3c:88:1e:bf:3d:1b:5a:6c:f6:b5:d0:55:4d:20:25:
50:41:6d:44:ec:74:d2:5b:48:53:f2:b8:9a:53:e2:58:73:8f:
8e:bf:1e:49:e5:db:c4:27:34:4a:a4:70:9a:eb:49:91:31:ce:
4c:f0:be:de:a9:80:e7:cf:fd:b5:6c:d9:38:27:77:99:17:e2:
85:ee:2a:8d:cf:f8:8a:91:ca:11:ce:2e:0c:ed:04:82:e9:81:
7e:31:c0:cb:c9:e8:43:52:21:d0:fa:70:7f:a4:cb:32:15:6e:
c0:58:39:f2:9b:26:b3:b1:14:f2:e1:cc:c5:f4:c4:59:da:3d:
00:e5:3a:93:b2:49:34:61:52:03:af:a8:b6:60:3b:b9:40:a4:
63:9a:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:08 2024 by rpki-client on console-fra.rpki-client.org