Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/XbY5aIhqPXCEfiPDVfx4GkW5_yk.roa
File: XbY5aIhqPXCEfiPDVfx4GkW5_yk.roa (raw, json)
Hash identifier: VJ+ZNhBN3o/JjiyIYdXc8HyhFtOHa9TdYJpQZIkbgVs=
Subject key identifier: 5D:B6:39:68:88:6A:3D:70:84:7E:23:C3:55:FC:78:1A:45:B9:FF:29
Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial: 018CC56E3B23025A8C9DB305FED1497392F3
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/XbY5aIhqPXCEfiPDVfx4GkW5_yk.roa
Signing time: Mon 01 Jan 2024 14:29:44 +0000
ROA not before: Mon 01 Jan 2024 14:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60821
IP address blocks: 185.22.170.0/24 maxlen: 24
185.22.169.0/24 maxlen: 24
185.22.168.0/22 maxlen: 22
185.22.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3b:23:02:5a:8c:9d:b3:05:fe:d1:49:73:92:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fe040242651353d556b8c4240082190f271d13
Validity
Not Before: Jan 1 14:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5db63968886a3d70847e23c355fc781a45b9ff29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:a8:e8:7a:91:a2:dc:74:5f:9e:6c:07:00:
3a:d5:36:44:47:fb:4e:85:96:a8:e7:6b:01:7a:6c:
79:77:4d:a5:c2:2a:86:76:a5:98:17:db:db:6f:92:
62:b0:7f:46:41:21:22:63:a9:b0:a8:00:27:c4:75:
14:c5:e8:c2:88:31:16:2b:41:2f:34:df:80:28:c8:
6a:35:6c:86:b1:dc:71:16:dd:a3:95:78:c2:6a:f7:
e4:19:89:04:32:85:b0:80:7d:05:30:c7:e8:58:07:
01:9a:66:bb:b2:63:b9:41:c1:f4:c1:08:01:d6:21:
69:4f:fe:50:06:85:0a:4a:bd:89:af:81:d9:0e:a6:
c5:05:0a:8d:42:2f:b7:35:05:27:0c:28:66:bf:63:
53:73:05:b1:b4:b9:d0:d2:b8:47:12:10:dd:ed:6e:
1e:bc:5a:e7:6e:13:4a:b7:b0:3e:2f:62:94:a4:9f:
06:c2:83:9d:bd:69:71:e8:6c:d8:1f:39:e9:91:31:
cd:0e:73:a1:ca:e6:d8:a7:6b:e4:19:4b:dc:1f:e8:
c6:26:d6:6c:59:52:2b:25:0a:71:9d:02:20:12:de:
16:51:d1:63:33:f1:be:0a:2e:13:84:f8:0e:23:c0:
a4:2c:b5:14:7b:45:42:b9:ff:f2:78:18:81:10:dc:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B6:39:68:88:6A:3D:70:84:7E:23:C3:55:FC:78:1A:45:B9:FF:29
X509v3 Authority Key Identifier:
keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/XbY5aIhqPXCEfiPDVfx4GkW5_yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.168.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:9d:8a:2e:80:ef:8b:e7:0e:09:64:16:07:72:76:f2:70:2a:
97:df:e1:5c:50:ca:06:a9:ec:07:91:a9:16:05:28:07:f4:1b:
88:8c:44:4d:dd:be:ee:c6:4b:1d:14:11:4b:de:8e:c6:a9:18:
c5:a2:4e:db:42:30:e8:60:ca:e5:a9:45:b0:92:92:7b:c5:57:
78:9b:eb:02:2d:de:4c:8e:66:c8:26:a5:2e:91:a2:13:85:41:
dd:8b:26:25:0b:f8:67:58:bc:d3:69:48:48:18:0b:15:20:cf:
c5:36:47:f6:0b:d2:17:73:11:d5:21:b8:40:ff:d8:14:06:14:
2f:3f:40:b8:8e:cf:4c:ec:97:b0:29:fb:53:90:fb:4e:23:8f:
48:a5:eb:17:c4:45:cb:51:34:6a:29:a2:a9:d4:2b:a5:95:b1:
28:4f:d9:25:58:26:2d:63:49:c9:f8:b7:45:dd:e5:14:af:06:
01:51:c1:37:31:12:cd:01:06:d1:60:47:1e:60:ea:ba:29:67:
63:36:a1:95:1e:98:70:6c:9e:fc:67:23:3d:75:35:10:7a:0a:
5e:ab:c5:fc:6d:c5:f8:91:cb:8e:66:05:66:d2:27:f5:eb:0d:
88:2d:20:c5:c3:23:7f:52:cf:de:d6:ef:fc:c4:77:a0:9c:1c:
6d:5e:73:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:44:30 2024 by rpki-client on console-fra.rpki-client.org