Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/XKZuKQVEdZFbohb2VnoRvH_rGoA.roa
File: XKZuKQVEdZFbohb2VnoRvH_rGoA.roa (raw, json)
Hash identifier: qfYQRL41BXUC4ufUXBkCcEIlctCpzL/dSv0/Q/U2Zww=
Subject key identifier: 5C:A6:6E:29:05:44:75:91:5B:A2:16:F6:56:7A:11:BC:7F:EB:1A:80
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 0191FBB9E26973CB3AA8EDC2201AC6BD8CE7
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/XKZuKQVEdZFbohb2VnoRvH_rGoA.roa
Signing time: Mon 16 Sep 2024 16:45:48 +0000
ROA not before: Mon 16 Sep 2024 16:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215013
IP address blocks: 89.223.9.0/24 maxlen: 24
188.72.103.0/24 maxlen: 24
188.72.104.0/24 maxlen: 24
188.72.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fb:b9:e2:69:73:cb:3a:a8:ed:c2:20:1a:c6:bd:8c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Sep 16 16:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ca66e29054475915ba216f6567a11bc7feb1a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:14:d1:0d:13:a6:be:18:44:e0:ac:fa:6b:
50:96:52:6a:c9:56:62:e1:46:16:d4:cc:cb:6a:67:
81:75:fd:bb:b7:c9:e7:4b:e0:5e:9e:96:cc:fb:6b:
75:cb:28:87:5f:4b:a1:01:11:66:b7:04:96:ed:dc:
2d:4d:d8:8d:18:1a:ed:39:4a:50:44:af:d0:8a:a2:
47:12:d9:57:2e:c0:e1:55:cf:44:dd:f9:77:0f:50:
a0:f2:d6:99:d2:d7:1e:ab:07:cf:b4:67:8e:96:33:
ab:5c:61:c5:3a:25:fa:70:2d:37:8a:e6:5e:6d:32:
6c:87:2f:90:04:3b:6e:00:17:2f:dd:56:57:55:c9:
b0:65:c7:c3:b4:1d:fc:89:14:cf:02:69:45:22:e7:
e9:be:ec:af:ab:1c:5b:29:c9:b7:ef:63:1f:ea:43:
a6:fb:74:3d:11:d4:01:c7:5f:a7:bd:70:1e:ea:46:
68:cf:ee:b9:7a:08:b3:c7:61:da:24:ff:a4:50:09:
c1:37:6a:bc:f1:40:d5:70:0f:10:85:8e:85:03:d1:
ce:a3:4f:a5:d6:bd:de:6c:7f:d8:0a:1e:1e:76:ac:
63:14:21:23:f3:7f:54:58:3b:6e:23:ee:39:da:7f:
35:52:66:e4:67:4f:c2:d6:84:70:5d:ed:97:f9:3b:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:6E:29:05:44:75:91:5B:A2:16:F6:56:7A:11:BC:7F:EB:1A:80
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/XKZuKQVEdZFbohb2VnoRvH_rGoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.9.0/24
188.72.103.0-188.72.105.255
Signature Algorithm: sha256WithRSAEncryption
3c:12:54:92:06:81:d4:17:61:a9:fe:54:c0:27:a6:40:eb:d9:
2f:e0:43:36:66:21:a5:39:e7:65:e1:93:59:64:d5:65:ee:39:
9e:e3:ab:c7:21:2a:5b:49:8d:8a:82:d6:62:3a:7a:3e:2d:29:
d7:d8:8a:d0:49:9d:99:de:48:a9:05:7b:0b:0d:be:f2:c9:a7:
55:91:4d:a3:fe:71:aa:ec:fa:18:13:fc:38:78:35:a0:c3:9c:
64:af:6f:a2:8b:21:b7:e9:39:05:0d:63:d6:2d:eb:40:7a:b3:
d4:10:34:00:b9:8a:44:cd:64:7d:19:fa:38:14:b0:44:ac:bd:
b5:75:bd:93:b8:fe:64:c6:f9:e3:1b:ed:82:c1:fb:69:9f:45:
46:22:de:29:4d:1b:5d:8d:d7:6c:3d:48:14:06:37:cc:a7:2c:
02:64:d6:3e:80:11:a6:e7:08:5f:0b:95:c9:6f:0c:c3:23:b8:
bc:5d:69:b7:fb:14:82:0d:ae:e5:dd:3e:97:f3:12:0f:07:79:
4a:36:e7:ff:07:36:f2:0b:04:58:c4:f5:39:57:f3:a9:09:04:
3c:b3:78:9d:3b:25:d9:ae:a0:94:86:56:4a:60:2a:3f:ea:18:
7f:74:4b:b2:23:02:b3:7e:f4:6c:66:0a:c5:1a:e0:fc:16:68:
d5:95:fe:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:36:21 2024 by rpki-client on console-fra.rpki-client.org