Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/XsbB7iqCszde2dT3Yqvuj8gTHCs.roa
File: XsbB7iqCszde2dT3Yqvuj8gTHCs.roa (raw, json)
Hash identifier: 3tXg6LjP2/pU6o0RRov8HoJakBg1bBB4CX5SoHX0R/w=
Subject key identifier: 5E:C6:C1:EE:2A:82:B3:37:5E:D9:D4:F7:62:AB:EE:8F:C8:13:1C:2B
Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667
Certificate serial: 018E85C292DF8EB2A139A3B68DE604681054
Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/XsbB7iqCszde2dT3Yqvuj8gTHCs.roa
Signing time: Thu 28 Mar 2024 15:51:45 +0000
ROA not before: Thu 28 Mar 2024 15:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21433
IP address blocks: 195.191.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:c2:92:df:8e:b2:a1:39:a3:b6:8d:e6:04:68:10:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667
Validity
Not Before: Mar 28 15:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ec6c1ee2a82b3375ed9d4f762abee8fc8131c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:af:36:ac:52:e9:0c:93:9b:ce:5e:12:95:fe:
cd:60:af:f2:47:5f:f7:22:df:92:71:52:e4:e1:22:
ab:13:fe:a6:f2:e8:9d:9a:4a:3c:77:8f:98:de:12:
23:8d:22:9d:99:ef:88:9a:7c:48:6a:56:d1:72:8a:
dd:08:22:5e:54:46:4e:54:51:e9:76:7f:16:50:d9:
92:7d:36:ff:34:da:c8:1d:f7:e6:a8:00:b5:cc:a5:
67:3a:80:20:8e:ca:e7:07:39:40:e4:17:66:88:07:
4f:34:51:d7:00:b9:80:86:1b:95:e2:c0:1c:11:e7:
c3:0c:70:d0:19:d5:9d:87:6c:6b:a3:8c:92:6b:82:
31:a9:9f:cb:0d:c3:3e:97:72:21:9e:cc:67:90:62:
64:da:d3:89:ff:3f:58:48:dc:4a:df:35:16:37:9b:
f7:9b:c4:ce:20:7c:81:59:77:68:c9:6c:b6:92:24:
34:25:bd:74:0c:18:f7:f6:4f:5a:91:73:55:e0:67:
89:25:fc:e2:5e:61:47:f4:d9:d3:f5:37:27:a9:17:
b2:ef:57:97:ca:8f:68:63:85:69:5b:a3:31:0e:98:
fa:95:e8:a1:f5:e6:71:66:8a:1d:58:37:ae:75:ad:
c6:5f:44:97:ff:66:67:3c:62:07:2a:21:35:10:a3:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C6:C1:EE:2A:82:B3:37:5E:D9:D4:F7:62:AB:EE:8F:C8:13:1C:2B
X509v3 Authority Key Identifier:
keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/XsbB7iqCszde2dT3Yqvuj8gTHCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0e:66:dd:23:6a:0f:6c:f1:b2:0c:c9:38:27:29:14:0e:ea:
d4:0c:07:0e:32:67:dd:db:e5:bf:88:98:b4:5a:43:ee:13:ea:
d7:b5:b0:49:ae:e9:df:95:b4:f4:a7:3a:8c:08:86:d1:62:01:
09:84:06:2a:57:61:3a:94:54:9b:58:ff:13:d0:2c:24:3c:9e:
9c:a6:db:30:d4:6e:4a:33:de:f1:91:74:18:4b:46:d8:e5:ad:
bd:dc:c5:91:86:e5:61:52:1d:2b:b0:67:40:96:9b:a7:e6:37:
6e:19:40:4f:03:81:45:00:52:20:c1:85:3f:3d:50:ca:1d:81:
12:a1:d7:8e:e0:dd:b4:d5:8e:e3:fe:6e:4b:08:f4:45:6a:7f:
d9:16:11:a7:5b:05:83:a0:7a:53:f7:32:32:d2:a0:a5:1a:c1:
39:f0:13:fe:e2:d1:4f:60:fd:44:5c:10:6d:40:08:1e:b2:24:
e0:4c:9f:c5:28:5f:29:c3:97:3d:14:f7:b6:2f:57:ad:5c:2b:
5e:f2:71:37:07:d0:aa:a0:18:72:fd:b8:f4:42:2b:e9:7f:0e:
4f:1a:eb:3d:82:1d:7e:3d:4b:d4:21:77:82:ed:7a:93:14:6b:
67:f4:78:fa:27:a0:e6:0b:70:51:38:21:b9:4a:c1:6e:3f:6f:
7d:67:58:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 19:48:51 2024 by rpki-client on console-fra.rpki-client.org