Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/x5b-MszIuT__xaih10u6UlXj4n8.roa
File: x5b-MszIuT__xaih10u6UlXj4n8.roa (raw, json)
Hash identifier: hlJTpozm0LKwLpzR7XrZPgKAyWczpeqwPQljFAC43Ks=
Subject key identifier: C7:96:FE:32:CC:C8:B9:3F:FF:C5:A8:A1:D7:4B:BA:52:55:E3:E2:7F
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018CC5DC9FA0AB83F91036FB7F023A7E06BE
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/x5b-MszIuT__xaih10u6UlXj4n8.roa
Signing time: Mon 01 Jan 2024 16:30:19 +0000
ROA not before: Mon 01 Jan 2024 16:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211922
IP address blocks: 164.215.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:9f:a0:ab:83:f9:10:36:fb:7f:02:3a:7e:06:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 16:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c796fe32ccc8b93fffc5a8a1d74bba5255e3e27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:fd:ca:61:41:62:e0:e1:72:a1:b9:5c:92:
39:c5:00:ff:ee:45:bc:73:51:fc:ce:cc:6b:8b:24:
5d:7f:05:e2:45:5a:88:6d:ed:5e:99:79:e9:f7:7c:
5e:7f:25:df:0a:15:29:04:2f:ac:12:c9:88:68:1b:
b4:d0:8c:82:26:cc:c7:03:88:31:52:0c:4d:94:cf:
11:03:ba:f9:af:51:47:f4:9e:5b:12:a2:fe:60:c3:
03:c8:20:d5:44:e1:fa:f1:77:62:8d:0d:ca:6f:44:
2e:8c:95:6f:b9:4d:be:4c:7c:83:65:76:16:8a:d1:
d0:8e:02:af:3f:41:fd:c9:51:02:ab:f8:5f:c6:2a:
07:da:8e:fb:1e:01:13:98:c7:d5:0d:8c:2e:f6:19:
5d:33:76:ff:78:fd:b2:1a:b2:6e:6b:db:ba:6c:f1:
35:7b:90:ab:14:e6:4f:c6:d1:24:45:7f:49:88:b7:
e3:02:c9:16:77:8a:da:53:e8:6f:8d:ee:c5:a3:8f:
86:eb:83:79:43:60:e0:f5:52:46:3a:70:e0:18:fa:
9d:2e:13:87:5b:63:08:cf:4c:96:ef:e8:58:c6:45:
b4:67:f8:0e:54:d3:35:85:5a:7e:1b:38:22:da:0a:
ab:52:ac:05:7d:48:e4:9c:7d:0c:69:26:03:5e:b6:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:96:FE:32:CC:C8:B9:3F:FF:C5:A8:A1:D7:4B:BA:52:55:E3:E2:7F
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/x5b-MszIuT__xaih10u6UlXj4n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.99.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:97:67:a1:93:23:4b:96:0a:68:b6:99:36:d7:a5:19:69:2c:
df:7d:62:a1:22:c9:b4:5a:51:75:97:1d:78:48:35:b9:5a:d1:
a3:d7:cb:36:9b:81:aa:3b:55:7f:1b:5f:1a:cf:d8:bb:de:af:
c3:49:ae:ed:14:95:58:38:27:32:17:bd:74:ef:91:97:32:d9:
a7:a5:08:59:28:41:b3:74:0b:43:9d:3f:18:18:9f:68:09:93:
65:05:be:07:9f:56:f4:33:b0:45:71:c9:36:cb:2e:ac:b3:80:
63:3d:ba:c6:53:29:12:37:75:91:fe:81:f9:e8:c8:42:fe:53:
2b:7d:32:14:35:46:04:55:27:9c:46:d5:db:a9:2f:26:a0:fc:
37:f7:1c:7e:75:0b:a1:85:4a:6a:0a:f8:ba:3e:3c:8c:9a:2c:
f7:55:32:4a:28:c8:59:56:0e:2f:18:3d:3a:94:b7:97:64:c7:
d2:b7:6e:6c:64:45:83:26:2e:32:f3:b5:2d:62:95:c2:f5:d3:
3f:a9:e5:94:ee:92:6b:ef:39:7e:0f:d3:79:1f:7f:9b:50:0b:
11:97:4a:15:ab:b4:60:55:e4:96:f7:ab:00:00:7d:56:3b:8c:
a0:ef:64:cf:9f:b6:ec:74:dd:e5:00:d9:63:da:26:40:3b:46:
50:93:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:18:45 2024 by rpki-client on console-ams.rpki-client.org