Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/XrBZilY6q2UGO1H6oycisCcH4U8.roa
File: XrBZilY6q2UGO1H6oycisCcH4U8.roa (raw, json)
Hash identifier: tXH+pTE0M8JL6pSmI3Fltyegnea9lNEm1Z4tuBkDP2Y=
Subject key identifier: 5E:B0:59:8A:56:3A:AB:65:06:3B:51:FA:A3:27:22:B0:27:07:E1:4F
Certificate issuer: /CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
Certificate serial: 018CC56E3F746D492F430E2ADB8505D41A9D
Authority key identifier: BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/XrBZilY6q2UGO1H6oycisCcH4U8.roa
Signing time: Mon 01 Jan 2024 14:29:45 +0000
ROA not before: Mon 01 Jan 2024 14:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61023
IP address blocks: 193.162.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3f:74:6d:49:2f:43:0e:2a:db:85:05:d4:1a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
Validity
Not Before: Jan 1 14:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5eb0598a563aab65063b51faa32722b02707e14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:47:d3:e9:9e:1d:3d:1f:99:75:54:f0:86:af:
e4:40:f1:22:47:7f:ce:a9:4d:28:6a:31:ff:74:28:
34:e0:63:8a:23:27:44:f0:da:20:01:8a:21:52:ff:
9c:5c:d1:d9:8c:da:c1:c1:63:ea:e8:db:e9:e4:68:
f3:6f:19:52:92:ff:1f:5b:ef:3e:7f:ab:74:c7:f6:
fe:48:9c:60:4b:e2:95:85:34:26:8b:61:34:84:ff:
1a:21:9b:19:d5:b3:77:7d:05:ba:62:46:e1:e5:32:
17:4c:7c:9f:e4:6a:fd:05:ae:8a:ba:8e:84:09:db:
7a:63:e3:31:7c:a2:a2:bf:f9:dd:a7:16:d4:84:30:
0e:55:7b:9e:06:bc:28:e9:97:b3:ea:b0:45:45:29:
00:76:52:80:99:39:c6:04:76:fc:b5:8f:d0:97:1e:
bd:70:5e:f5:0e:0f:f0:8d:7a:a0:8a:82:04:54:0e:
68:b5:12:e3:e2:46:43:ba:2c:4b:bb:e5:83:7d:2c:
aa:36:5f:b6:89:7a:05:97:41:81:4a:5f:88:5f:0f:
d3:7e:ae:f6:1a:49:5a:1d:f1:dd:9c:4c:b0:b9:70:
6c:45:60:43:63:78:91:08:de:8b:fb:4f:f1:84:35:
99:08:fb:a3:09:7e:e6:c6:7a:58:9d:6d:da:61:3b:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B0:59:8A:56:3A:AB:65:06:3B:51:FA:A3:27:22:B0:27:07:E1:4F
X509v3 Authority Key Identifier:
keyid:BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/XrBZilY6q2UGO1H6oycisCcH4U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.103.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:46:80:c4:aa:a7:49:55:cd:85:69:dd:0f:e9:8e:04:3c:aa:
e9:13:46:3c:b8:1c:cb:fc:ac:76:78:f4:44:f2:3d:e8:1a:60:
d1:48:3b:2e:a4:5f:d3:7d:9a:12:ae:0a:52:07:a4:a2:2c:cf:
cd:52:10:7b:19:46:e5:ce:cf:6a:90:40:66:87:22:fd:60:a6:
68:9f:cd:0f:72:9d:15:ab:cc:cd:aa:41:b7:9e:e8:3c:2b:51:
ad:0e:ac:68:98:35:22:09:3f:43:23:6a:38:08:48:12:8a:54:
0c:5f:68:93:c2:ab:0b:71:aa:2d:2e:a0:8c:61:07:4b:54:65:
a8:35:16:10:2d:f6:3a:0e:cc:cd:c8:ed:01:a2:5a:00:d2:61:
c4:05:05:5f:6f:aa:7a:d7:85:67:b1:aa:f2:d7:a0:66:b3:69:
50:77:58:89:87:39:3a:46:3c:65:b5:0e:ff:92:6f:3c:6c:15:
25:2c:af:97:44:8c:05:87:bb:0d:7e:0a:55:b9:01:75:bd:25:
d7:9a:87:79:e5:d3:74:7e:fa:03:ba:be:89:5b:2e:05:d4:2e:
5b:df:35:5f:2f:a7:98:e0:f0:d1:b2:da:38:b8:70:43:a8:85:
7a:c8:c1:06:6e:38:5f:ea:b5:cf:03:91:e1:3b:02:d4:79:e8:
4f:51:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:38:32 2024 by rpki-client on console-ams.rpki-client.org