Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/xZkC6tTgeTDJy8TCRpFL_mCJJuc.roa
File: xZkC6tTgeTDJy8TCRpFL_mCJJuc.roa (raw, json)
Hash identifier: vkgapC9B5xXddyPo2B2w71Y+xViMwBZeUIzH7tf/mg0=
Subject key identifier: C5:99:02:EA:D4:E0:79:30:C9:CB:C4:C2:46:91:4B:FE:60:89:26:E7
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 018DC70AD82B2682BA7938288F0544FFCB54
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/xZkC6tTgeTDJy8TCRpFL_mCJJuc.roa
Signing time: Tue 20 Feb 2024 15:03:13 +0000
ROA not before: Tue 20 Feb 2024 15:03:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.227.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:0a:d8:2b:26:82:ba:79:38:28:8f:05:44:ff:cb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Feb 20 15:03:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c59902ead4e07930c9cbc4c246914bfe608926e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:03:25:af:29:41:3b:69:9e:93:19:a5:2c:
20:77:bc:e5:f7:39:97:8b:e9:73:33:17:89:d7:4a:
c2:29:19:39:a5:20:31:27:60:73:0b:ae:91:65:c9:
fb:d0:33:85:d1:52:48:4d:de:a3:e6:a4:7f:d6:a6:
c8:62:5a:b9:63:ee:a8:28:26:df:30:e9:3f:4e:89:
4e:2c:15:26:b6:55:71:bc:af:2c:d7:04:8d:2b:22:
a5:ae:92:22:be:63:a8:94:b7:d6:15:18:07:62:c3:
da:28:02:95:b8:a6:f3:9d:b8:58:0e:59:7e:62:b8:
ef:ee:6f:ea:42:c9:e7:ef:21:39:11:5e:9f:c9:a1:
15:6a:80:f9:e8:ce:46:71:d5:db:60:79:bb:21:9e:
89:07:09:1f:ce:0f:d4:c6:10:3e:c9:18:36:34:26:
fb:1a:4c:57:f7:7c:1d:21:8f:d4:ee:20:53:4c:c3:
8d:c4:1a:b9:a0:ae:06:0b:8e:eb:48:bc:5f:33:fa:
b1:66:78:56:10:83:8d:5d:0e:96:59:72:c4:94:74:
63:5a:01:7e:08:64:0c:c4:ab:ee:19:10:ba:83:36:
55:ba:34:25:61:fe:1b:39:83:2e:8d:37:ad:79:54:
fd:23:18:11:89:25:4a:7a:b9:b8:c6:55:35:32:9c:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:99:02:EA:D4:E0:79:30:C9:CB:C4:C2:46:91:4B:FE:60:89:26:E7
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/xZkC6tTgeTDJy8TCRpFL_mCJJuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.246.0/23
Signature Algorithm: sha256WithRSAEncryption
28:94:1c:da:cb:ce:dd:37:f2:a8:eb:7a:7d:66:12:7c:a6:a5:
b3:7a:42:43:94:e2:39:d0:cd:6c:35:31:f6:1f:c4:34:d7:03:
2f:c6:bd:23:79:f6:a4:f6:cd:43:49:c7:7c:ed:af:7b:4a:03:
58:7e:e3:d6:a3:5e:a0:87:50:ac:12:d0:78:67:33:de:55:74:
7b:04:e2:b1:0b:b3:5a:e6:f5:6d:c0:ad:b9:0e:1a:33:69:4b:
65:a1:bf:85:99:7e:a1:e5:f0:13:eb:fc:93:1b:b2:d1:d3:b3:
54:4f:0d:14:36:18:79:32:6d:3d:91:4b:a6:44:b9:c6:b4:91:
41:99:83:f8:8d:55:c7:b5:73:1f:af:0e:f6:b4:07:80:8e:b7:
67:8c:7f:08:3d:4c:63:a0:1f:26:da:f7:52:6a:a9:1b:48:5f:
4b:f0:78:ad:b0:51:fb:d2:12:57:2b:ec:0e:b9:99:b6:fc:8c:
50:3b:f7:e5:45:34:67:bc:5f:93:49:ce:96:18:45:28:c8:f6:
fa:79:fa:1e:f1:92:06:7a:de:ef:4e:8a:df:35:4d:60:72:de:
fa:10:02:e3:35:c2:83:01:79:53:10:ea:a8:5d:2c:5a:a4:a3:
41:ea:38:60:76:90:c3:da:94:a8:64:18:6c:80:ff:e7:48:89:
62:44:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:45:17 2024 by rpki-client on console-fra.rpki-client.org