Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/Xha-F2UM-WIBgQaZj41FmCZejJU.roa
File: Xha-F2UM-WIBgQaZj41FmCZejJU.roa (raw, json)
Hash identifier: bCOmRblxhGxiUXtZsptDohRYczp5/p8t2xHv4C2kZZg=
Subject key identifier: 5E:16:BE:17:65:0C:F9:62:01:81:06:99:8F:8D:45:98:26:5E:8C:95
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 018CC8DE2951520C022C02CAD6CAE795D77A
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/Xha-F2UM-WIBgQaZj41FmCZejJU.roa
Signing time: Tue 02 Jan 2024 06:30:51 +0000
ROA not before: Tue 02 Jan 2024 06:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27418
IP address blocks: 199.182.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:29:51:52:0c:02:2c:02:ca:d6:ca:e7:95:d7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jan 2 06:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e16be17650cf962018106998f8d4598265e8c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:8b:db:34:00:51:77:a5:90:0a:e8:0d:33:
c1:b4:6d:3f:b9:aa:9c:01:ff:33:df:14:b3:6d:03:
8d:45:94:68:d7:47:43:20:7f:e0:1b:61:27:f3:68:
fd:7e:4f:f5:d5:ff:f5:d6:2b:b6:33:f5:c0:3f:e3:
b0:60:fe:e6:41:99:52:72:d5:10:1d:e0:71:00:90:
63:57:6e:3d:7c:3e:26:7c:0a:dc:5a:93:96:3c:22:
c5:10:8f:11:7d:65:58:24:f2:75:2a:1a:20:a1:bd:
79:fc:f0:4c:ca:0d:66:02:a3:ba:31:e7:77:fb:83:
63:0c:9a:93:49:fc:8b:de:5b:98:8b:06:e1:03:fa:
81:99:5e:d3:23:7e:43:77:4a:2f:69:67:f6:35:24:
8a:7b:16:eb:4b:79:6c:f4:13:8a:db:be:bb:66:04:
0e:3e:13:05:91:49:60:9e:ab:92:ba:e5:d5:12:b1:
0b:be:1f:00:fc:5a:83:52:e2:5e:ac:68:e7:b5:5b:
24:86:d5:08:95:61:3c:84:5e:56:12:91:23:e6:1e:
7e:67:c0:de:bf:d0:da:1a:47:69:ac:d6:1b:23:cc:
28:b9:9e:d3:64:6b:fa:83:00:77:e5:a6:72:2b:cc:
f1:ae:68:af:f3:cd:24:20:20:72:4f:2c:77:70:5e:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:16:BE:17:65:0C:F9:62:01:81:06:99:8F:8D:45:98:26:5E:8C:95
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/Xha-F2UM-WIBgQaZj41FmCZejJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.232.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b5:7b:1f:76:ea:cd:23:1d:f6:55:37:70:36:cf:6b:93:95:
37:ff:e0:06:f0:d0:16:78:86:14:fd:0a:3f:7e:b4:c2:63:8e:
5b:0a:3c:3d:4a:55:06:50:71:1c:64:12:cd:07:c2:39:13:87:
85:92:66:85:26:78:8f:fc:14:d7:34:5a:25:b3:a5:4d:c6:27:
37:2a:ce:61:35:c9:bb:08:1b:49:5c:51:66:db:3b:18:17:9c:
f9:6e:31:4e:95:43:98:84:1d:2e:a1:77:e5:ed:e1:c4:c4:23:
44:c1:45:aa:7d:0a:71:de:b6:68:c3:39:0e:eb:d1:1f:29:95:
0b:29:1d:2a:65:19:83:81:c3:6b:14:a9:78:0f:63:c4:7c:e1:
9a:2c:ac:89:67:b2:9d:ab:29:fc:37:f5:ad:37:70:3a:cd:ed:
e1:73:64:77:09:e8:88:23:4a:e6:27:bf:bb:70:ef:b7:cf:76:
07:c5:01:a1:a9:87:d7:75:25:ca:49:e9:51:9f:30:34:66:2f:
d9:f3:74:fe:24:fb:ef:f0:b3:28:d6:e7:4c:f4:81:4f:ab:1e:
f8:a1:51:c4:41:99:2a:aa:58:11:7f:0f:67:a0:9c:c7:20:f6:
06:74:9a:81:d0:22:cd:cc:1f:a9:30:16:6e:7b:7a:3a:ea:35:
4c:53:a5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:34:17 2024 by rpki-client on console-fra.rpki-client.org