Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/XWMwgNVvuSvdELsB9LlOwEf9_dk.roa
File: XWMwgNVvuSvdELsB9LlOwEf9_dk.roa (raw, json)
Hash identifier: M3uEnZ6HmEv9Ia5W1jvY+FRqYILuox8Kc1qGz9C//4E=
Subject key identifier: 5D:63:30:80:D5:6F:B9:2B:DD:10:BB:01:F4:B9:4E:C0:47:FD:FD:D9
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 018CC726A75731CB3E248D71CC9114819782
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/XWMwgNVvuSvdELsB9LlOwEf9_dk.roa
Signing time: Mon 01 Jan 2024 22:30:48 +0000
ROA not before: Mon 01 Jan 2024 22:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43853
IP address blocks: 185.254.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:a7:57:31:cb:3e:24:8d:71:cc:91:14:81:97:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Jan 1 22:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d633080d56fb92bdd10bb01f4b94ec047fdfdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:10:1c:fb:03:c8:c3:97:c3:d1:af:c8:56:07:
ef:5d:47:4d:e2:ae:fe:42:e6:7e:fb:1d:34:88:47:
d4:cc:39:ef:22:8e:03:75:09:bd:df:b1:13:ec:98:
69:b9:a5:09:27:ae:c0:50:c9:74:47:81:5b:22:83:
1d:e1:97:ff:ad:a4:3f:f4:2f:2d:5e:41:16:df:38:
a9:47:d3:b5:cb:4e:c3:ca:a3:02:05:32:2a:7d:57:
1b:a0:fd:2b:9f:5c:40:aa:6e:03:af:bc:51:43:b2:
15:6a:a1:3e:dd:d8:dc:3e:61:e7:e2:49:d7:71:01:
63:ba:20:56:b6:55:76:6f:ef:e2:2e:1e:b6:cb:ad:
95:b9:f9:96:23:b5:c9:0c:17:f7:e8:d7:5e:9f:ef:
83:58:d8:17:be:d7:2d:da:c2:3c:b1:83:b0:d5:8e:
3a:2c:60:80:88:11:4e:38:e5:22:54:05:4e:8f:d7:
93:92:6e:82:20:c6:87:b5:cd:1e:40:1b:10:b9:66:
9b:cd:78:38:49:e1:a8:ca:6f:2c:c2:cb:03:ad:5d:
f7:fe:89:4b:b9:2a:da:4e:86:70:a7:04:0f:f9:3a:
45:1a:db:0d:e3:08:72:65:c2:b4:bc:a6:72:d2:0b:
0b:27:83:8d:24:4f:a3:8e:25:d8:88:9c:01:fc:bc:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:63:30:80:D5:6F:B9:2B:DD:10:BB:01:F4:B9:4E:C0:47:FD:FD:D9
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/XWMwgNVvuSvdELsB9LlOwEf9_dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.80.0/22
Signature Algorithm: sha256WithRSAEncryption
58:25:de:1c:61:3d:4a:b4:89:94:ae:bf:8e:42:a1:ba:ac:f3:
3d:0c:35:5e:80:d7:a2:23:b2:e3:db:3a:6e:0d:79:aa:94:a2:
48:8d:c3:cf:70:e0:b8:f9:c6:0d:4e:3e:a3:96:3f:7c:0c:80:
81:95:ef:bf:14:10:6e:91:b6:3b:6d:5c:75:6d:8f:97:77:5c:
b6:e4:f2:ff:cc:d6:5d:60:b1:05:96:78:47:0f:7d:2c:47:9b:
a1:3a:7e:fc:9f:76:aa:70:df:f9:22:2e:34:26:30:e5:dd:eb:
08:07:49:6e:d7:47:fa:13:b1:8f:1e:da:16:96:bc:2d:e2:e3:
29:b7:e7:80:23:9f:de:1d:93:f4:32:e2:85:02:90:c8:7f:56:
1b:5d:54:e6:d2:e7:aa:e1:b3:a9:d8:6c:0b:67:10:2f:99:6d:
69:8a:a3:47:b3:d2:5f:78:ed:35:7f:06:c7:70:13:38:9e:11:
73:84:a2:bc:69:49:a4:a1:ea:68:6a:2e:8f:d5:fa:ed:22:12:
97:b8:b9:09:60:7a:db:84:7e:8f:31:da:be:5c:15:59:e1:e9:
cb:17:da:a6:1e:7c:39:5e:1d:d2:0b:c8:b4:d6:35:b0:a1:62:
32:28:84:5b:2e:44:90:50:4b:3a:c9:ec:9e:21:36:c2:d7:eb:
1f:54:c1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:44:52 2024 by rpki-client on console-fra.rpki-client.org