Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/7GmN22H1fQJ0qV-smZS7xh35BF0.roa
File: 7GmN22H1fQJ0qV-smZS7xh35BF0.roa (raw, json)
Hash identifier: UhdcptFBTuyVsKLwrO2rnwU3/Qtr9pJL4cUOsvLPi6Y=
Subject key identifier: EC:69:8D:DB:61:F5:7D:02:74:A9:5F:AC:99:94:BB:C6:1D:F9:04:5D
Certificate issuer: /CN=869035c317734f661bbf85c2184155a1f3616add
Certificate serial: 018CC6B8288A115D6ECFF4454F20FF24B933
Authority key identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/7GmN22H1fQJ0qV-smZS7xh35BF0.roa
Signing time: Mon 01 Jan 2024 20:30:06 +0000
ROA not before: Mon 01 Jan 2024 20:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41530
IP address blocks: 195.138.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:28:8a:11:5d:6e:cf:f4:45:4f:20:ff:24:b9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869035c317734f661bbf85c2184155a1f3616add
Validity
Not Before: Jan 1 20:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec698ddb61f57d0274a95fac9994bbc61df9045d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:80:30:3f:fa:5b:9f:23:bc:98:50:83:f1:
eb:70:e9:95:00:af:28:15:3c:4e:aa:52:ba:1f:66:
08:20:ef:13:a4:f9:f6:63:5c:42:cf:99:d6:e1:bb:
3d:6d:ce:c5:22:09:1e:8a:2f:97:5f:fb:27:27:d9:
ae:cc:2f:82:b7:76:16:1b:fb:33:d0:a8:44:f5:48:
f3:e2:49:9c:fc:4e:d1:f0:e6:a9:79:53:b2:ba:7d:
b0:e9:55:32:67:8d:2a:42:3c:85:fe:6a:60:66:94:
ca:7b:4e:5b:03:d3:3a:c2:a8:83:cc:b3:ef:aa:89:
5c:18:58:ca:55:6a:e5:74:6b:71:b4:95:af:09:cd:
73:d4:f3:e6:45:d6:ab:93:a1:3e:03:d5:38:1e:86:
7e:4b:ea:40:e3:44:87:51:f2:f7:52:15:f6:b3:93:
6d:ef:0b:38:5d:08:b2:e4:e9:c9:fb:60:ee:bd:2a:
9c:41:10:d0:43:ca:89:d3:b7:1a:9d:84:ed:9c:47:
46:2a:1f:36:ae:2d:dd:e7:19:67:85:ec:cd:de:3c:
70:5e:3a:47:2c:01:b8:dc:a5:51:12:b5:d6:48:d1:
72:42:7d:88:3c:8d:9f:19:6c:55:5f:e2:d5:bc:72:
58:fd:51:a8:fa:ef:28:db:1b:29:cc:69:56:f4:6a:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:69:8D:DB:61:F5:7D:02:74:A9:5F:AC:99:94:BB:C6:1D:F9:04:5D
X509v3 Authority Key Identifier:
keyid:86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/7GmN22H1fQJ0qV-smZS7xh35BF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.192.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8a:a1:45:bb:21:28:c2:48:41:85:d9:50:94:af:39:84:d6:
c7:1f:4e:1f:69:e9:7f:c4:f2:c8:41:cb:13:f1:8c:44:ae:21:
77:36:d7:d3:4b:54:b1:1c:12:d0:cc:cc:50:db:a8:9d:85:32:
d9:58:6c:26:62:72:d6:f6:de:47:3d:8e:87:29:e3:d9:00:8d:
2d:20:3d:af:ea:52:75:4a:b5:47:68:38:61:9a:0c:89:c9:ae:
7d:bb:08:e9:2f:7a:86:14:f5:58:fe:49:91:b6:69:4a:95:16:
36:96:8c:d7:4e:67:7c:77:0e:c9:2f:a2:5d:e9:c1:a9:58:7e:
00:63:9e:55:2c:0d:fd:85:0a:27:e7:44:a9:e8:fb:9e:3a:96:
44:0e:ec:53:49:d4:55:33:6a:2c:70:ea:d2:10:7f:52:be:ec:
55:de:d5:b4:93:4e:7b:a7:31:de:85:bf:e7:93:5f:4d:45:10:
2c:99:e1:a0:00:e5:23:53:c4:6b:78:ea:45:9a:06:40:0f:f5:
c5:f6:f7:81:b8:5f:17:db:fd:80:6c:41:ef:fd:f5:3f:2c:80:
71:3f:c0:b8:30:0c:eb:ae:cc:4a:8e:82:5e:c4:9f:ee:1a:7e:
d6:91:55:e6:f7:96:c8:8f:72:3a:aa:a4:0e:2d:23:78:be:25:
ed:30:37:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:36:46 2024 by rpki-client on console-fra.rpki-client.org