Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/A1egGZmLr6PXBoGnrKmChkACmC0.roa
File: A1egGZmLr6PXBoGnrKmChkACmC0.roa (raw, json)
Hash identifier: mQgAxOCkaYKqNdUdlY41WoUPnDLOcLS5zd7MjkZakXM=
Subject key identifier: 03:57:A0:19:99:8B:AF:A3:D7:06:81:A7:AC:A9:82:86:40:02:98:2D
Certificate issuer: /CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Certificate serial: 018CC5002D8697075B1AA6A6554BCCFC304D
Authority key identifier: 3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/A1egGZmLr6PXBoGnrKmChkACmC0.roa
Signing time: Mon 01 Jan 2024 12:29:32 +0000
ROA not before: Mon 01 Jan 2024 12:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 195.211.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/PsLCDWs6z4SALCt8oHIt63LGcLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/PsLCDWs6z4SALCt8oHIt63LGcLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:2d:86:97:07:5b:1a:a6:a6:55:4b:cc:fc:30:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Validity
Not Before: Jan 1 12:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0357a019998bafa3d70681a7aca982864002982d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:42:95:f9:79:61:69:10:66:8c:4b:22:0d:
25:53:cb:ad:fd:37:0c:5f:31:de:5f:9f:ba:45:24:
df:45:48:cf:aa:29:48:44:aa:a9:3b:d7:88:fc:65:
7e:ed:a8:cd:2a:fe:99:dc:d3:1a:d0:b3:11:0d:a8:
19:2e:de:60:36:d7:f2:41:15:ce:5f:11:f5:ff:34:
22:20:50:6b:93:f3:bd:8b:70:d3:f9:c8:99:8d:9f:
0b:9f:99:94:90:df:07:1f:c2:4e:ef:59:8b:ff:a2:
1b:ae:26:ba:a0:96:66:e6:76:02:0b:d7:27:fb:95:
d6:c8:89:82:41:b3:98:9b:6c:21:29:9b:b6:1d:0b:
66:d5:a7:9f:c7:b7:37:71:c9:4c:9e:b5:33:0e:f6:
f1:1b:84:90:77:41:a5:e9:fb:38:e0:e7:4f:00:7c:
5f:01:19:0a:78:04:3f:2a:fa:3f:14:3a:c0:9d:08:
dd:9f:0a:5a:2d:f5:b0:da:e6:1a:03:53:ad:d4:53:
75:9d:1c:17:05:a3:54:8f:67:45:17:5e:19:c3:20:
05:49:88:88:3a:a5:f0:b2:32:aa:12:99:55:16:d7:
94:6e:29:7f:19:40:d8:39:55:c8:17:21:98:80:5b:
bc:06:22:35:6a:8d:39:f6:de:26:a0:72:45:b2:a7:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:57:A0:19:99:8B:AF:A3:D7:06:81:A7:AC:A9:82:86:40:02:98:2D
X509v3 Authority Key Identifier:
keyid:3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/A1egGZmLr6PXBoGnrKmChkACmC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/PsLCDWs6z4SALCt8oHIt63LGcLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.167.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d1:63:69:9f:1a:81:25:17:fa:ae:10:c7:3c:ff:34:d6:09:
86:e0:a1:25:5a:cd:9f:f8:e5:d5:89:a2:fc:c5:df:eb:7f:f9:
b6:a7:ea:3b:51:af:ca:be:cf:f3:b7:13:35:13:1d:78:27:eb:
ce:0b:3c:dc:cf:a8:b9:34:7e:31:60:67:81:30:ff:f5:25:2a:
3c:9c:47:4b:bd:42:d5:8a:a1:d5:4c:f2:be:db:09:03:e1:c9:
f9:ee:a5:1a:ed:20:68:cb:e1:5b:ac:8a:2e:23:74:38:de:0e:
82:25:ee:b7:a7:4d:f1:31:2d:52:bf:0c:a8:a9:fb:25:73:a5:
38:0a:49:f1:36:ad:70:f5:21:55:e1:6c:ea:42:a0:4c:7c:ba:
71:4a:70:3b:08:8b:85:1b:6c:81:48:59:f8:82:9f:79:af:bd:
86:81:b1:aa:11:b4:be:0a:9f:61:de:f9:6c:3e:fb:8c:5c:ee:
d6:b3:f7:c3:c7:7d:4b:22:5c:ec:fc:a7:87:a3:2e:f6:c8:f2:
09:7c:3b:52:39:5c:7e:c2:e3:80:3f:f6:da:52:39:6e:a3:84:
de:15:49:fc:15:d9:2f:2e:23:47:86:f9:8a:5f:4e:8f:96:c9:
2a:1c:0d:34:e9:90:df:09:55:03:c0:af:f8:d6:d8:ff:ea:98:
87:78:35:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:38:41 2024 by rpki-client on console-fra.rpki-client.org