Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/aGNCZ9zqJs45LL3xvG6aYo9xpTw.roa
File: aGNCZ9zqJs45LL3xvG6aYo9xpTw.roa (raw, json)
Hash identifier: xPIJVm13TkOIfsUFOR2ovAO0Hoc1p63IBS2toZ9YPPc=
Subject key identifier: 68:63:42:67:DC:EA:26:CE:39:2C:BD:F1:BC:6E:9A:62:8F:71:A5:3C
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 018CC801644C0156121F0653A06DBB4985EE
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/aGNCZ9zqJs45LL3xvG6aYo9xpTw.roa
Signing time: Tue 02 Jan 2024 02:29:43 +0000
ROA not before: Tue 02 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41543
IP address blocks: 195.95.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:64:4c:01:56:12:1f:06:53:a0:6d:bb:49:85:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Jan 2 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68634267dcea26ce392cbdf1bc6e9a628f71a53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:a1:ae:cb:ad:48:61:52:dc:d4:c8:a3:1a:
04:5d:8d:34:76:ec:f7:ca:d9:79:57:a5:41:86:71:
55:28:1c:7d:29:c3:1c:32:b9:35:bd:0b:fe:db:c9:
72:61:14:95:2f:95:75:1b:66:55:06:68:d8:6a:ba:
35:fc:c9:c0:b4:68:32:0e:e9:11:22:e8:96:6b:63:
0b:a5:2e:db:c2:ea:04:45:fb:6c:b4:46:65:f2:7e:
e0:b3:39:f9:b3:96:3c:10:1c:a2:fd:c6:4b:7c:d8:
a9:fe:5d:91:66:05:33:7e:58:b3:66:de:96:aa:d3:
14:3a:f6:1c:ff:c5:67:e9:1d:bb:ae:0d:4d:fd:c4:
00:08:37:d5:9b:db:c7:71:a0:50:d4:21:3f:82:ef:
75:a2:18:a1:ca:88:a0:04:d4:f4:19:fc:4b:ed:bf:
47:dd:9e:f0:c5:50:31:4f:a9:64:62:b5:43:e6:a2:
f9:f7:1a:1d:85:4c:f7:a0:4b:9c:4b:bf:32:68:bd:
11:06:da:e0:40:4c:ac:ff:e0:0a:91:20:6b:ea:33:
91:93:4d:6f:5a:b3:53:dd:6f:ca:e8:bd:25:63:0f:
5e:06:e9:10:34:34:c7:1a:fa:b5:0f:30:0c:0c:78:
7d:8a:af:94:94:e4:7b:5e:46:6d:7c:eb:9e:24:4b:
c2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:63:42:67:DC:EA:26:CE:39:2C:BD:F1:BC:6E:9A:62:8F:71:A5:3C
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/aGNCZ9zqJs45LL3xvG6aYo9xpTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.158.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c1:3a:72:5c:96:4c:5c:aa:06:4b:ec:ad:68:cb:d2:3a:35:
87:4a:98:4b:5e:e5:a6:be:00:b8:3b:4b:f6:16:be:54:ff:11:
f1:09:a2:09:f0:50:d8:26:fc:cc:b8:42:98:5b:0c:1f:32:ea:
97:d5:94:d2:9a:92:f7:48:e3:80:4c:84:70:4f:06:35:39:46:
52:5e:70:09:77:2f:a4:4d:8e:c8:8c:85:a5:aa:f1:ac:07:46:
90:58:9a:7c:44:ee:f4:d1:70:9b:16:f4:14:cc:88:64:ff:27:
7e:04:c4:73:59:58:8e:ea:38:96:b3:83:44:e7:80:d1:d7:fb:
60:de:ee:06:d9:70:8b:7e:85:ed:a4:70:97:e1:7e:e1:79:20:
4e:64:5c:be:c6:b4:29:9f:2a:a7:78:10:37:58:19:e4:1f:f7:
cf:b7:09:d6:9f:28:df:76:b3:3a:c9:f8:60:78:3d:df:85:e4:
62:03:4b:3e:16:66:0c:bd:12:d1:a6:4d:b7:7c:69:e3:a4:dd:
83:8a:fa:26:b3:bc:91:9a:1a:28:ea:cf:fa:f8:df:ff:b7:60:
62:12:18:c2:9e:40:23:39:95:7f:13:d8:09:a5:9a:d8:1f:b8:
3b:39:99:d9:66:8f:ab:3c:de:c8:63:e8:92:2a:24:39:e8:b6:
53:0b:5a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:45:53 2024 by rpki-client on console-fra.rpki-client.org