Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/Ud5RI0MiR-qRK98jHOTqmZB-axg.roa
File: Ud5RI0MiR-qRK98jHOTqmZB-axg.roa (raw, json)
Hash identifier: NqbEG2/zI3jVdk9OR+5Jwnm6gH8X5ZXpsTLJC7tKOjw=
Subject key identifier: 51:DE:51:23:43:22:47:EA:91:2B:DF:23:1C:E4:EA:99:90:7E:6B:18
Certificate issuer: /CN=e964776cec62ef13a82a2165e6f8d47890d7734d
Certificate serial: 0191283F540432C67BA202F93AA9BA443A8D
Authority key identifier: E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/Ud5RI0MiR-qRK98jHOTqmZB-axg.roa
Signing time: Tue 06 Aug 2024 15:12:04 +0000
ROA not before: Tue 06 Aug 2024 15:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 195.26.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:28:3f:54:04:32:c6:7b:a2:02:f9:3a:a9:ba:44:3a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964776cec62ef13a82a2165e6f8d47890d7734d
Validity
Not Before: Aug 6 15:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51de5123432247ea912bdf231ce4ea99907e6b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:18:65:f7:75:e3:ad:aa:6a:de:01:55:d6:
f4:92:5e:a5:14:bd:6f:ee:8c:71:66:57:cc:ae:14:
43:e7:08:c5:f6:b3:eb:2f:84:9f:48:bd:31:ae:5d:
b3:86:f9:ca:f3:22:c1:79:f7:b6:1e:48:1a:1b:1a:
c7:6d:ee:40:8d:8c:6d:0b:a4:87:4f:0c:e4:18:bc:
49:0b:a3:42:c8:7a:39:46:8b:5b:78:4c:1c:e6:c6:
d9:69:cf:04:ff:5a:ca:ec:f8:08:bf:7d:a1:c2:11:
56:8f:c0:de:f5:c0:cf:ac:94:ba:f1:33:a8:86:91:
e4:af:4e:e0:ed:e1:68:ed:eb:79:10:13:57:76:55:
d3:e4:69:a8:88:7a:c8:6f:58:03:7d:e4:c1:59:0c:
10:60:74:15:65:ec:ad:15:f0:0c:a1:1f:f4:fd:ea:
3e:5b:72:71:e6:aa:cf:37:5a:73:08:c0:ff:f2:18:
90:e8:5d:40:13:13:fa:b3:f4:0f:6e:2a:f2:42:b5:
1f:cc:9f:fd:69:23:a9:92:21:f6:28:d2:be:60:d7:
c3:20:55:15:c1:09:10:8a:5b:e1:38:40:c3:d1:90:
69:61:ff:04:8f:cf:e2:50:61:d3:33:b0:d0:2f:82:
0a:ae:e0:4e:35:d1:dd:81:94:3f:cb:11:bb:6e:c9:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DE:51:23:43:22:47:EA:91:2B:DF:23:1C:E4:EA:99:90:7E:6B:18
X509v3 Authority Key Identifier:
keyid:E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/Ud5RI0MiR-qRK98jHOTqmZB-axg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.229.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a0:1b:d8:5d:b5:02:ec:97:13:0a:f7:8a:ff:0c:a2:69:57:
37:e4:14:b6:1c:9f:94:0e:01:5e:e6:02:f3:6e:aa:54:ea:38:
7f:34:bc:b1:c4:ad:4c:d7:49:66:fe:1e:75:2b:ce:ae:20:66:
84:62:94:71:ca:81:15:b1:8d:73:55:58:06:88:d8:c0:70:59:
2b:a7:0e:85:d2:fc:2d:ed:4d:1e:ce:d1:e2:5d:97:6f:4a:1d:
87:30:10:99:a8:1c:7a:e9:29:19:4d:27:5d:95:ca:4e:83:a9:
3d:1d:a2:23:19:42:92:48:20:4c:12:5b:da:79:9d:49:f7:fb:
de:17:da:2f:b3:87:af:e3:c4:39:72:2d:05:68:5f:e3:64:a2:
d9:1f:a9:82:c7:f4:6e:94:fc:7b:35:00:99:d3:3b:ed:ab:db:
43:18:b2:ce:dc:85:7d:82:24:4d:14:b8:0c:39:1e:25:2a:ee:
7f:2d:60:ea:50:b5:65:3a:1c:bf:d8:59:13:14:35:2f:3f:7d:
f9:d6:62:5a:4b:b3:ea:4f:88:5f:1a:98:d0:af:4d:f3:03:15:
34:48:2b:47:f6:49:ce:bf:1f:ce:b7:80:30:f7:a8:e1:60:4d:
8e:0d:65:7e:38:d6:eb:ac:aa:8b:f9:f2:3a:83:6f:e9:85:11:
79:62:69:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:56:52 2024 by rpki-client on console-fra.rpki-client.org