Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/_BNdL1nkWsa1ge0tfXbjeDkuF-M.roa
File: _BNdL1nkWsa1ge0tfXbjeDkuF-M.roa (raw, json)
Hash identifier: c7iF/alcqxsVdwXvuSk3TMqbNVEzBa06GjA45r5qL3g=
Subject key identifier: FC:13:5D:2F:59:E4:5A:C6:B5:81:ED:2D:7D:76:E3:78:39:2E:17:E3
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 0190107AFECBEF3D8B561FD7794CE947B90B
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/_BNdL1nkWsa1ge0tfXbjeDkuF-M.roa
Signing time: Thu 13 Jun 2024 07:23:34 +0000
ROA not before: Thu 13 Jun 2024 07:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198247
IP address blocks: 195.94.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:10:7a:fe:cb:ef:3d:8b:56:1f:d7:79:4c:e9:47:b9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Jun 13 07:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc135d2f59e45ac6b581ed2d7d76e378392e17e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:69:a7:49:30:a1:6b:5f:8f:d0:31:1a:32:
f3:8a:5b:79:60:9e:3e:56:43:10:be:e0:8c:68:0e:
0c:d8:a9:08:65:ae:f5:b4:c4:96:e6:fe:77:38:a2:
cc:7d:92:3b:bc:97:ec:b9:ba:9a:a2:c5:22:71:53:
a7:c9:1d:a2:33:01:65:07:9b:a8:52:80:c3:37:63:
94:75:9c:e4:e3:f8:35:c5:9e:33:50:72:1b:c9:08:
ad:dc:27:17:78:3c:20:3e:82:6a:94:57:76:58:8c:
3f:a6:92:85:1c:f2:18:ea:81:fa:ed:a9:aa:a1:b9:
dd:06:84:ae:2c:d7:21:75:ab:e0:15:af:68:5f:8f:
0a:7d:7a:af:1f:27:8d:23:31:93:06:b5:3e:2f:67:
51:64:ee:2e:49:8d:96:d5:d8:ea:e7:d1:a8:59:df:
81:12:b3:5f:9c:75:c4:04:21:40:86:e5:22:cf:f2:
97:9c:02:70:dc:1f:02:d3:f3:d6:d4:b1:71:b9:08:
38:c4:eb:82:e7:8a:11:26:d4:f6:9d:2e:15:f9:1f:
e7:db:64:4f:93:0a:dd:20:37:8a:44:44:82:53:83:
4f:a1:dd:07:f8:0b:bf:f7:4a:94:86:e2:4f:a1:7e:
ea:03:cc:4a:f9:59:3c:7f:87:14:73:11:cb:07:82:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:13:5D:2F:59:E4:5A:C6:B5:81:ED:2D:7D:76:E3:78:39:2E:17:E3
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/_BNdL1nkWsa1ge0tfXbjeDkuF-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.94.28.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f2:b4:28:cd:a7:ad:9f:3d:24:cb:1b:8a:32:ea:a5:18:c2:
96:99:5b:74:51:0f:59:ce:d0:74:ff:bc:df:6c:ea:5e:f7:c7:
c3:36:a3:4e:19:7a:6a:0e:36:de:66:89:16:12:43:ba:fc:52:
19:4e:7b:bd:20:92:90:9b:50:3b:a7:ac:96:32:c6:5d:8a:db:
55:e0:c2:e4:0c:5e:a9:eb:5a:9e:fa:c3:3d:9d:54:17:76:5f:
39:6f:1b:2b:3e:cd:3c:08:fe:c2:8a:3f:f1:7f:fd:4b:74:4d:
ca:24:33:70:7d:c0:ad:90:ea:97:cd:cb:79:2e:81:e4:61:0e:
68:45:8d:9b:ce:88:e9:7b:cb:2d:f6:8e:c2:1f:3c:75:10:71:
ce:33:bf:b8:a3:12:30:a4:2e:2a:86:a7:d6:1e:51:dc:76:90:
2e:19:56:52:04:90:cc:78:71:08:e3:1a:ab:97:4d:2b:46:0a:
ad:f0:fa:3f:69:14:6a:b9:c2:3e:0f:51:4b:ef:3c:82:73:7e:
ec:71:03:14:08:64:00:9f:54:16:f5:54:a5:de:15:8f:8e:30:
7e:52:05:d1:50:80:aa:8c:96:eb:a9:5c:38:af:d5:dd:f6:07:
6b:60:f9:d9:00:6f:d9:69:89:b1:66:55:fc:a1:cb:7a:ed:62:
f4:17:0f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:32:10 2024 by rpki-client on console-ams.rpki-client.org