Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/cSBjnQGZQegMxCo5RpCEuIljDw0.roa
File: cSBjnQGZQegMxCo5RpCEuIljDw0.roa (raw, json)
Hash identifier: gv7hFj6A4WSSufuw/wNBgtSBGdndtesGwDv0AFCtHZ0=
Subject key identifier: 71:20:63:9D:01:99:41:E8:0C:C4:2A:39:46:90:84:B8:89:63:0F:0D
Certificate issuer: /CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Certificate serial: 018CC3B681EDF8EFDCF67F34C8F368B136D1
Authority key identifier: 86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/cSBjnQGZQegMxCo5RpCEuIljDw0.roa
Signing time: Mon 01 Jan 2024 06:29:27 +0000
ROA not before: Mon 01 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207753
IP address blocks: 195.246.254.0/23 maxlen: 23
195.248.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:81:ed:f8:ef:dc:f6:7f:34:c8:f3:68:b1:36:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7120639d019941e80cc42a39469084b889630f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:03:df:af:7a:2e:c8:03:b8:2e:18:cf:d2:
4e:99:44:0f:75:57:7f:2c:5e:17:1d:56:81:4c:fb:
ea:d0:ef:56:52:56:71:36:a3:5c:cc:97:47:66:51:
c5:42:cf:c0:b9:95:20:5c:ab:68:37:d7:dd:e6:69:
be:18:9c:bd:67:bd:fc:ee:27:fb:c1:de:b0:c6:b6:
11:fe:2c:a1:45:df:51:f2:6f:01:0c:42:0b:32:29:
9f:85:00:ad:c2:67:bb:24:52:38:44:63:d1:89:e3:
e7:85:05:96:a5:81:d3:eb:29:e9:69:a4:10:15:e7:
89:4f:82:07:32:f9:51:30:e4:9e:0e:a1:77:0c:ab:
93:68:1a:f3:a5:46:3b:2a:7b:c6:53:28:9c:3f:16:
e0:e5:d8:24:66:89:13:17:1e:1f:9e:99:ad:31:2a:
fb:ef:55:90:77:4b:23:32:b5:63:b3:b1:89:43:84:
29:eb:41:49:0d:52:a7:d1:fe:aa:84:2a:d2:e2:8e:
c8:8a:6c:4a:e0:ff:b0:e2:db:b0:64:57:1a:dc:12:
6e:5e:91:6f:60:51:ff:da:df:c5:f0:7e:bb:0a:6c:
f8:f8:e2:52:5f:3e:ca:b2:12:2a:c4:8e:c4:6b:8c:
6e:1b:92:a1:e6:38:f0:7b:ea:c4:86:3e:63:65:a2:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:20:63:9D:01:99:41:E8:0C:C4:2A:39:46:90:84:B8:89:63:0F:0D
X509v3 Authority Key Identifier:
keyid:86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/cSBjnQGZQegMxCo5RpCEuIljDw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.254.0/23
195.248.244.0/23
Signature Algorithm: sha256WithRSAEncryption
23:36:bd:15:22:bb:fd:03:3d:8d:8b:eb:42:cd:e6:ae:ca:86:
19:b8:8e:c5:7e:d3:69:7a:08:45:81:19:65:9b:0b:89:c0:b1:
45:84:58:2c:c7:72:40:38:a7:0b:19:0d:63:0e:d9:9c:30:58:
78:45:0b:f8:fe:2f:81:da:7a:a0:70:8a:73:51:90:f1:d5:61:
9f:a2:8a:bc:e6:5b:a2:21:16:71:ad:41:f4:b9:df:1e:3f:0c:
7b:61:c6:6b:b2:bd:14:92:d8:ca:ba:52:27:1c:35:56:59:5f:
7f:2e:92:89:4d:74:94:e6:9e:9b:a7:f5:bf:0e:9c:f1:d6:c8:
fc:1f:f7:13:b2:e8:68:23:16:99:3f:bb:1b:bd:03:73:2e:79:
39:36:28:c4:d1:99:d2:34:86:46:52:88:a9:02:a4:e4:de:77:
c1:08:72:9e:fd:a2:3c:75:14:91:dc:23:d9:04:96:6f:89:17:
db:f8:d8:2d:5c:f2:3e:cf:6b:05:91:82:1f:e3:d5:46:5b:c2:
a8:19:9e:60:cd:e7:dc:dd:44:41:38:fc:5c:5f:b4:fa:29:be:
d3:e9:39:5c:ab:15:f0:60:ef:8e:ce:4f:9e:56:9a:76:23:11:
16:6d:d0:18:77:9c:17:1f:01:f9:ab:6a:6b:24:90:d7:c3:64:
01:a1:fd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 11:27:57 2024 by rpki-client on console-ams.rpki-client.org