Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/AZKrSJ4KuuBNkd2upK6LMO4PyaI.roa
File: AZKrSJ4KuuBNkd2upK6LMO4PyaI.roa (raw, json)
Hash identifier: OOoX+rdfxR1kfXCoDhntYQq0HAJlkP1lMPUm0vDH5qE=
Subject key identifier: 01:92:AB:48:9E:0A:BA:E0:4D:91:DD:AE:A4:AE:8B:30:EE:0F:C9:A2
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 018CC4252DB8AA501EDE2829AF33A859D6B0
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/AZKrSJ4KuuBNkd2upK6LMO4PyaI.roa
Signing time: Mon 01 Jan 2024 08:30:20 +0000
ROA not before: Mon 01 Jan 2024 08:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58180
IP address blocks: 195.206.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:2d:b8:aa:50:1e:de:28:29:af:33:a8:59:d6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Jan 1 08:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0192ab489e0abae04d91ddaea4ae8b30ee0fc9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:ea:95:7b:f8:d3:ae:1a:c6:30:b9:da:c1:
1e:9f:99:26:4e:a2:47:42:b1:b3:a1:d8:0f:e0:65:
37:0d:94:b8:5e:3a:60:5c:ff:4b:09:d2:09:e3:e2:
36:30:df:7a:ac:f4:d4:b1:5e:3f:3c:b6:78:54:40:
c6:cf:80:45:86:54:33:b6:9d:f1:ee:c8:ce:e5:7e:
2f:9a:10:b4:1c:75:c7:17:6c:a6:d7:30:62:44:64:
a2:4e:1f:52:fa:9a:53:1b:8c:ad:20:16:16:c5:a5:
b0:cc:89:d5:8a:01:9d:99:c5:52:91:fd:23:a1:fb:
94:22:90:d5:bb:de:d9:da:d7:6c:5a:77:1d:79:a1:
71:f8:06:83:82:5e:a7:73:bf:c5:6c:eb:e9:72:9e:
23:35:52:5e:42:98:17:81:b8:77:82:69:b6:a2:23:
c4:58:a5:7f:6a:9f:b0:63:fd:ea:cf:f8:96:db:f8:
76:83:77:42:3a:0b:a8:53:03:04:76:57:64:a6:78:
4a:7b:ac:1d:a0:52:e4:68:01:8e:7d:11:b6:65:e4:
82:07:14:47:25:8b:c8:ed:f7:02:2f:89:34:e1:38:
18:e0:9b:74:cc:c2:70:d6:b7:d6:de:fa:38:f2:f9:
9b:8b:0d:4b:ea:d5:3e:20:fc:d6:74:ba:74:da:a5:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:92:AB:48:9E:0A:BA:E0:4D:91:DD:AE:A4:AE:8B:30:EE:0F:C9:A2
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/AZKrSJ4KuuBNkd2upK6LMO4PyaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.120.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b3:b2:ec:88:bb:d4:cc:7d:c8:d0:17:08:e2:af:8a:98:6d:
22:84:3b:a5:cf:69:ed:14:fb:a6:8d:af:3a:39:25:ff:1e:c5:
74:d8:07:0d:59:64:66:d7:42:43:69:cf:93:d1:e4:5f:6b:90:
4a:fd:89:4a:c1:4e:6a:d6:fa:25:5c:a0:46:15:d9:39:8b:cb:
43:2c:fb:c9:44:a1:77:5c:37:43:22:d0:82:3c:88:e4:b4:bb:
0e:94:37:69:e4:c6:9c:63:6b:df:a8:28:63:f4:40:74:f9:32:
14:fe:17:20:e3:93:f1:ca:bd:fb:62:5b:ae:8b:6c:04:97:1b:
c4:ef:51:36:51:f9:92:ce:80:d3:36:da:e9:01:d3:29:75:41:
60:c0:1e:20:0e:f9:12:c0:c1:fa:99:98:c5:6b:54:b4:1a:57:
7c:07:f7:bf:d8:51:30:99:67:1a:e8:86:05:ed:c7:ed:45:0a:
30:f1:1e:50:b5:aa:eb:8b:06:8f:c3:e0:55:ac:15:0b:e2:88:
53:aa:5f:1a:c1:ed:21:12:96:bd:17:c2:ed:a9:5a:c0:2b:01:
c5:15:e6:09:68:e6:ee:36:b7:e4:32:76:54:69:e1:95:2c:9c:
12:6a:63:58:b7:c4:3a:10:9a:ca:48:e7:66:f3:b9:7c:ba:8a:
f9:1b:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:10:48 2024 by rpki-client on console-fra.rpki-client.org