Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0dsUqEts4Tml8ASjI6Rk6Pa3rQw.roa
File: 0dsUqEts4Tml8ASjI6Rk6Pa3rQw.roa (raw, json)
Hash identifier: hNvfFw/C8fUZiw/RgaoeIVVr8sE62k3bX9SJBlCIdP0=
Subject key identifier: D1:DB:14:A8:4B:6C:E1:39:A5:F0:04:A3:23:A4:64:E8:F6:B7:AD:0C
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D3E3272295167A003467E80CCD459
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0dsUqEts4Tml8ASjI6Rk6Pa3rQw.roa
Signing time: Tue 02 Jan 2024 08:32:11 +0000
ROA not before: Tue 02 Jan 2024 08:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 195.178.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:3e:32:72:29:51:67:a0:03:46:7e:80:cc:d4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1db14a84b6ce139a5f004a323a464e8f6b7ad0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:14:53:9a:06:f9:09:80:f5:df:c2:33:04:
6d:2d:d1:6d:50:93:01:a8:7b:72:a0:c6:ec:d1:3b:
15:22:35:16:90:cf:b4:9e:88:71:2f:19:d2:cf:7a:
22:30:61:1e:04:24:db:c1:80:3e:f2:90:fb:9e:9c:
96:2a:b0:be:69:85:09:e1:4c:9f:81:07:eb:2b:ad:
0e:4d:81:d3:dc:05:58:79:a8:d6:05:f5:21:68:16:
e7:95:96:51:46:09:1f:73:90:49:19:9e:d1:03:b5:
9c:1a:36:9a:84:b8:e8:9c:cb:f3:0c:1e:75:07:39:
27:48:e4:08:c1:8a:2e:37:bc:9b:e6:4d:82:60:2c:
09:42:65:63:1e:00:d4:0e:da:be:fd:af:6a:b7:cb:
2f:bf:8b:4a:b3:95:77:e7:3f:df:cc:05:92:ba:03:
9d:88:fd:d6:68:f2:44:c6:23:10:bb:b7:58:be:8c:
d9:bf:8a:7c:75:9e:ce:9a:e9:4e:f9:0d:4a:f7:f4:
e1:2b:2a:98:3c:45:57:91:75:44:3f:de:9d:a0:76:
b3:3e:b7:92:f1:99:10:a9:4e:6e:0f:60:74:42:4e:
87:ab:fd:40:df:6f:68:c7:9a:aa:81:36:29:d4:b3:
3a:ca:b9:5d:83:09:4b:9e:da:cc:b5:85:13:e4:1f:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DB:14:A8:4B:6C:E1:39:A5:F0:04:A3:23:A4:64:E8:F6:B7:AD:0C
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0dsUqEts4Tml8ASjI6Rk6Pa3rQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.159.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:91:ed:06:ab:02:cb:e2:49:36:04:be:52:32:bc:6e:48:dd:
b1:09:19:6d:10:5c:c8:f3:f8:cc:d2:3f:ec:03:ac:cd:1b:de:
ae:8d:2d:23:35:4f:de:1f:b5:d1:ba:3e:f8:02:74:41:7d:3d:
59:62:63:14:1d:69:2c:fa:b3:21:17:24:8d:6b:97:c5:43:41:
cb:00:e8:bd:5a:42:c7:c5:e3:d3:99:9c:f6:ad:fa:ed:0f:4d:
89:b7:13:fe:52:b6:d4:f3:c9:0e:a4:c2:f3:68:06:47:6b:cb:
61:cf:73:a3:a9:c9:14:c7:1b:ef:e5:e9:cd:48:c8:ce:21:8d:
8c:6c:28:06:88:04:3f:67:76:0a:3e:a0:08:86:4e:c7:10:4e:
dd:ba:bf:79:00:a3:6b:9a:f9:b3:a6:a7:01:67:74:75:2b:da:
5d:75:b8:dd:db:3e:2f:e9:3d:72:54:3e:a1:b7:51:b7:43:1a:
81:ec:1d:85:3a:86:68:bc:fe:5c:e2:22:a6:38:7b:ad:9c:0d:
52:9e:cc:85:31:b4:67:0f:67:33:56:87:36:49:31:d7:58:03:
87:6a:af:1b:e2:80:51:a0:a0:e8:71:6d:e9:c0:30:fa:1f:27:
ad:01:f1:2d:37:f6:9c:ad:8b:f5:b0:0e:4c:2e:b1:83:bf:17:
81:7a:9a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:25:54 2024 by rpki-client on console-ams.rpki-client.org