Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/RQ0BfzpaGwsYVSdAoJZamaW3rPw.roa
File: RQ0BfzpaGwsYVSdAoJZamaW3rPw.roa (raw, json)
Hash identifier: A3alCWCv6qpqzOxhvegt8WP2nyYh8DiV1AOFZiGsHFE=
Subject key identifier: 45:0D:01:7F:3A:5A:1B:0B:18:55:27:40:A0:96:5A:99:A5:B7:AC:FC
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 018CC500EF2AAE03E8B88A25CA91FCF534C9
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/RQ0BfzpaGwsYVSdAoJZamaW3rPw.roa
Signing time: Mon 01 Jan 2024 12:30:21 +0000
ROA not before: Mon 01 Jan 2024 12:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47268
IP address blocks: 195.216.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ef:2a:ae:03:e8:b8:8a:25:ca:91:fc:f5:34:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Jan 1 12:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=450d017f3a5a1b0b18552740a0965a99a5b7acfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:57:c6:d0:44:18:3f:b0:41:cf:bd:78:b8:
87:df:05:be:c3:d9:ab:de:96:2a:cf:ad:17:ab:a9:
ba:ff:98:45:2c:00:15:df:da:a2:1b:ed:1f:9c:d5:
05:be:d3:1c:9a:9d:9f:d8:af:89:ac:a7:39:b5:4c:
91:29:4b:21:fb:a8:fb:1e:6d:4d:ac:da:9c:8d:72:
83:91:49:34:77:99:6f:69:4a:da:cf:93:99:f8:97:
bc:ef:0d:a1:1b:f0:d7:0c:38:da:78:01:1e:02:19:
69:a5:e1:01:c5:29:50:ba:b7:bc:43:27:87:0d:4d:
f5:50:c3:41:6c:8b:d7:03:07:4a:b7:d3:92:70:ee:
6d:bf:06:87:4d:c4:36:fb:d5:09:12:18:50:73:9c:
90:3b:a0:5d:61:1f:9b:3b:b5:be:21:c2:9c:28:c9:
7e:7f:be:8d:76:59:4a:08:94:ca:a5:09:63:74:39:
86:64:9e:7f:58:24:db:61:df:c4:dc:7f:05:4a:3b:
ec:78:a3:10:db:27:77:a9:59:de:97:94:f6:18:b4:
00:92:c3:bc:24:bb:a4:57:e0:a6:6b:2c:80:be:a6:
c5:24:33:41:85:99:5f:09:8e:57:9c:a1:8e:e6:7e:
38:a5:b3:d5:07:14:d5:c5:8d:9a:83:34:15:55:3c:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0D:01:7F:3A:5A:1B:0B:18:55:27:40:A0:96:5A:99:A5:B7:AC:FC
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/RQ0BfzpaGwsYVSdAoJZamaW3rPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.249.0/24
Signature Algorithm: sha256WithRSAEncryption
57:91:29:d9:00:78:69:59:a8:70:c5:51:3b:c7:63:84:a0:11:
0d:7c:67:e8:e9:c5:b6:cf:c1:08:d2:3c:83:92:1a:4c:67:54:
d3:ad:d5:fc:0e:2c:69:f1:78:9b:c2:3e:34:1c:88:b5:24:d7:
80:a2:62:d8:e1:5a:4d:e9:aa:7c:73:92:04:c5:8c:62:fd:45:
d6:e6:10:89:38:ae:13:15:fe:e1:44:b8:02:00:9a:aa:d2:d4:
e4:66:23:4d:65:13:11:70:48:c8:d0:0e:d8:28:e2:8c:98:74:
b6:a3:c2:a1:7f:55:e7:f9:21:5d:24:b6:23:c2:97:69:3d:46:
f4:ab:fa:ac:44:be:da:24:8a:77:6e:2b:6e:21:cf:fc:fb:43:
d6:f7:af:0c:13:2f:c0:db:e2:22:71:5c:ce:e0:83:38:42:ea:
0f:50:3b:94:88:cb:b3:32:0b:50:bd:96:6c:f0:20:bc:1f:52:
d9:eb:b9:76:30:76:2f:fb:b8:ca:0f:10:05:cb:c8:ac:31:d0:
11:79:f1:80:c6:35:50:7b:89:92:da:54:f3:26:ec:c9:f0:cc:
54:32:28:a6:80:5c:ba:64:06:a1:b8:01:d1:37:cd:cf:a9:72:
26:5e:71:22:2a:ae:05:13:bf:9e:bd:9e:e0:1f:59:b3:2e:3d:
d5:68:09:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:10:59 2024 by rpki-client on console-fra.rpki-client.org