Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/D-hbNEgkDbtPfZRe3cRmvOPt04s.roa
File: D-hbNEgkDbtPfZRe3cRmvOPt04s.roa (raw, json)
Hash identifier: OjWnRxHjyrFtjznIpjXh/JaOqbs197KzEhvJRHqSgsE=
Subject key identifier: 0F:E8:5B:34:48:24:0D:BB:4F:7D:94:5E:DD:C4:66:BC:E3:ED:D3:8B
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 018CC94DC34E5FB9FA95A9AB7D144CF63740
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/D-hbNEgkDbtPfZRe3cRmvOPt04s.roa
Signing time: Tue 02 Jan 2024 08:32:45 +0000
ROA not before: Tue 02 Jan 2024 08:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31863
IP address blocks: 195.216.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:c3:4e:5f:b9:fa:95:a9:ab:7d:14:4c:f6:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jan 2 08:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fe85b3448240dbb4f7d945eddc466bce3edd38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:22:16:73:49:de:c0:4b:5e:56:84:bf:91:4d:
1a:9f:4c:65:52:f0:da:2f:41:ad:0c:35:73:32:9d:
16:dc:bf:9b:e4:c4:d1:16:ca:73:7d:cd:2d:e5:43:
fe:f3:72:ad:da:94:ba:ad:d1:4c:66:b2:89:24:f3:
de:2f:57:c5:45:6a:aa:dd:66:27:b0:4c:c6:d7:dd:
e6:c4:70:cc:b9:20:eb:e0:c6:4d:ee:dd:ba:9c:2f:
f1:d5:63:9b:0c:c5:8f:76:74:d6:08:2e:d7:35:18:
b9:6d:df:cd:86:66:da:f8:59:59:e3:34:20:83:3a:
a0:79:8b:97:2b:45:3a:f3:1d:35:27:cf:36:a6:e9:
13:d3:b4:d4:ce:36:34:08:88:40:cf:11:eb:25:30:
be:33:0c:dc:a9:2f:50:a7:cb:20:17:25:05:4c:24:
17:6b:c8:08:f5:3e:84:f2:b6:e4:82:8a:3c:91:8c:
0a:03:44:fb:a1:31:6e:02:8d:22:50:72:d8:4c:fa:
81:ae:df:1f:94:af:8b:c9:1b:81:ee:83:d3:4d:14:
4a:f0:43:3e:8b:71:57:3e:f0:88:16:be:94:ee:21:
a0:6c:da:ce:9a:68:00:41:7a:1f:ed:be:d2:6f:f6:
c0:bd:87:b0:28:95:57:18:fb:ff:7b:05:ff:25:05:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E8:5B:34:48:24:0D:BB:4F:7D:94:5E:DD:C4:66:BC:E3:ED:D3:8B
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/D-hbNEgkDbtPfZRe3cRmvOPt04s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b7:d7:16:43:80:e7:db:4c:d1:61:79:29:36:48:5e:f4:b9:
29:f4:bd:58:ec:ab:47:ea:fe:b6:aa:e0:7e:99:4f:36:89:48:
f0:5e:9f:c9:44:e5:c2:da:8b:c6:fb:4e:8c:14:9f:2d:33:fd:
d5:07:0f:35:35:6a:27:ef:bb:3e:1e:0d:34:93:8d:37:77:7b:
f2:22:2e:4b:dd:20:e4:25:b2:64:59:b4:92:e4:e9:d7:df:56:
d9:f4:5f:6f:7d:07:ce:a4:09:ae:1b:3b:b5:e3:2e:df:20:21:
36:60:77:03:55:43:56:ef:29:b4:a8:3b:dc:14:bf:f5:3c:f7:
06:49:ab:5e:69:ee:65:48:fd:f0:22:c6:80:e0:7d:96:14:be:
99:c6:72:f2:ee:7e:be:52:2c:b5:71:4e:b4:05:c9:d0:47:c1:
e6:22:ed:38:25:f3:b5:1a:97:cd:cf:a6:2e:cb:e1:05:2a:3f:
30:63:71:a1:d8:2e:78:47:6b:e3:28:aa:30:68:67:f4:aa:40:
f3:2a:b1:08:d7:3b:ea:7b:75:ae:eb:1d:0d:ee:8d:ab:35:3e:
81:87:a8:62:98:be:be:e4:13:03:c9:1a:01:07:14:ae:7d:6f:
2d:9d:c8:cd:0e:11:87:f9:55:94:1f:c5:47:81:26:db:91:9b:
c9:e8:d8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:50:32 2024 by rpki-client on console-fra.rpki-client.org