Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/7FbcCSTUohUZkrk8-PnBGbJ_8Hs.roa
File: 7FbcCSTUohUZkrk8-PnBGbJ_8Hs.roa (raw, json)
Hash identifier: sO5C+3foD0pQMBJ7ClDoNlsFfaxLEJJEawMkzg/BgwI=
Subject key identifier: EC:56:DC:09:24:D4:A2:15:19:92:B9:3C:F8:F9:C1:19:B2:7F:F0:7B
Certificate issuer: /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial: 018CC79525B7B1957A039FB13F2F35A39C97
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/7FbcCSTUohUZkrk8-PnBGbJ_8Hs.roa
Signing time: Tue 02 Jan 2024 00:31:29 +0000
ROA not before: Tue 02 Jan 2024 00:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40985
IP address blocks: 195.189.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:25:b7:b1:95:7a:03:9f:b1:3f:2f:35:a3:9c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec56dc0924d4a2151992b93cf8f9c119b27ff07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b6:16:43:3c:f4:ac:55:87:23:b0:d2:4d:61:
f6:b8:a8:0c:56:0e:fa:95:db:c7:48:a1:6f:90:ad:
e8:6d:27:7c:1f:f9:59:cf:24:2b:fd:1e:49:64:0a:
6a:00:a1:e8:a1:b2:36:f1:03:29:ea:b6:d6:13:e8:
7a:bc:67:36:59:6d:4f:42:be:93:50:d1:85:19:5b:
a0:d8:b2:61:4f:44:ee:6b:2b:88:3d:4d:b4:f6:4a:
62:9b:85:b9:c7:86:2f:85:ba:ad:67:e3:84:c3:0b:
be:42:b1:be:e3:ba:c0:93:57:f2:c9:55:01:d0:b4:
fb:83:b8:1e:ab:96:9a:9e:8f:08:fa:cf:3b:25:8f:
df:6a:e3:ae:b5:98:0c:4c:a4:68:84:ab:0e:ab:82:
16:3b:ed:ae:5a:a9:a4:3a:f2:ab:f9:d9:e0:7b:9c:
a9:78:75:9a:ec:50:d1:ad:63:9e:69:77:20:2c:bc:
de:f6:dc:0e:ad:39:81:39:6a:ef:1e:72:e8:b8:72:
be:13:c0:10:dd:b5:a9:36:3b:e6:ae:c1:a6:b9:a0:
98:b2:50:a8:31:a8:a1:8a:ba:36:7c:d4:dd:02:27:
a0:d9:a0:a8:f5:45:81:ee:86:32:0c:41:ff:ab:81:
6e:13:28:16:32:a4:8a:1f:04:e2:07:16:41:73:50:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:56:DC:09:24:D4:A2:15:19:92:B9:3C:F8:F9:C1:19:B2:7F:F0:7B
X509v3 Authority Key Identifier:
keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/7FbcCSTUohUZkrk8-PnBGbJ_8Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.216.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:6d:03:c0:9d:11:1f:1d:2b:8d:7e:86:52:48:0f:6d:1a:8b:
07:a6:31:b8:8c:83:d9:28:86:2c:1b:ef:e7:90:7a:2b:2e:71:
33:5b:de:21:e0:a8:2d:8e:bc:b9:c3:ec:e6:fa:42:24:e5:a4:
a3:c7:d0:a5:3b:ea:74:30:04:90:9c:d4:77:02:66:60:c6:04:
72:71:80:5c:4c:99:7e:2e:1b:67:27:dc:b9:76:d7:01:9a:17:
ad:85:35:53:6a:d5:e9:ab:cd:74:f3:16:b6:60:bf:e3:74:39:
46:de:a4:81:e0:b2:f3:04:91:98:99:96:0b:9a:37:92:71:c6:
c9:9a:0b:62:6d:6d:93:89:75:14:75:d9:f8:48:96:1d:25:3e:
f4:c1:2e:21:05:c2:72:64:b8:23:9b:a6:b8:d5:28:70:bb:d5:
02:70:c4:6c:8d:de:b0:4f:dd:1c:22:e7:2d:1f:00:70:97:91:
f6:38:4a:22:79:df:61:99:17:77:8e:20:a1:9d:18:e2:3b:fd:
c8:f5:38:8b:23:59:a3:f7:03:2f:50:ea:be:ea:88:a4:fb:90:
08:b1:de:b0:4f:db:8a:74:4b:10:09:57:77:7b:65:4f:73:72:
13:99:52:6d:95:7c:2d:aa:98:fa:93:33:5c:d2:5f:2b:e4:8f:
20:c2:34:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:51:53 2024 by rpki-client on console-fra.rpki-client.org