Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/rdyKRLBeCuc5Ix0b_fe9lhvZm2g.roa
File: rdyKRLBeCuc5Ix0b_fe9lhvZm2g.roa (raw, json)
Hash identifier: TSYCnNvYsoyNnvglbIn4+4zMMwFn+FdP/D+w9xfUkx4=
Subject key identifier: AD:DC:8A:44:B0:5E:0A:E7:39:23:1D:1B:FD:F7:BD:96:1B:D9:9B:68
Certificate issuer: /CN=d34274c8fc397bdbc6c7585a15c83212b050221f
Certificate serial: 018CC79460F29B1E3528B3746CB9E3D90D7E
Authority key identifier: D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/rdyKRLBeCuc5Ix0b_fe9lhvZm2g.roa
Signing time: Tue 02 Jan 2024 00:30:39 +0000
ROA not before: Tue 02 Jan 2024 00:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8823
IP address blocks: 195.189.174.0/23 maxlen: 24
195.189.168.0/23 maxlen: 23
2a0f:53c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:60:f2:9b:1e:35:28:b3:74:6c:b9:e3:d9:0d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34274c8fc397bdbc6c7585a15c83212b050221f
Validity
Not Before: Jan 2 00:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=addc8a44b05e0ae739231d1bfdf7bd961bd99b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:9c:cb:ef:ba:3d:bb:ba:10:b3:15:76:be:
ff:17:1d:60:e6:df:cd:9a:94:6f:d4:cf:09:c8:aa:
db:9a:17:4c:cd:c6:c5:5c:1f:1e:31:ad:d3:2a:35:
30:b7:ef:4f:5b:b2:76:d9:40:31:8e:7a:65:2a:08:
8b:ea:f9:34:d7:65:32:24:e0:ed:99:9e:cb:21:22:
c0:aa:12:17:3d:41:1a:9f:a6:58:6e:0b:dc:3b:05:
d4:bb:e8:73:99:4e:47:6d:51:28:b6:40:8e:70:1d:
b5:b6:ea:6a:f5:86:9f:93:a8:81:48:66:e9:46:1e:
34:b5:81:fe:3c:53:76:1e:59:35:6f:49:4b:13:32:
7b:0b:f9:65:23:9f:68:7e:10:54:1b:82:f1:2e:75:
6f:7e:47:ef:0f:3b:f8:5c:c2:84:ba:90:31:d6:9b:
1b:d0:52:47:43:1a:08:15:7c:44:25:bf:a1:fa:f8:
d5:d2:e6:96:b4:61:a9:6f:59:56:2b:37:99:b7:76:
f7:b9:85:11:38:5e:d5:0c:f7:4f:93:d3:56:9a:18:
f6:7f:ba:bc:19:da:c5:85:f8:1b:e4:0c:61:4e:1b:
b8:47:97:4f:78:e2:90:3e:4b:b2:55:37:ca:fa:18:
cb:4d:ec:81:f4:9f:1f:65:60:fb:6d:3b:7b:82:4c:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DC:8A:44:B0:5E:0A:E7:39:23:1D:1B:FD:F7:BD:96:1B:D9:9B:68
X509v3 Authority Key Identifier:
keyid:D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/rdyKRLBeCuc5Ix0b_fe9lhvZm2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.168.0/23
195.189.174.0/23
IPv6:
2a0f:53c0::/29
Signature Algorithm: sha256WithRSAEncryption
98:45:eb:a2:b6:6d:79:2d:af:37:c2:11:ec:80:79:ce:ae:0e:
a5:c7:3e:d7:75:04:a1:72:86:06:ea:67:44:ea:fe:15:3c:cf:
db:7e:44:50:5d:d8:b7:80:0d:a6:5e:6a:45:8f:70:fb:c1:e0:
ab:d5:0b:1d:c9:86:38:0e:d7:d0:c4:b9:0e:28:e8:87:64:be:
8c:38:c7:20:36:d6:0c:11:7b:dd:8f:0e:fd:3e:c1:d0:43:cd:
89:6f:d5:84:21:ac:98:7b:cf:3d:0d:70:70:d8:26:f1:18:de:
ee:68:7a:b2:30:00:2a:b4:59:51:3e:75:1e:05:10:eb:67:8e:
f9:eb:30:e5:31:87:ab:04:5a:9a:28:b9:0a:e6:5b:09:c8:d0:
4a:dc:0c:7e:98:87:e9:a7:a4:19:db:85:82:97:28:c8:99:fc:
26:1a:6e:ec:3e:e5:37:12:69:66:bd:7a:93:3b:8d:0a:8b:5f:
d0:de:40:c6:5d:41:18:96:1b:b4:b2:02:b1:40:d1:31:d5:5b:
b7:ae:c5:51:28:4a:42:d7:81:01:68:62:7f:1c:fa:95:36:4c:
dc:4b:b6:68:8e:e1:c3:9d:28:c6:88:bd:41:5d:54:e9:c3:52:
4d:90:47:e2:b7:f5:6c:1b:20:69:2c:60:7f:fb:72:fa:99:c4:
40:c6:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:51:48 2024 by rpki-client on console-fra.rpki-client.org