Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/rc93pNFTBjGjAC6nmf525aEhOAA.roa
File: rc93pNFTBjGjAC6nmf525aEhOAA.roa (raw, json)
Hash identifier: cdwE6agCfPbskteVGx/ORgtRnUlt/7nlcYTxk4xtuw0=
Subject key identifier: AD:CF:77:A4:D1:53:06:31:A3:00:2E:A7:99:FE:76:E5:A1:21:38:00
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC406D94C474D81D70F82947ADFCBE
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/rc93pNFTBjGjAC6nmf525aEhOAA.roa
Signing time: Mon 01 Jan 2024 16:29:55 +0000
ROA not before: Mon 01 Jan 2024 16:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15754
IP address blocks: 195.208.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:40:6d:94:c4:74:d8:1d:70:f8:29:47:ad:fc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adcf77a4d1530631a3002ea799fe76e5a1213800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0e:cf:85:31:1c:e7:39:80:4e:34:5a:8c:5b:
a1:65:25:13:51:d4:d6:56:fb:a5:39:4a:fe:38:82:
51:78:92:ce:b3:fa:8a:c8:e3:ea:10:73:7a:3f:d1:
58:1b:a4:30:ec:3d:a4:5c:0e:8e:4f:8e:12:dd:35:
eb:08:6a:d1:8a:47:0b:80:49:93:dd:71:bb:fd:97:
76:33:23:8c:8c:b4:8b:75:1c:a2:b9:35:64:d2:67:
b4:74:69:66:0a:16:a1:f9:69:09:bd:57:ed:fb:aa:
67:9d:1d:52:55:24:f8:c2:f2:27:0d:66:a9:be:fb:
96:ed:3d:9f:13:27:06:59:dc:a3:8e:89:8a:3b:d5:
63:9d:94:67:ff:cf:ff:4a:1a:fe:23:f8:17:0f:1a:
73:42:1a:0e:d5:f3:a3:e6:20:e9:29:d3:72:9f:a2:
61:07:d4:cf:fb:ff:d5:77:75:88:b5:16:96:9d:38:
69:39:46:ed:9b:be:7a:b0:48:a1:20:81:d1:f0:c6:
cd:75:c0:b2:d5:b3:b3:c5:f9:91:97:dd:f7:0e:89:
92:eb:cd:fe:9f:f7:05:40:e3:0f:c8:94:e9:8b:e8:
9d:94:95:17:ae:eb:fb:8b:3a:de:11:e3:90:d0:4a:
98:e5:37:5d:de:5d:43:31:c1:3e:98:20:72:1f:5b:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CF:77:A4:D1:53:06:31:A3:00:2E:A7:99:FE:76:E5:A1:21:38:00
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/rc93pNFTBjGjAC6nmf525aEhOAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.98.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8e:2e:11:9e:99:cd:85:4b:ba:da:2c:4e:ea:ad:28:53:38:
fb:39:2b:c6:1c:9a:0f:6b:c7:e2:6e:70:3e:45:78:38:af:c9:
7c:4b:ab:dc:71:a1:92:3d:68:2a:20:5b:2c:dc:eb:41:34:c6:
82:d3:e3:22:9e:66:ab:26:99:f0:9d:bd:e4:cd:32:78:6a:95:
58:13:70:4b:11:26:16:55:71:1d:cf:54:d8:cf:5f:44:bf:33:
0a:f3:d5:ae:a2:81:94:87:5b:a3:c5:44:eb:cc:b8:cb:6c:15:
08:1b:e8:83:fa:e8:8d:43:ee:6d:61:22:ce:e3:fc:b4:c8:c7:
b3:71:cd:b6:f2:d8:96:03:7c:08:9d:1f:91:83:a7:eb:2a:a3:
b0:9e:cc:8f:c1:6e:42:b2:ed:55:4d:86:ae:4e:82:f7:b3:c6:
9f:5f:08:e0:9f:4e:1f:97:e7:63:1c:68:1e:b1:a9:c1:a9:50:
ba:09:2f:94:2a:7a:97:76:9f:9c:56:05:a2:9f:17:7d:d8:b5:
63:c5:ad:19:98:95:14:eb:77:cb:db:6f:2a:66:60:b8:d7:e0:
d9:37:83:32:e1:68:62:46:17:6a:1c:da:6a:1f:5e:1d:cf:e9:
0a:20:63:e1:f2:73:ab:dd:a5:0a:9e:8e:0e:98:9e:fe:5b:02:
6a:3b:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:52:03 2024 by rpki-client on console-fra.rpki-client.org