Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/gF0NkHy8wxS8qALBz3-yFYb2MF4.roa
File: gF0NkHy8wxS8qALBz3-yFYb2MF4.roa (raw, json)
Hash identifier: qMdxBjufNDC0GmAJyM8H1As+jKLA4ykOV0NHzlIxNRU=
Subject key identifier: 80:5D:0D:90:7C:BC:C3:14:BC:A8:02:C1:CF:7F:B2:15:86:F6:30:5E
Certificate issuer: /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Certificate serial: 018CC348D3B8BE183D526D7094C7506C59CD
Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/gF0NkHy8wxS8qALBz3-yFYb2MF4.roa
Signing time: Mon 01 Jan 2024 04:29:39 +0000
ROA not before: Mon 01 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41916
IP address blocks: 195.138.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d3:b8:be:18:3d:52:6d:70:94:c7:50:6c:59:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Validity
Not Before: Jan 1 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=805d0d907cbcc314bca802c1cf7fb21586f6305e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:6f:43:08:d3:21:f5:c6:f8:8b:a7:be:fa:
41:02:65:54:ea:3c:54:ff:49:9b:76:f6:78:87:80:
64:76:86:65:27:dd:58:e2:84:13:88:e1:fc:b0:a6:
ae:9c:32:c4:23:77:77:0b:0b:06:9e:61:62:d9:89:
4c:ce:60:c9:c7:ed:ae:52:e0:81:33:3d:75:43:72:
00:fa:5c:7f:50:8c:d4:bb:d8:ee:9b:7a:f0:0e:31:
5a:8b:93:17:06:23:1c:4e:d4:15:65:75:87:ee:aa:
f7:6a:ae:8c:df:82:01:9d:62:02:77:12:f1:04:f9:
b0:ec:2e:26:c7:02:19:8b:41:13:09:8d:52:f1:01:
47:4b:ac:a0:ed:8e:aa:b6:02:1f:72:f5:b9:43:da:
c4:6b:d1:c2:7f:5c:d2:85:20:7e:5b:df:a0:22:2c:
07:12:d6:e5:a5:c4:d6:43:78:36:7e:ad:e5:cf:eb:
6a:c0:e6:18:da:78:c9:9a:5a:0c:b0:a1:fa:dd:b0:
44:d8:fd:1d:4d:37:db:79:25:fd:56:b6:6a:c7:f8:
4c:43:41:73:aa:27:0c:6f:68:ed:0a:7c:83:ae:a6:
a8:96:31:44:30:9c:5d:a4:dc:70:f4:e3:23:f3:71:
bf:50:c2:9d:10:64:e4:63:17:51:f5:50:be:72:dc:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5D:0D:90:7C:BC:C3:14:BC:A8:02:C1:CF:7F:B2:15:86:F6:30:5E
X509v3 Authority Key Identifier:
keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/gF0NkHy8wxS8qALBz3-yFYb2MF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.196.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:da:68:b7:5e:7c:d5:5b:23:4d:f8:27:94:72:8e:67:d8:ac:
fc:4a:41:16:22:04:dc:df:ea:a2:96:78:54:99:a3:92:7a:83:
9d:42:c9:59:45:36:f8:01:99:4b:39:b8:42:63:46:33:46:52:
05:81:a0:3c:62:32:00:8e:af:b6:07:9e:65:52:4b:e3:5d:c7:
e4:fa:08:6d:44:57:bf:ca:a6:10:d3:43:3c:f2:24:e2:36:b5:
04:dc:1c:65:cb:be:63:eb:ed:78:fb:0e:cd:21:e5:c8:44:27:
86:73:51:60:df:22:a0:1e:b4:f3:eb:af:ef:10:17:0a:0b:f7:
f4:66:79:16:5d:12:13:fa:4d:d3:96:d1:1e:32:ec:7c:be:3d:
a5:b3:2f:28:a5:6f:0a:16:87:70:66:92:f3:13:3e:4a:95:fb:
5c:3b:c8:9c:b6:3b:6f:69:96:b7:7e:18:0d:0c:c6:a5:b6:ad:
dd:8a:1c:54:88:b6:6e:be:66:3a:57:21:b7:d3:36:f0:2e:ea:
52:ef:74:3e:ec:ce:18:71:60:cd:f5:92:3b:db:d6:e6:91:f2:
68:19:e8:4e:ac:cf:63:b9:e5:25:ce:5d:21:c3:d4:15:aa:8b:
7e:b8:06:c7:c6:0b:5a:6c:b8:9e:d0:2a:2f:9f:82:5c:ff:37:
33:7b:9a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:46:54 2024 by rpki-client on console-fra.rpki-client.org