Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/w88GnLgGxSqx0uez0kXsHQN7UYU.roa
File: w88GnLgGxSqx0uez0kXsHQN7UYU.roa (raw, json)
Hash identifier: 1Tz2vHqmuWyA55C1HMS+GGbUytbn+ncfo64pHIXy0ds=
Subject key identifier: C3:CF:06:9C:B8:06:C5:2A:B1:D2:E7:B3:D2:45:EC:1D:03:7B:51:85
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 018CC8DFA578AB134C5277267D22AF36353F
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/w88GnLgGxSqx0uez0kXsHQN7UYU.roa
Signing time: Tue 02 Jan 2024 06:32:29 +0000
ROA not before: Tue 02 Jan 2024 06:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6900
IP address blocks: 195.203.156.0/22 maxlen: 22
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
195.203.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a5:78:ab:13:4c:52:77:26:7d:22:af:36:35:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jan 2 06:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3cf069cb806c52ab1d2e7b3d245ec1d037b5185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2b:59:52:11:74:f2:63:c3:53:00:31:0b:50:
66:a3:0f:e0:f9:7d:ce:96:5c:3b:69:15:d5:47:65:
ea:5a:e4:47:79:ce:c9:26:d3:b6:d1:f1:02:38:82:
86:45:d5:6c:15:df:a0:bb:96:cc:4e:a4:d7:c5:30:
6a:8c:95:5e:fd:ea:85:8b:34:14:73:79:2b:59:43:
98:f5:ab:53:d9:62:6d:4b:9d:5d:6e:ca:03:36:30:
0e:dd:ab:a8:03:26:fe:9b:01:f9:47:9b:f1:2d:13:
46:6a:41:6c:2b:8e:69:cb:76:2f:4a:96:3e:01:df:
3a:2c:72:26:fe:9e:1d:37:30:af:f6:f2:20:c1:e9:
e4:40:6b:69:e1:8f:9b:e9:b8:83:7c:a9:f7:e5:e4:
01:51:3c:d0:ba:b6:e9:4d:d4:3d:d7:26:10:ec:79:
e5:8b:88:73:87:9c:59:c7:b3:82:fb:49:57:1a:be:
d6:9a:d5:24:8e:c1:c0:92:1c:56:90:ee:3a:aa:ec:
26:5a:a8:db:25:e7:39:e2:31:c5:bb:6b:75:85:b7:
dd:55:4e:be:2a:a7:10:6c:d0:fd:b4:e6:54:d6:28:
bd:95:10:28:9a:d4:86:1a:3d:ec:35:0e:4b:9e:9a:
05:62:94:21:f8:ca:30:b6:44:f3:3f:b9:3d:74:e0:
cd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CF:06:9C:B8:06:C5:2A:B1:D2:E7:B3:D2:45:EC:1D:03:7B:51:85
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/w88GnLgGxSqx0uez0kXsHQN7UYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.203.127.0/24
195.203.156.0/22
217.27.4.0/24
217.27.6.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:69:58:40:d8:59:19:00:fb:f3:f8:e3:0f:97:5f:38:4d:60:
78:65:69:b2:b8:64:51:c8:3e:1a:30:49:c3:6f:b2:e1:61:6a:
f0:74:f6:5d:56:03:f5:b4:ed:6d:87:d9:cf:65:e6:a0:7e:c3:
93:54:3f:80:68:5e:46:37:45:f9:62:cd:3b:50:74:8a:df:f5:
9c:ff:7f:3e:2c:56:20:17:23:11:a5:e2:1c:1e:5f:b1:06:3a:
15:1a:ab:1f:2b:4c:d1:00:20:a8:ff:5e:56:73:66:a1:34:31:
ac:66:6e:f4:ac:1b:bc:eb:08:44:8d:5c:99:8b:eb:ad:14:22:
d5:b9:89:a0:c2:7e:1f:95:69:45:71:ca:30:f1:22:a1:61:22:
ae:a2:ad:83:48:f4:3d:f3:f8:f2:6b:86:cf:2b:da:54:0b:3e:
5f:b3:03:55:cd:4d:dc:85:66:33:98:dc:74:78:03:bb:91:5e:
78:e5:97:18:71:95:27:ba:fb:2e:fb:42:c3:1f:f6:78:1a:71:
7e:d0:50:51:08:0b:ab:43:35:8a:46:37:98:99:03:50:f1:e8:
60:54:fe:6b:6c:e5:24:48:d2:86:f7:2f:d2:0e:d8:9f:df:b1:
78:4e:84:6e:d1:22:01:ae:a8:bb:a8:d9:7b:47:be:96:4c:38:
02:bb:63:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:41:09 2024 by rpki-client on console-ams.rpki-client.org