Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/v5W2ImvB0kNxxVRdWN6Z1MI5TzI.roa
File: v5W2ImvB0kNxxVRdWN6Z1MI5TzI.roa (raw, json)
Hash identifier: H47apWI+TT0yPUVTzrkt8goqW0UOOxyfYv2GxH5Pxas=
Subject key identifier: BF:95:B6:22:6B:C1:D2:43:71:C5:54:5D:58:DE:99:D4:C2:39:4F:32
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01930A9ADCEA63144EA9718AE42A606A13D5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/v5W2ImvB0kNxxVRdWN6Z1MI5TzI.roa
Signing time: Fri 08 Nov 2024 07:09:01 +0000
ROA not before: Fri 08 Nov 2024 07:09:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395839
IP address blocks: 195.133.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0a:9a:dc:ea:63:14:4e:a9:71:8a:e4:2a:60:6a:13:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 8 07:09:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf95b6226bc1d24371c5545d58de99d4c2394f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:25:69:c5:a4:6b:af:ce:f1:44:a8:02:58:
f0:28:fe:1f:76:0b:86:53:c8:9b:e5:4d:18:90:a2:
2f:85:f6:14:30:e9:11:cf:1b:bd:bc:80:b2:a3:19:
8d:1c:68:5f:0e:7e:77:48:48:c5:99:ec:aa:46:9a:
c2:49:d5:21:26:0f:54:08:58:56:28:f6:be:a0:84:
cb:e1:5c:39:fb:27:a7:1c:23:e4:39:21:09:f0:0e:
d4:b6:1a:86:6f:22:df:5d:70:4a:18:3c:03:e6:f1:
6d:99:0c:a9:17:cc:f8:6e:64:7c:57:76:4c:ff:0a:
28:6b:9e:5b:a2:ea:c5:ed:f9:c2:b1:4f:b3:a2:51:
42:25:69:3f:32:aa:4a:3c:4e:76:46:40:2d:2e:7d:
76:e4:5d:9d:06:c8:18:39:8e:a1:eb:80:ff:29:85:
12:f5:d6:50:4d:0f:ab:c8:5f:4b:f5:96:2a:41:31:
d8:b1:4d:d1:9b:71:2f:12:b8:ce:bc:c7:28:19:bb:
61:1d:ad:e7:61:39:fa:24:bc:7b:10:ce:4d:cf:53:
8a:e1:1b:c6:0a:b5:17:7d:30:3c:96:40:44:35:9a:
45:15:a3:8c:b2:27:42:11:f1:ff:02:bb:68:ac:f8:
02:9b:5a:21:65:0c:3f:2a:2b:32:3a:94:3e:b6:2c:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:95:B6:22:6B:C1:D2:43:71:C5:54:5D:58:DE:99:D4:C2:39:4F:32
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/v5W2ImvB0kNxxVRdWN6Z1MI5TzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.22.0/24
Signature Algorithm: sha256WithRSAEncryption
49:9e:88:b3:d8:7e:7a:16:00:c3:38:33:19:f0:57:67:8c:6b:
36:5c:0f:e9:3b:ad:02:24:26:30:c4:aa:51:59:ca:c2:35:2b:
10:57:95:7c:45:d5:37:20:4e:90:4e:2b:0c:60:1d:19:88:1d:
fd:ea:09:09:b3:a6:6a:18:01:c7:a3:9c:12:48:ef:9d:dc:a4:
80:cc:97:36:c4:38:68:9e:74:0e:cb:31:c2:ca:0f:57:d4:1c:
a1:d9:b9:63:33:9a:e9:7e:58:eb:12:92:48:99:dd:03:0b:a0:
5e:b4:95:30:65:3c:f5:bf:f7:59:dd:68:58:4e:eb:3a:56:82:
c2:c9:78:da:78:44:4a:0b:c9:87:86:3d:d3:d5:86:21:e6:5a:
83:78:3a:cb:f2:b7:79:44:d6:65:12:f7:b0:44:b3:85:62:c0:
8c:56:19:fb:89:85:0b:20:c0:30:4b:c7:df:46:8a:f5:44:29:
c2:1a:0c:2b:e8:aa:7c:4b:0b:d8:27:60:44:7f:46:45:75:92:
29:a3:b2:57:ac:51:92:74:18:e1:c3:ca:37:9f:70:4a:96:38:
58:fe:71:92:37:97:43:4d:5d:53:8a:27:fa:18:2e:b7:3f:b5:
2f:0d:be:a6:c0:53:a2:76:72:0c:36:1d:67:93:9f:52:61:69:
b5:54:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:56 2024 by rpki-client on console-ams.rpki-client.org