Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/KEEV6iou6kVQp0fwAlooNdS2ZFI.roa
File: KEEV6iou6kVQp0fwAlooNdS2ZFI.roa (raw, json)
Hash identifier: vpVGyo6h3ja47LzKiuHsFrJ+CpC2D4o9Y2f9YYgModk=
Subject key identifier: 28:41:15:EA:2A:2E:EA:45:50:A7:47:F0:02:5A:28:35:D4:B6:64:52
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 0191122ADCA4CB9F1C4EE2EF54ACF914B031
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/KEEV6iou6kVQp0fwAlooNdS2ZFI.roa
Signing time: Fri 02 Aug 2024 08:18:04 +0000
ROA not before: Fri 02 Aug 2024 08:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 195.66.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:2a:dc:a4:cb:9f:1c:4e:e2:ef:54:ac:f9:14:b0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Aug 2 08:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=284115ea2a2eea4550a747f0025a2835d4b66452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:82:a4:c5:f6:d0:5e:ca:06:a6:79:a9:8c:34:
00:fb:64:99:70:b0:ae:cf:8a:10:f5:70:5e:4f:50:
d2:d4:fc:ec:a3:05:35:32:10:2c:5b:ba:60:99:55:
76:69:08:c4:69:10:93:8d:d7:b3:a4:9d:b2:1d:59:
09:5d:1f:1e:05:3d:f0:ca:d4:9c:c0:4e:c0:58:d1:
a7:70:97:f1:a5:87:5a:f3:67:fd:e3:c0:30:60:5b:
58:1b:b9:d2:61:2a:e7:76:40:51:5d:4a:67:53:f1:
0e:9e:c8:5f:f5:d1:7c:97:fe:77:19:b5:72:30:56:
db:0a:d1:b4:e0:b5:04:33:3e:98:d5:7d:34:29:49:
86:21:7a:d1:df:fc:59:56:d2:fe:1f:3b:81:e0:1d:
18:70:ac:32:18:f6:3a:51:c2:ee:ee:10:b1:b1:53:
1a:d9:64:0b:24:1a:43:fb:89:61:0e:3e:5c:fc:5e:
65:37:28:ed:0c:ad:49:39:ca:77:90:1a:da:5a:f9:
ca:51:cc:82:c0:61:4f:01:45:30:1a:52:f7:cc:0d:
95:01:48:6f:a2:c1:1b:c7:4c:d8:13:f3:c9:d6:b6:
be:ad:b5:9a:8a:79:64:b0:03:9a:0c:d3:f2:8b:0c:
b8:1f:e4:ab:fb:be:47:77:17:bd:01:f5:48:5e:bb:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:15:EA:2A:2E:EA:45:50:A7:47:F0:02:5A:28:35:D4:B6:64:52
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/KEEV6iou6kVQp0fwAlooNdS2ZFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.107.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d7:71:b8:e2:e3:e9:f3:0d:ee:3a:1d:68:bb:7b:fb:8f:3b:
02:a6:0c:09:9c:1f:65:4b:0b:93:b6:83:a7:2c:8b:42:28:5f:
78:08:1e:ed:d3:ef:f5:08:dc:57:4a:5d:d6:35:4c:e7:ea:01:
91:c3:d4:73:70:50:6d:28:a0:31:47:e3:da:5d:09:b0:7e:e1:
8e:ca:f6:18:b3:17:11:e1:75:09:37:60:f7:61:82:1f:83:fa:
dd:21:19:38:fb:e5:73:60:87:ee:4d:b0:98:3e:2d:30:21:8b:
f6:1c:a3:dc:2f:74:73:42:76:df:02:78:91:7b:06:48:ab:20:
43:23:19:87:9f:4e:59:bb:1c:4f:e3:f2:70:14:ee:c3:ad:72:
46:89:47:f4:e1:f2:2f:de:8c:5a:4c:e9:58:41:65:f1:88:e5:
c1:2a:81:c1:8f:7d:37:bf:7f:69:eb:ed:53:f9:57:71:9f:85:
42:0c:e7:7b:f4:90:48:26:84:5b:0a:ee:10:f6:36:99:ee:52:
98:4e:2c:96:65:20:7e:92:fb:fe:47:00:d3:77:1f:9c:55:ce:
4e:e9:92:d3:ca:0e:c8:9a:58:2a:f7:1f:93:88:b9:7e:66:41:
cf:13:13:08:ec:95:59:3f:84:2d:11:29:05:fe:96:bb:b0:78:
d6:b0:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 23:19:26 2024 by rpki-client on console-fra.rpki-client.org